2012.01.10 10:40:02,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:40:02,notice,10.139.26.2,syslog-ng,Configuration reload request received, reloading configuration;
2012.01.10 10:40:04,info,10.139.26.2,sshd,Invalid user michael from 109.160.32.115 port 45220
2012.01.10 10:40:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:04,info,10.139.26.2,sshd,Failed password for invalid user michael from 109.160.32.115 port 45220 ssh2
2012.01.10 10:40:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55328 ssh2
2012.01.10 10:40:04,info,10.139.26.2,sshd,Connection closed by invalid user michael 109.160.32.115 port 45220 [preauth]
2012.01.10 10:40:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55328 [preauth]
2012.01.10 10:40:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 45290 ssh2
2012.01.10 10:40:08,info,10.139.26.2,sshd,Invalid user elasticsearch from 109.160.32.113 port 55400
2012.01.10 10:40:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:09,info,10.139.26.2,sshd,Failed password for invalid user elasticsearch from 109.160.32.113 port 55400 ssh2
2012.01.10 10:40:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 45290 [preauth]
2012.01.10 10:40:09,info,10.139.26.2,sshd,Connection closed by invalid user elasticsearch 109.160.32.113 port 55400 [preauth]
2012.01.10 10:40:12,info,10.139.26.2,sshd,Connection reset by 147.185.132.246 port 65244 [preauth]
2012.01.10 10:40:13,info,10.139.26.2,sshd,Invalid user jay from 109.160.32.113 port 56548
2012.01.10 10:40:13,info,10.139.26.2,sshd,Invalid user radio from 109.160.32.115 port 42944
2012.01.10 10:40:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:13,info,10.139.26.2,sshd,Failed password for invalid user radio from 109.160.32.115 port 42944 ssh2
2012.01.10 10:40:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:13,info,10.139.26.2,sshd,Failed password for invalid user jay from 109.160.32.113 port 56548 ssh2
2012.01.10 10:40:14,info,10.139.26.2,sshd,Connection closed by invalid user radio 109.160.32.115 port 42944 [preauth]
2012.01.10 10:40:14,info,10.139.26.2,sshd,Connection closed by invalid user jay 109.160.32.113 port 56548 [preauth]
2012.01.10 10:40:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 42996 ssh2
2012.01.10 10:40:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 42996 [preauth]
2012.01.10 10:40:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56582 ssh2
2012.01.10 10:40:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56582 [preauth]
2012.01.10 10:40:22,info,10.139.26.2,sshd,Invalid user jhf from 109.160.32.115 port 56964
2012.01.10 10:40:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:22,info,10.139.26.2,sshd,Failed password for invalid user jhf from 109.160.32.115 port 56964 ssh2
2012.01.10 10:40:22,info,10.139.26.2,sshd,Invalid user ben from 109.160.32.113 port 52254
2012.01.10 10:40:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:23,info,10.139.26.2,sshd,Connection closed by invalid user jhf 109.160.32.115 port 56964 [preauth]
2012.01.10 10:40:23,info,10.139.26.2,sshd,Failed password for invalid user ben from 109.160.32.113 port 52254 ssh2
2012.01.10 10:40:23,info,10.139.26.2,sshd,Connection closed by invalid user ben 109.160.32.113 port 52254 [preauth]
2012.01.10 10:40:27,info,10.139.26.2,sshd,Invalid user arya from 109.160.32.115 port 56972
2012.01.10 10:40:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:27,info,10.139.26.2,sshd,Failed password for invalid user arya from 109.160.32.115 port 56972 ssh2
2012.01.10 10:40:27,info,10.139.26.2,sshd,Connection closed by invalid user arya 109.160.32.115 port 56972 [preauth]
2012.01.10 10:40:27,info,10.139.26.2,sshd,Invalid user gzh from 109.160.32.113 port 52310
2012.01.10 10:40:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:28,info,10.139.26.2,sshd,Failed password for invalid user gzh from 109.160.32.113 port 52310 ssh2
2012.01.10 10:40:28,info,10.139.26.2,sshd,Connection closed by invalid user gzh 109.160.32.113 port 52310 [preauth]
2012.01.10 10:40:29,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 38726 ssh2
2012.01.10 10:40:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 38726 [preauth]
2012.01.10 10:40:31,info,10.139.26.2,sshd,Invalid user chrome from 109.160.32.115 port 56998
2012.01.10 10:40:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:32,info,10.139.26.2,sshd,Failed password for invalid user chrome from 109.160.32.115 port 56998 ssh2
2012.01.10 10:40:32,info,10.139.26.2,sshd,Invalid user iphone from 109.160.32.113 port 33652
2012.01.10 10:40:32,info,10.139.26.2,sshd,Connection closed by invalid user chrome 109.160.32.115 port 56998 [preauth]
2012.01.10 10:40:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:32,info,10.139.26.2,sshd,Failed password for invalid user iphone from 109.160.32.113 port 33652 ssh2
2012.01.10 10:40:32,info,10.139.26.2,sshd,Connection closed by invalid user iphone 109.160.32.113 port 33652 [preauth]
2012.01.10 10:40:37,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 34354
2012.01.10 10:40:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:37,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33684 ssh2
2012.01.10 10:40:37,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 34354 ssh2
2012.01.10 10:40:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33684 [preauth]
2012.01.10 10:40:37,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 34354 [preauth]
2012.01.10 10:40:38,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59712 ssh2
2012.01.10 10:40:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59712 [preauth]
2012.01.10 10:40:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33724 ssh2
2012.01.10 10:40:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33724 [preauth]
2012.01.10 10:40:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34456 ssh2
2012.01.10 10:40:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34456 [preauth]
2012.01.10 10:40:46,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 43930
2012.01.10 10:40:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:46,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 43930 ssh2
2012.01.10 10:40:46,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 43930 [preauth]
2012.01.10 10:40:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40174 ssh2
2012.01.10 10:40:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40174 [preauth]
2012.01.10 10:40:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43956 ssh2
2012.01.10 10:40:51,info,10.139.26.2,sshd,Invalid user test123 from 109.160.32.115 port 40206
2012.01.10 10:40:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43956 [preauth]
2012.01.10 10:40:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:51,info,10.139.26.2,sshd,Failed password for invalid user test123 from 109.160.32.115 port 40206 ssh2
2012.01.10 10:40:51,info,10.139.26.2,sshd,Connection closed by invalid user test123 109.160.32.115 port 40206 [preauth]
2012.01.10 10:40:55,info,10.139.26.2,sshd,Invalid user alex from 109.160.32.113 port 39500
2012.01.10 10:40:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:55,info,10.139.26.2,sshd,Failed password for invalid user alex from 109.160.32.113 port 39500 ssh2
2012.01.10 10:40:56,info,10.139.26.2,sshd,Connection closed by invalid user alex 109.160.32.113 port 39500 [preauth]
2012.01.10 10:40:56,info,10.139.26.2,sshd,Invalid user mongodb from 109.160.32.115 port 50272
2012.01.10 10:40:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:40:56,info,10.139.26.2,sshd,Failed password for invalid user mongodb from 109.160.32.115 port 50272 ssh2
2012.01.10 10:40:57,info,10.139.26.2,sshd,Connection closed by invalid user mongodb 109.160.32.115 port 50272 [preauth]
2012.01.10 10:41:00,info,10.139.26.2,sshd,Invalid user oscar from 109.160.32.113 port 39540
2012.01.10 10:41:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:00,info,10.139.26.2,sshd,Failed password for invalid user oscar from 109.160.32.113 port 39540 ssh2
2012.01.10 10:41:00,info,10.139.26.2,sshd,Connection closed by invalid user oscar 109.160.32.113 port 39540 [preauth]
2012.01.10 10:41:01,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 50304
2012.01.10 10:41:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:41:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:01,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 50304 ssh2
2012.01.10 10:41:01,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 50304 [preauth]
2012.01.10 10:41:04,info,10.139.26.2,sshd,Invalid user swetha from 109.160.32.113 port 44294
2012.01.10 10:41:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:04,info,10.139.26.2,sshd,Failed password for invalid user swetha from 109.160.32.113 port 44294 ssh2
2012.01.10 10:41:05,info,10.139.26.2,sshd,Connection closed by invalid user swetha 109.160.32.113 port 44294 [preauth]
2012.01.10 10:41:06,info,10.139.26.2,sshd,Invalid user jenkins from 109.160.32.115 port 46974
2012.01.10 10:41:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:06,info,10.139.26.2,sshd,Failed password for invalid user jenkins from 109.160.32.115 port 46974 ssh2
2012.01.10 10:41:06,info,10.139.26.2,sshd,Connection closed by invalid user jenkins 109.160.32.115 port 46974 [preauth]
2012.01.10 10:41:09,info,10.139.26.2,sshd,Invalid user oracle from 109.160.32.113 port 44324
2012.01.10 10:41:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:09,info,10.139.26.2,sshd,Failed password for invalid user oracle from 109.160.32.113 port 44324 ssh2
2012.01.10 10:41:09,info,10.139.26.2,sshd,Connection closed by invalid user oracle 109.160.32.113 port 44324 [preauth]
2012.01.10 10:41:11,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46998 ssh2
2012.01.10 10:41:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46998 [preauth]
2012.01.10 10:41:13,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.113 port 59102
2012.01.10 10:41:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:14,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.113 port 59102 ssh2
2012.01.10 10:41:14,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.113 port 59102 [preauth]
2012.01.10 10:41:15,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50438 ssh2
2012.01.10 10:41:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50438 [preauth]
2012.01.10 10:41:18,info,10.139.26.2,sshd,Invalid user cs378 from 109.160.32.113 port 59162
2012.01.10 10:41:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:18,info,10.139.26.2,sshd,Failed password for invalid user cs378 from 109.160.32.113 port 59162 ssh2
2012.01.10 10:41:18,info,10.139.26.2,sshd,Connection closed by invalid user cs378 109.160.32.113 port 59162 [preauth]
2012.01.10 10:41:20,info,10.139.26.2,sshd,Invalid user kingbase from 109.160.32.115 port 50522
2012.01.10 10:41:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:20,info,10.139.26.2,sshd,Failed password for invalid user kingbase from 109.160.32.115 port 50522 ssh2
2012.01.10 10:41:21,info,10.139.26.2,sshd,Connection closed by invalid user kingbase 109.160.32.115 port 50522 [preauth]
2012.01.10 10:41:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51692 ssh2
2012.01.10 10:41:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51692 [preauth]
2012.01.10 10:41:25,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57948 ssh2
2012.01.10 10:41:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57948 [preauth]
2012.01.10 10:41:27,info,10.139.26.2,sshd,Invalid user coder from 109.160.32.113 port 51730
2012.01.10 10:41:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:27,info,10.139.26.2,sshd,Failed password for invalid user coder from 109.160.32.113 port 51730 ssh2
2012.01.10 10:41:27,info,10.139.26.2,sshd,Connection closed by invalid user coder 109.160.32.113 port 51730 [preauth]
2012.01.10 10:41:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58012 ssh2
2012.01.10 10:41:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58012 [preauth]
2012.01.10 10:41:30,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 51392 ssh2
2012.01.10 10:41:30,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 51392:11: Bye Bye [preauth]
2012.01.10 10:41:30,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 51392 [preauth]
2012.01.10 10:41:32,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.113 port 54394
2012.01.10 10:41:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:32,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.113 port 54394 ssh2
2012.01.10 10:41:32,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.113 port 54394 [preauth]
2012.01.10 10:41:36,info,10.139.26.2,sshd,Invalid user rahul from 109.160.32.115 port 46596
2012.01.10 10:41:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:36,info,10.139.26.2,sshd,Failed password for invalid user rahul from 109.160.32.115 port 46596 ssh2
2012.01.10 10:41:36,info,10.139.26.2,sshd,Connection closed by invalid user rahul 109.160.32.115 port 46596 [preauth]
2012.01.10 10:41:37,info,10.139.26.2,sshd,Invalid user elasticsearch from 109.160.32.113 port 54446
2012.01.10 10:41:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:37,info,10.139.26.2,sshd,Failed password for invalid user elasticsearch from 109.160.32.113 port 54446 ssh2
2012.01.10 10:41:37,info,10.139.26.2,sshd,Connection closed by invalid user elasticsearch 109.160.32.113 port 54446 [preauth]
2012.01.10 10:41:41,info,10.139.26.2,sshd,Invalid user service from 109.160.32.113 port 54502
2012.01.10 10:41:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:42,info,10.139.26.2,sshd,Failed password for invalid user service from 109.160.32.113 port 54502 ssh2
2012.01.10 10:41:42,info,10.139.26.2,sshd,Connection closed by invalid user service 109.160.32.113 port 54502 [preauth]
2012.01.10 10:41:43,info,10.139.26.2,sshd,Invalid user recorder from 109.160.32.115 port 52750
2012.01.10 10:41:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:43,info,10.139.26.2,sshd,Failed password for invalid user recorder from 109.160.32.115 port 52750 ssh2
2012.01.10 10:41:43,info,10.139.26.2,sshd,Connection closed by invalid user recorder 109.160.32.115 port 52750 [preauth]
2012.01.10 10:41:46,info,10.139.26.2,sshd,Invalid user aishani from 109.160.32.113 port 53100
2012.01.10 10:41:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:46,info,10.139.26.2,sshd,Failed password for invalid user aishani from 109.160.32.113 port 53100 ssh2
2012.01.10 10:41:47,info,10.139.26.2,sshd,Connection closed by invalid user aishani 109.160.32.113 port 53100 [preauth]
2012.01.10 10:41:47,info,10.139.26.2,sshd,Invalid user rancher from 109.160.32.115 port 52812
2012.01.10 10:41:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:47,info,10.139.26.2,sshd,Failed password for invalid user rancher from 109.160.32.115 port 52812 ssh2
2012.01.10 10:41:48,info,10.139.26.2,sshd,Connection closed by invalid user rancher 109.160.32.115 port 52812 [preauth]
2012.01.10 10:41:51,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.113 port 53164
2012.01.10 10:41:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:51,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.113 port 53164 ssh2
2012.01.10 10:41:51,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.113 port 53164 [preauth]
2012.01.10 10:41:53,info,10.139.26.2,sshd,Invalid user teste from 109.160.32.115 port 34798
2012.01.10 10:41:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:41:53,info,10.139.26.2,sshd,Failed password for invalid user teste from 109.160.32.115 port 34798 ssh2
2012.01.10 10:41:53,info,10.139.26.2,sshd,Connection closed by invalid user teste 109.160.32.115 port 34798 [preauth]
2012.01.10 10:41:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37728 ssh2
2012.01.10 10:41:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37728 [preauth]
2012.01.10 10:41:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34842 ssh2
2012.01.10 10:41:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34842 [preauth]
2012.01.10 10:42:00,info,10.139.26.2,sshd,Invalid user rahul from 109.160.32.113 port 37764
2012.01.10 10:42:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:00,info,10.139.26.2,sshd,Failed password for invalid user rahul from 109.160.32.113 port 37764 ssh2
2012.01.10 10:42:00,info,10.139.26.2,sshd,Connection closed by invalid user rahul 109.160.32.113 port 37764 [preauth]
2012.01.10 10:42:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:42:02,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55046 ssh2
2012.01.10 10:42:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55046 [preauth]
2012.01.10 10:42:05,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 60828
2012.01.10 10:42:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:05,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 60828 ssh2
2012.01.10 10:42:05,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 60828 [preauth]
2012.01.10 10:42:06,info,10.139.26.2,sshd,Invalid user peter from 109.160.32.115 port 55094
2012.01.10 10:42:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:07,info,10.139.26.2,sshd,Failed password for invalid user peter from 109.160.32.115 port 55094 ssh2
2012.01.10 10:42:07,info,10.139.26.2,sshd,Connection closed by invalid user peter 109.160.32.115 port 55094 [preauth]
2012.01.10 10:42:10,info,10.139.26.2,sshd,Invalid user azure from 109.160.32.113 port 60898
2012.01.10 10:42:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:10,info,10.139.26.2,sshd,Failed password for invalid user azure from 109.160.32.113 port 60898 ssh2
2012.01.10 10:42:10,info,10.139.26.2,sshd,Connection closed by invalid user azure 109.160.32.113 port 60898 [preauth]
2012.01.10 10:42:12,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.115 port 46532
2012.01.10 10:42:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:12,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.115 port 46532 ssh2
2012.01.10 10:42:12,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.115 port 46532 [preauth]
2012.01.10 10:42:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45874 ssh2
2012.01.10 10:42:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45874 [preauth]
2012.01.10 10:42:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46538 ssh2
2012.01.10 10:42:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46538 [preauth]
2012.01.10 10:42:19,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.113 port 45924
2012.01.10 10:42:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:20,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.113 port 45924 ssh2
2012.01.10 10:42:20,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.113 port 45924 [preauth]
2012.01.10 10:42:22,info,10.139.26.2,sshd,Invalid user RB from 109.160.32.115 port 57966
2012.01.10 10:42:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:22,info,10.139.26.2,sshd,Failed password for invalid user RB from 109.160.32.115 port 57966 ssh2
2012.01.10 10:42:22,info,10.139.26.2,sshd,Connection closed by invalid user RB 109.160.32.115 port 57966 [preauth]
2012.01.10 10:42:24,info,10.139.26.2,sshd,Invalid user cs200 from 109.160.32.113 port 57718
2012.01.10 10:42:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:24,info,10.139.26.2,sshd,Failed password for invalid user cs200 from 109.160.32.113 port 57718 ssh2
2012.01.10 10:42:24,info,10.139.26.2,sshd,Connection closed by invalid user cs200 109.160.32.113 port 57718 [preauth]
2012.01.10 10:42:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58016 ssh2
2012.01.10 10:42:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58016 [preauth]
2012.01.10 10:42:29,info,10.139.26.2,sshd,Invalid user openclaw from 109.160.32.113 port 57776
2012.01.10 10:42:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:29,info,10.139.26.2,sshd,Failed password for invalid user openclaw from 109.160.32.113 port 57776 ssh2
2012.01.10 10:42:29,info,10.139.26.2,sshd,Connection closed by invalid user openclaw 109.160.32.113 port 57776 [preauth]
2012.01.10 10:42:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58056 ssh2
2012.01.10 10:42:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58056 [preauth]
2012.01.10 10:42:34,info,10.139.26.2,sshd,Invalid user nginx from 109.160.32.113 port 35976
2012.01.10 10:42:34,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55075 ssh2
2012.01.10 10:42:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:34,info,10.139.26.2,sshd,Failed password for invalid user nginx from 109.160.32.113 port 35976 ssh2
2012.01.10 10:42:34,info,10.139.26.2,sshd,Connection closed by invalid user nginx 109.160.32.113 port 35976 [preauth]
2012.01.10 10:42:34,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55075 [preauth]
2012.01.10 10:42:36,info,10.139.26.2,sshd,Invalid user zfh from 109.160.32.115 port 47680
2012.01.10 10:42:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:36,info,10.139.26.2,sshd,Failed password for invalid user zfh from 109.160.32.115 port 47680 ssh2
2012.01.10 10:42:36,info,10.139.26.2,sshd,Connection closed by invalid user zfh 109.160.32.115 port 47680 [preauth]
2012.01.10 10:42:37,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 41862 ssh2
2012.01.10 10:42:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 41862 [preauth]
2012.01.10 10:42:38,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 36020
2012.01.10 10:42:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:38,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 36020 ssh2
2012.01.10 10:42:38,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 36020 [preauth]
2012.01.10 10:42:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55412 ssh2
2012.01.10 10:42:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51646 ssh2
2012.01.10 10:42:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55412 [preauth]
2012.01.10 10:42:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51646 [preauth]
2012.01.10 10:42:47,info,10.139.26.2,sshd,Invalid user odoo16 from 109.160.32.115 port 55484
2012.01.10 10:42:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:47,info,10.139.26.2,sshd,Failed password for invalid user odoo16 from 109.160.32.115 port 55484 ssh2
2012.01.10 10:42:47,info,10.139.26.2,sshd,Connection closed by invalid user odoo16 109.160.32.115 port 55484 [preauth]
2012.01.10 10:42:47,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 51686
2012.01.10 10:42:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 51686 ssh2
2012.01.10 10:42:48,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 51686 [preauth]
2012.01.10 10:42:52,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.115 port 55528
2012.01.10 10:42:52,info,10.139.26.2,sshd,Invalid user opc from 109.160.32.113 port 56786
2012.01.10 10:42:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:52,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.115 port 55528 ssh2
2012.01.10 10:42:52,info,10.139.26.2,sshd,Failed password for invalid user opc from 109.160.32.113 port 56786 ssh2
2012.01.10 10:42:53,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.115 port 55528 [preauth]
2012.01.10 10:42:53,info,10.139.26.2,sshd,Connection closed by invalid user opc 109.160.32.113 port 56786 [preauth]
2012.01.10 10:42:57,info,10.139.26.2,sshd,Invalid user kevin from 109.160.32.113 port 56810
2012.01.10 10:42:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:42:57,info,10.139.26.2,sshd,Failed password for invalid user kevin from 109.160.32.113 port 56810 ssh2
2012.01.10 10:42:57,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55572 ssh2
2012.01.10 10:42:57,info,10.139.26.2,sshd,Connection closed by invalid user kevin 109.160.32.113 port 56810 [preauth]
2012.01.10 10:42:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55572 [preauth]
2012.01.10 10:43:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:43:02,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56838 ssh2
2012.01.10 10:43:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56838 [preauth]
2012.01.10 10:43:02,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55638 ssh2
2012.01.10 10:43:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55638 [preauth]
2012.01.10 10:43:06,info,10.139.26.2,sshd,Invalid user sam from 109.160.32.115 port 50558
2012.01.10 10:43:06,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34354 ssh2
2012.01.10 10:43:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34354 [preauth]
2012.01.10 10:43:06,info,10.139.26.2,sshd,Failed password for invalid user sam from 109.160.32.115 port 50558 ssh2
2012.01.10 10:43:07,info,10.139.26.2,sshd,Connection closed by invalid user sam 109.160.32.115 port 50558 [preauth]
2012.01.10 10:43:11,info,10.139.26.2,sshd,Invalid user ts3 from 109.160.32.113 port 34408
2012.01.10 10:43:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:11,info,10.139.26.2,sshd,Failed password for invalid user ts3 from 109.160.32.113 port 34408 ssh2
2012.01.10 10:43:11,info,10.139.26.2,sshd,Connection closed by invalid user ts3 109.160.32.113 port 34408 [preauth]
2012.01.10 10:43:11,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.115 port 50600
2012.01.10 10:43:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:12,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.115 port 50600 ssh2
2012.01.10 10:43:12,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.115 port 50600 [preauth]
2012.01.10 10:43:15,info,10.139.26.2,sshd,Invalid user rahul from 109.160.32.113 port 38428
2012.01.10 10:43:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:15,info,10.139.26.2,sshd,Failed password for invalid user rahul from 109.160.32.113 port 38428 ssh2
2012.01.10 10:43:16,info,10.139.26.2,sshd,Connection closed by invalid user rahul 109.160.32.113 port 38428 [preauth]
2012.01.10 10:43:16,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 40310
2012.01.10 10:43:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:16,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 40310 ssh2
2012.01.10 10:43:17,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 40310 [preauth]
2012.01.10 10:43:20,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.113 port 38516
2012.01.10 10:43:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:20,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.113 port 38516 ssh2
2012.01.10 10:43:20,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.113 port 38516 [preauth]
2012.01.10 10:43:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40372 ssh2
2012.01.10 10:43:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40372 [preauth]
2012.01.10 10:43:25,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46616 ssh2
2012.01.10 10:43:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46616 [preauth]
2012.01.10 10:43:26,info,10.139.26.2,sshd,Invalid user fedora from 109.160.32.115 port 57612
2012.01.10 10:43:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:26,info,10.139.26.2,sshd,Failed password for invalid user fedora from 109.160.32.115 port 57612 ssh2
2012.01.10 10:43:26,info,10.139.26.2,sshd,Connection closed by invalid user fedora 109.160.32.115 port 57612 [preauth]
2012.01.10 10:43:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46696 ssh2
2012.01.10 10:43:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46696 [preauth]
2012.01.10 10:43:31,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 57664
2012.01.10 10:43:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:31,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 57664 ssh2
2012.01.10 10:43:31,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 57664 [preauth]
2012.01.10 10:43:34,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52962 ssh2
2012.01.10 10:43:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52962 [preauth]
2012.01.10 10:43:36,info,10.139.26.2,sshd,Invalid user vyos from 109.160.32.115 port 56068
2012.01.10 10:43:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:36,info,10.139.26.2,sshd,Failed password for invalid user vyos from 109.160.32.115 port 56068 ssh2
2012.01.10 10:43:37,info,10.139.26.2,sshd,Connection closed by invalid user vyos 109.160.32.115 port 56068 [preauth]
2012.01.10 10:43:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52994 ssh2
2012.01.10 10:43:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52994 [preauth]
2012.01.10 10:43:41,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 56094
2012.01.10 10:43:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:41,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 56094 ssh2
2012.01.10 10:43:41,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 56094 [preauth]
2012.01.10 10:43:43,info,10.139.26.2,sshd,Invalid user omm from 109.160.32.113 port 58344
2012.01.10 10:43:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:43,info,10.139.26.2,sshd,Failed password for invalid user omm from 109.160.32.113 port 58344 ssh2
2012.01.10 10:43:44,info,10.139.26.2,sshd,Connection closed by invalid user omm 109.160.32.113 port 58344 [preauth]
2012.01.10 10:43:46,info,10.139.26.2,sshd,Invalid user redmine from 109.160.32.115 port 42414
2012.01.10 10:43:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:46,info,10.139.26.2,sshd,Failed password for invalid user redmine from 109.160.32.115 port 42414 ssh2
2012.01.10 10:43:46,info,10.139.26.2,sshd,Connection closed by invalid user redmine 109.160.32.115 port 42414 [preauth]
2012.01.10 10:43:48,info,10.139.26.2,sshd,Invalid user user10 from 109.160.32.113 port 58376
2012.01.10 10:43:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:48,info,10.139.26.2,sshd,Failed password for invalid user user10 from 109.160.32.113 port 58376 ssh2
2012.01.10 10:43:48,info,10.139.26.2,sshd,Connection closed by invalid user user10 109.160.32.113 port 58376 [preauth]
2012.01.10 10:43:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57018 ssh2
2012.01.10 10:43:52,info,10.139.26.2,sshd,Invalid user mailuser from 109.160.32.113 port 33392
2012.01.10 10:43:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57018 [preauth]
2012.01.10 10:43:53,info,10.139.26.2,sshd,Failed password for invalid user mailuser from 109.160.32.113 port 33392 ssh2
2012.01.10 10:43:53,info,10.139.26.2,sshd,Connection closed by invalid user mailuser 109.160.32.113 port 33392 [preauth]
2012.01.10 10:43:57,info,10.139.26.2,sshd,Invalid user sdadmin from 109.160.32.115 port 57088
2012.01.10 10:43:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:57,info,10.139.26.2,sshd,Invalid user term2 from 109.160.32.113 port 33408
2012.01.10 10:43:57,info,10.139.26.2,sshd,Failed password for invalid user sdadmin from 109.160.32.115 port 57088 ssh2
2012.01.10 10:43:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:43:57,info,10.139.26.2,sshd,Failed password for invalid user term2 from 109.160.32.113 port 33408 ssh2
2012.01.10 10:43:57,info,10.139.26.2,sshd,Connection closed by invalid user sdadmin 109.160.32.115 port 57088 [preauth]
2012.01.10 10:43:57,info,10.139.26.2,sshd,Connection closed by invalid user term2 109.160.32.113 port 33408 [preauth]
2012.01.10 10:44:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:44:02,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 47348
2012.01.10 10:44:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:02,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 47348 ssh2
2012.01.10 10:44:02,info,10.139.26.2,sshd,Invalid user ftpuser1 from 109.160.32.115 port 42814
2012.01.10 10:44:02,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 47348 [preauth]
2012.01.10 10:44:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:02,info,10.139.26.2,sshd,Failed password for invalid user ftpuser1 from 109.160.32.115 port 42814 ssh2
2012.01.10 10:44:02,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser1 109.160.32.115 port 42814 [preauth]
2012.01.10 10:44:06,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 47386 ssh2
2012.01.10 10:44:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 47386 [preauth]
2012.01.10 10:44:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 42876 ssh2
2012.01.10 10:44:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 42876 [preauth]
2012.01.10 10:44:11,info,10.139.26.2,sshd,Invalid user zhuangyue from 109.160.32.113 port 47422
2012.01.10 10:44:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:11,info,10.139.26.2,sshd,Failed password for invalid user zhuangyue from 109.160.32.113 port 47422 ssh2
2012.01.10 10:44:11,info,10.139.26.2,sshd,Connection closed by invalid user zhuangyue 109.160.32.113 port 47422 [preauth]
2012.01.10 10:44:12,info,10.139.26.2,sshd,Invalid user qian from 109.160.32.115 port 57286
2012.01.10 10:44:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:12,info,10.139.26.2,sshd,Failed password for invalid user qian from 109.160.32.115 port 57286 ssh2
2012.01.10 10:44:12,info,10.139.26.2,sshd,Connection closed by invalid user qian 109.160.32.115 port 57286 [preauth]
2012.01.10 10:44:15,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.113 port 34544
2012.01.10 10:44:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:16,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.113 port 34544 ssh2
2012.01.10 10:44:16,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.113 port 34544 [preauth]
2012.01.10 10:44:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57336 ssh2
2012.01.10 10:44:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57336 [preauth]
2012.01.10 10:44:18,info,10.139.26.2,sshd,Invalid user debian from 80.94.95.115 port 20614
2012.01.10 10:44:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:19,info,10.139.26.2,sshd,Failed password for invalid user debian from 80.94.95.115 port 20614 ssh2
2012.01.10 10:44:20,info,10.139.26.2,sshd,Connection closed by invalid user debian 80.94.95.115 port 20614 [preauth]
2012.01.10 10:44:20,info,10.139.26.2,sshd,Invalid user playground from 109.160.32.113 port 34646
2012.01.10 10:44:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:20,info,10.139.26.2,sshd,Failed password for invalid user playground from 109.160.32.113 port 34646 ssh2
2012.01.10 10:44:21,info,10.139.26.2,sshd,Connection closed by invalid user playground 109.160.32.113 port 34646 [preauth]
2012.01.10 10:44:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 45576 ssh2
2012.01.10 10:44:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 45576 [preauth]
2012.01.10 10:44:25,info,10.139.26.2,sshd,Invalid user monish from 109.160.32.113 port 41202
2012.01.10 10:44:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:25,info,10.139.26.2,sshd,Failed password for invalid user monish from 109.160.32.113 port 41202 ssh2
2012.01.10 10:44:25,info,10.139.26.2,sshd,Connection closed by invalid user monish 109.160.32.113 port 41202 [preauth]
2012.01.10 10:44:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 45662 ssh2
2012.01.10 10:44:26,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62075 ssh2
2012.01.10 10:44:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 45662 [preauth]
2012.01.10 10:44:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62075 [preauth]
2012.01.10 10:44:29,info,10.139.26.2,sshd,Invalid user localhost from 109.160.32.113 port 41238
2012.01.10 10:44:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:30,info,10.139.26.2,sshd,Failed password for invalid user localhost from 109.160.32.113 port 41238 ssh2
2012.01.10 10:44:30,info,10.139.26.2,sshd,Connection closed by invalid user localhost 109.160.32.113 port 41238 [preauth]
2012.01.10 10:44:31,info,10.139.26.2,sshd,Invalid user orange from 109.160.32.115 port 45752
2012.01.10 10:44:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:31,info,10.139.26.2,sshd,Failed password for invalid user orange from 109.160.32.115 port 45752 ssh2
2012.01.10 10:44:31,info,10.139.26.2,sshd,Connection closed by invalid user orange 109.160.32.115 port 45752 [preauth]
2012.01.10 10:44:34,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 36262
2012.01.10 10:44:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:35,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 36262 ssh2
2012.01.10 10:44:35,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 36262 [preauth]
2012.01.10 10:44:37,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55854 ssh2
2012.01.10 10:44:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55854 [preauth]
2012.01.10 10:44:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36312 ssh2
2012.01.10 10:44:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36312 [preauth]
2012.01.10 10:44:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54646 ssh2
2012.01.10 10:44:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54646 [preauth]
2012.01.10 10:44:43,info,10.139.26.2,sshd,Invalid user gitlab from 109.160.32.113 port 41840
2012.01.10 10:44:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:43,info,10.139.26.2,sshd,Failed password for invalid user gitlab from 109.160.32.113 port 41840 ssh2
2012.01.10 10:44:43,info,10.139.26.2,sshd,Connection closed by invalid user gitlab 109.160.32.113 port 41840 [preauth]
2012.01.10 10:44:47,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54702 ssh2
2012.01.10 10:44:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54702 [preauth]
2012.01.10 10:44:48,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 41898
2012.01.10 10:44:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:48,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 41898 ssh2
2012.01.10 10:44:48,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 41898 [preauth]
2012.01.10 10:44:53,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39134 ssh2
2012.01.10 10:44:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39134 [preauth]
2012.01.10 10:44:53,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48056 ssh2
2012.01.10 10:44:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48056 [preauth]
2012.01.10 10:44:58,info,10.139.26.2,sshd,Invalid user azureuser from 109.160.32.115 port 39168
2012.01.10 10:44:58,info,10.139.26.2,sshd,Invalid user es from 109.160.32.113 port 48094
2012.01.10 10:44:58,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:44:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:44:58,info,10.139.26.2,sshd,Failed password for invalid user azureuser from 109.160.32.115 port 39168 ssh2
2012.01.10 10:44:58,info,10.139.26.2,sshd,Failed password for invalid user es from 109.160.32.113 port 48094 ssh2
2012.01.10 10:44:58,info,10.139.26.2,sshd,Connection closed by invalid user azureuser 109.160.32.115 port 39168 [preauth]
2012.01.10 10:44:58,info,10.139.26.2,sshd,Connection closed by invalid user es 109.160.32.113 port 48094 [preauth]
2012.01.10 10:45:02,info,10.139.26.2,sshd,Invalid user admin123 from 109.160.32.113 port 48494
2012.01.10 10:45:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:03,info,10.139.26.2,sshd,Failed password for invalid user admin123 from 109.160.32.113 port 48494 ssh2
2012.01.10 10:45:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 35398 ssh2
2012.01.10 10:45:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 35398 [preauth]
2012.01.10 10:45:03,info,10.139.26.2,sshd,Connection closed by invalid user admin123 109.160.32.113 port 48494 [preauth]
2012.01.10 10:45:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48548 ssh2
2012.01.10 10:45:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48548 [preauth]
2012.01.10 10:45:08,info,10.139.26.2,sshd,Invalid user demo from 109.160.32.115 port 35436
2012.01.10 10:45:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:08,info,10.139.26.2,sshd,Failed password for invalid user demo from 109.160.32.115 port 35436 ssh2
2012.01.10 10:45:08,info,10.139.26.2,sshd,Connection closed by invalid user demo 109.160.32.115 port 35436 [preauth]
2012.01.10 10:45:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57554 ssh2
2012.01.10 10:45:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57554 [preauth]
2012.01.10 10:45:12,info,10.139.26.2,sshd,Invalid user hamed from 109.160.32.115 port 48114
2012.01.10 10:45:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:12,info,10.139.26.2,sshd,Failed password for invalid user hamed from 109.160.32.115 port 48114 ssh2
2012.01.10 10:45:13,info,10.139.26.2,sshd,Connection closed by invalid user hamed 109.160.32.115 port 48114 [preauth]
2012.01.10 10:45:16,info,10.139.26.2,sshd,Invalid user user18 from 109.160.32.113 port 57634
2012.01.10 10:45:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:17,info,10.139.26.2,sshd,Failed password for invalid user user18 from 109.160.32.113 port 57634 ssh2
2012.01.10 10:45:17,info,10.139.26.2,sshd,Connection closed by invalid user user18 109.160.32.113 port 57634 [preauth]
2012.01.10 10:45:17,info,10.139.26.2,sshd,Invalid user aiuser from 109.160.32.115 port 48178
2012.01.10 10:45:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:18,info,10.139.26.2,sshd,Failed password for invalid user aiuser from 109.160.32.115 port 48178 ssh2
2012.01.10 10:45:18,info,10.139.26.2,sshd,Connection closed by invalid user aiuser 109.160.32.115 port 48178 [preauth]
2012.01.10 10:45:18,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 44964 ssh2
2012.01.10 10:45:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 44964 [preauth]
2012.01.10 10:45:21,info,10.139.26.2,sshd,Invalid user ansible from 109.160.32.113 port 57704
2012.01.10 10:45:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:21,info,10.139.26.2,sshd,Failed password for invalid user ansible from 109.160.32.113 port 57704 ssh2
2012.01.10 10:45:21,info,10.139.26.2,sshd,Connection closed by invalid user ansible 109.160.32.113 port 57704 [preauth]
2012.01.10 10:45:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53586 ssh2
2012.01.10 10:45:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53586 [preauth]
2012.01.10 10:45:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48716 ssh2
2012.01.10 10:45:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48716 [preauth]
2012.01.10 10:45:27,info,10.139.26.2,sshd,Invalid user git from 109.160.32.115 port 53614
2012.01.10 10:45:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:28,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.115 port 53614 ssh2
2012.01.10 10:45:28,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.115 port 53614 [preauth]
2012.01.10 10:45:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48770 ssh2
2012.01.10 10:45:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48770 [preauth]
2012.01.10 10:45:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37894 ssh2
2012.01.10 10:45:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37894 [preauth]
2012.01.10 10:45:35,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.113 port 37492
2012.01.10 10:45:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:35,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.113 port 37492 ssh2
2012.01.10 10:45:35,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.113 port 37492 [preauth]
2012.01.10 10:45:37,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.115 port 37976
2012.01.10 10:45:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:37,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.115 port 37976 ssh2
2012.01.10 10:45:37,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.115 port 37976 [preauth]
2012.01.10 10:45:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37520 ssh2
2012.01.10 10:45:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37520 [preauth]
2012.01.10 10:45:42,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 36396
2012.01.10 10:45:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:42,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 36396 ssh2
2012.01.10 10:45:42,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 36396 [preauth]
2012.01.10 10:45:44,info,10.139.26.2,sshd,Invalid user rock from 109.160.32.113 port 54854
2012.01.10 10:45:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:44,info,10.139.26.2,sshd,Failed password for invalid user rock from 109.160.32.113 port 54854 ssh2
2012.01.10 10:45:44,info,10.139.26.2,sshd,Connection closed by invalid user rock 109.160.32.113 port 54854 [preauth]
2012.01.10 10:45:46,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 36464
2012.01.10 10:45:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:47,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 36464 ssh2
2012.01.10 10:45:48,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 36464 [preauth]
2012.01.10 10:45:49,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 54896
2012.01.10 10:45:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:49,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 54896 ssh2
2012.01.10 10:45:49,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 54896 [preauth]
2012.01.10 10:45:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 59164 ssh2
2012.01.10 10:45:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 59164 [preauth]
2012.01.10 10:45:54,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 58850
2012.01.10 10:45:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:54,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 58850 ssh2
2012.01.10 10:45:54,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 58850 [preauth]
2012.01.10 10:45:56,info,10.139.26.2,sshd,Invalid user jayalakshmi from 109.160.32.115 port 59190
2012.01.10 10:45:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:45:56,info,10.139.26.2,sshd,Failed password for invalid user jayalakshmi from 109.160.32.115 port 59190 ssh2
2012.01.10 10:45:56,info,10.139.26.2,sshd,Connection closed by invalid user jayalakshmi 109.160.32.115 port 59190 [preauth]
2012.01.10 10:45:58,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:45:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58924 ssh2
2012.01.10 10:45:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58924 [preauth]
2012.01.10 10:46:02,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 59216
2012.01.10 10:46:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:02,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 59216 ssh2
2012.01.10 10:46:02,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 59216 [preauth]
2012.01.10 10:46:03,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 47544
2012.01.10 10:46:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:03,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 47544 ssh2
2012.01.10 10:46:03,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 47544 [preauth]
2012.01.10 10:46:07,info,10.139.26.2,sshd,Invalid user playground from 109.160.32.115 port 50920
2012.01.10 10:46:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:08,info,10.139.26.2,sshd,Failed password for invalid user playground from 109.160.32.115 port 50920 ssh2
2012.01.10 10:46:08,info,10.139.26.2,sshd,Invalid user tomcat from 109.160.32.113 port 47636
2012.01.10 10:46:08,info,10.139.26.2,sshd,Connection closed by invalid user playground 109.160.32.115 port 50920 [preauth]
2012.01.10 10:46:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:08,info,10.139.26.2,sshd,Failed password for invalid user tomcat from 109.160.32.113 port 47636 ssh2
2012.01.10 10:46:08,info,10.139.26.2,sshd,Connection closed by invalid user tomcat 109.160.32.113 port 47636 [preauth]
2012.01.10 10:46:13,info,10.139.26.2,sshd,Invalid user gk from 109.160.32.113 port 33982
2012.01.10 10:46:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:13,info,10.139.26.2,sshd,Failed password for invalid user gk from 109.160.32.113 port 33982 ssh2
2012.01.10 10:46:13,info,10.139.26.2,sshd,Connection closed by invalid user gk 109.160.32.113 port 33982 [preauth]
2012.01.10 10:46:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53144 ssh2
2012.01.10 10:46:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53144 [preauth]
2012.01.10 10:46:17,info,10.139.26.2,sshd,Invalid user nexus from 109.160.32.115 port 53208
2012.01.10 10:46:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34030 ssh2
2012.01.10 10:46:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34030 [preauth]
2012.01.10 10:46:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:17,info,10.139.26.2,sshd,Failed password for invalid user nexus from 109.160.32.115 port 53208 ssh2
2012.01.10 10:46:18,info,10.139.26.2,sshd,Connection closed by invalid user nexus 109.160.32.115 port 53208 [preauth]
2012.01.10 10:46:22,info,10.139.26.2,sshd,Invalid user myuser from 109.160.32.113 port 34086
2012.01.10 10:46:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:22,info,10.139.26.2,sshd,Failed password for invalid user myuser from 109.160.32.113 port 34086 ssh2
2012.01.10 10:46:22,info,10.139.26.2,sshd,Connection closed by invalid user myuser 109.160.32.113 port 34086 [preauth]
2012.01.10 10:46:23,info,10.139.26.2,sshd,Invalid user us81 from 109.160.32.115 port 54508
2012.01.10 10:46:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:23,info,10.139.26.2,sshd,Failed password for invalid user us81 from 109.160.32.115 port 54508 ssh2
2012.01.10 10:46:23,info,10.139.26.2,sshd,Connection closed by invalid user us81 109.160.32.115 port 54508 [preauth]
2012.01.10 10:46:26,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.113 port 47974
2012.01.10 10:46:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:27,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.113 port 47974 ssh2
2012.01.10 10:46:27,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.113 port 47974 [preauth]
2012.01.10 10:46:28,info,10.139.26.2,sshd,Invalid user user18 from 109.160.32.115 port 54536
2012.01.10 10:46:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:28,info,10.139.26.2,sshd,Failed password for invalid user user18 from 109.160.32.115 port 54536 ssh2
2012.01.10 10:46:28,info,10.139.26.2,sshd,Connection closed by invalid user user18 109.160.32.115 port 54536 [preauth]
2012.01.10 10:46:30,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61500 ssh2
2012.01.10 10:46:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61500 [preauth]
2012.01.10 10:46:31,info,10.139.26.2,sshd,Invalid user chloe from 109.160.32.113 port 48024
2012.01.10 10:46:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:31,info,10.139.26.2,sshd,Failed password for invalid user chloe from 109.160.32.113 port 48024 ssh2
2012.01.10 10:46:32,info,10.139.26.2,sshd,Connection closed by invalid user chloe 109.160.32.113 port 48024 [preauth]
2012.01.10 10:46:33,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40350 ssh2
2012.01.10 10:46:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40350 [preauth]
2012.01.10 10:46:36,info,10.139.26.2,sshd,Invalid user rohit from 109.160.32.113 port 40726
2012.01.10 10:46:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:36,info,10.139.26.2,sshd,Failed password for invalid user rohit from 109.160.32.113 port 40726 ssh2
2012.01.10 10:46:36,info,10.139.26.2,sshd,Connection closed by invalid user rohit 109.160.32.113 port 40726 [preauth]
2012.01.10 10:46:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40416 ssh2
2012.01.10 10:46:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40416 [preauth]
2012.01.10 10:46:40,info,10.139.26.2,sshd,Invalid user super from 109.160.32.113 port 40752
2012.01.10 10:46:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:40,info,10.139.26.2,sshd,Failed password for invalid user super from 109.160.32.113 port 40752 ssh2
2012.01.10 10:46:41,info,10.139.26.2,sshd,Connection closed by invalid user super 109.160.32.113 port 40752 [preauth]
2012.01.10 10:46:42,info,10.139.26.2,sshd,Invalid user ispapps from 109.160.32.115 port 46354
2012.01.10 10:46:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:42,info,10.139.26.2,sshd,Failed password for invalid user ispapps from 109.160.32.115 port 46354 ssh2
2012.01.10 10:46:42,info,10.139.26.2,sshd,Connection closed by invalid user ispapps 109.160.32.115 port 46354 [preauth]
2012.01.10 10:46:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51790 ssh2
2012.01.10 10:46:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51790 [preauth]
2012.01.10 10:46:47,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.115 port 46384
2012.01.10 10:46:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:47,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.115 port 46384 ssh2
2012.01.10 10:46:47,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.115 port 46384 [preauth]
2012.01.10 10:46:49,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.113 port 51876
2012.01.10 10:46:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:50,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.113 port 51876 ssh2
2012.01.10 10:46:50,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.113 port 51876 [preauth]
2012.01.10 10:46:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46424 ssh2
2012.01.10 10:46:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46424 [preauth]
2012.01.10 10:46:54,info,10.139.26.2,sshd,Invalid user devops from 109.160.32.113 port 59648
2012.01.10 10:46:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:54,info,10.139.26.2,sshd,Failed password for invalid user devops from 109.160.32.113 port 59648 ssh2
2012.01.10 10:46:54,info,10.139.26.2,sshd,Connection closed by invalid user devops 109.160.32.113 port 59648 [preauth]
2012.01.10 10:46:56,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 47240
2012.01.10 10:46:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:56,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 47240 ssh2
2012.01.10 10:46:57,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 47240 [preauth]
2012.01.10 10:46:58,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:46:58,info,10.139.26.2,sshd,Invalid user odoo17 from 109.160.32.113 port 59748
2012.01.10 10:46:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:46:59,info,10.139.26.2,sshd,Failed password for invalid user odoo17 from 109.160.32.113 port 59748 ssh2
2012.01.10 10:46:59,info,10.139.26.2,sshd,Connection closed by invalid user odoo17 109.160.32.113 port 59748 [preauth]
2012.01.10 10:47:01,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47280 ssh2
2012.01.10 10:47:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47280 [preauth]
2012.01.10 10:47:03,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.113 port 37718
2012.01.10 10:47:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:04,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.113 port 37718 ssh2
2012.01.10 10:47:04,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.113 port 37718 [preauth]
2012.01.10 10:47:06,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.115 port 57642
2012.01.10 10:47:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:06,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.115 port 57642 ssh2
2012.01.10 10:47:06,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.115 port 57642 [preauth]
2012.01.10 10:47:08,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 37782
2012.01.10 10:47:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:08,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 37782 ssh2
2012.01.10 10:47:08,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 37782 [preauth]
2012.01.10 10:47:11,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57708 ssh2
2012.01.10 10:47:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57708 [preauth]
2012.01.10 10:47:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33314 ssh2
2012.01.10 10:47:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33314 [preauth]
2012.01.10 10:47:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 44434 ssh2
2012.01.10 10:47:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 44434 [preauth]
2012.01.10 10:47:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33356 ssh2
2012.01.10 10:47:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33356 [preauth]
2012.01.10 10:47:21,info,10.139.26.2,sshd,Invalid user daniel from 109.160.32.113 port 33426
2012.01.10 10:47:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 44480 ssh2
2012.01.10 10:47:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:21,info,10.139.26.2,sshd,Failed password for invalid user daniel from 109.160.32.113 port 33426 ssh2
2012.01.10 10:47:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 44480 [preauth]
2012.01.10 10:47:22,info,10.139.26.2,sshd,Connection closed by invalid user daniel 109.160.32.113 port 33426 [preauth]
2012.01.10 10:47:26,info,10.139.26.2,sshd,Invalid user user16 from 109.160.32.113 port 33778
2012.01.10 10:47:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:26,info,10.139.26.2,sshd,Failed password for invalid user user16 from 109.160.32.113 port 33778 ssh2
2012.01.10 10:47:26,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.115 port 45294
2012.01.10 10:47:26,info,10.139.26.2,sshd,Connection closed by invalid user user16 109.160.32.113 port 33778 [preauth]
2012.01.10 10:47:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:27,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.115 port 45294 ssh2
2012.01.10 10:47:27,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.115 port 45294 [preauth]
2012.01.10 10:47:31,info,10.139.26.2,sshd,Invalid user christianna from 109.160.32.113 port 33824
2012.01.10 10:47:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:31,info,10.139.26.2,sshd,Failed password for invalid user christianna from 109.160.32.113 port 33824 ssh2
2012.01.10 10:47:31,info,10.139.26.2,sshd,Connection closed by invalid user christianna 109.160.32.113 port 33824 [preauth]
2012.01.10 10:47:31,info,10.139.26.2,sshd,Invalid user uploader from 109.160.32.115 port 45388
2012.01.10 10:47:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:32,info,10.139.26.2,sshd,Failed password for invalid user uploader from 109.160.32.115 port 45388 ssh2
2012.01.10 10:47:32,info,10.139.26.2,sshd,Connection closed by invalid user uploader 109.160.32.115 port 45388 [preauth]
2012.01.10 10:47:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56004 ssh2
2012.01.10 10:47:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56004 [preauth]
2012.01.10 10:47:36,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.115 port 50494
2012.01.10 10:47:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:36,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.115 port 50494 ssh2
2012.01.10 10:47:36,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.115 port 50494 [preauth]
2012.01.10 10:47:40,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 56040
2012.01.10 10:47:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:40,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 56040 ssh2
2012.01.10 10:47:40,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 56040 [preauth]
2012.01.10 10:47:41,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 50576
2012.01.10 10:47:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:41,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 50576 ssh2
2012.01.10 10:47:41,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 50576 [preauth]
2012.01.10 10:47:44,info,10.139.26.2,sshd,Invalid user gha from 109.160.32.113 port 35112
2012.01.10 10:47:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:45,info,10.139.26.2,sshd,Failed password for invalid user gha from 109.160.32.113 port 35112 ssh2
2012.01.10 10:47:45,info,10.139.26.2,sshd,Connection closed by invalid user gha 109.160.32.113 port 35112 [preauth]
2012.01.10 10:47:46,info,10.139.26.2,sshd,Invalid user minecraft from 109.160.32.115 port 52118
2012.01.10 10:47:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:46,info,10.139.26.2,sshd,Failed password for invalid user minecraft from 109.160.32.115 port 52118 ssh2
2012.01.10 10:47:46,info,10.139.26.2,sshd,Connection closed by invalid user minecraft 109.160.32.115 port 52118 [preauth]
2012.01.10 10:47:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35184 ssh2
2012.01.10 10:47:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35184 [preauth]
2012.01.10 10:47:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52224 ssh2
2012.01.10 10:47:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52224 [preauth]
2012.01.10 10:47:53,info,10.139.26.2,sshd,Invalid user ftp from 109.160.32.113 port 50072
2012.01.10 10:47:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:53,info,10.139.26.2,sshd,Failed password for invalid user ftp from 109.160.32.113 port 50072 ssh2
2012.01.10 10:47:53,info,10.139.26.2,sshd,Connection closed by invalid user ftp 109.160.32.113 port 50072 [preauth]
2012.01.10 10:47:56,info,10.139.26.2,sshd,Invalid user yiran from 109.160.32.115 port 56426
2012.01.10 10:47:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:56,info,10.139.26.2,sshd,Failed password for invalid user yiran from 109.160.32.115 port 56426 ssh2
2012.01.10 10:47:56,info,10.139.26.2,sshd,Connection closed by invalid user yiran 109.160.32.115 port 56426 [preauth]
2012.01.10 10:47:58,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:47:58,info,10.139.26.2,sshd,Invalid user server from 109.160.32.113 port 50114
2012.01.10 10:47:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:47:58,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.113 port 50114 ssh2
2012.01.10 10:47:58,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.113 port 50114 [preauth]
2012.01.10 10:48:01,info,10.139.26.2,sshd,Invalid user openclaw from 109.160.32.115 port 56476
2012.01.10 10:48:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:01,info,10.139.26.2,sshd,Failed password for invalid user openclaw from 109.160.32.115 port 56476 ssh2
2012.01.10 10:48:02,info,10.139.26.2,sshd,Connection closed by invalid user openclaw 109.160.32.115 port 56476 [preauth]
2012.01.10 10:48:03,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 34460
2012.01.10 10:48:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:03,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 34460 ssh2
2012.01.10 10:48:03,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 34460 [preauth]
2012.01.10 10:48:06,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 56762
2012.01.10 10:48:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:06,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 56762 ssh2
2012.01.10 10:48:06,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 56762 [preauth]
2012.01.10 10:48:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34538 ssh2
2012.01.10 10:48:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34538 [preauth]
2012.01.10 10:48:10,info,10.139.26.2,sshd,Invalid user palworld from 109.160.32.115 port 56842
2012.01.10 10:48:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:11,info,10.139.26.2,sshd,Failed password for invalid user palworld from 109.160.32.115 port 56842 ssh2
2012.01.10 10:48:11,info,10.139.26.2,sshd,Connection closed by invalid user palworld 109.160.32.115 port 56842 [preauth]
2012.01.10 10:48:12,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.113 port 58854
2012.01.10 10:48:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:12,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.113 port 58854 ssh2
2012.01.10 10:48:12,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.113 port 58854 [preauth]
2012.01.10 10:48:16,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 49974
2012.01.10 10:48:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:16,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 49974 ssh2
2012.01.10 10:48:16,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 49974 [preauth]
2012.01.10 10:48:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58910 ssh2
2012.01.10 10:48:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58910 [preauth]
2012.01.10 10:48:20,info,10.139.26.2,sshd,Invalid user test from 47.184.58.103 port 45396
2012.01.10 10:48:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:20,info,10.139.26.2,sshd,Failed password for invalid user test from 47.184.58.103 port 45396 ssh2
2012.01.10 10:48:21,info,10.139.26.2,sshd,Invalid user webadmin from 109.160.32.113 port 58940
2012.01.10 10:48:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:21,info,10.139.26.2,sshd,Invalid user iphone from 109.160.32.115 port 50024
2012.01.10 10:48:21,info,10.139.26.2,sshd,Failed password for invalid user webadmin from 109.160.32.113 port 58940 ssh2
2012.01.10 10:48:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:21,info,10.139.26.2,sshd,Failed password for invalid user iphone from 109.160.32.115 port 50024 ssh2
2012.01.10 10:48:21,info,10.139.26.2,sshd,Connection closed by invalid user iphone 109.160.32.115 port 50024 [preauth]
2012.01.10 10:48:21,info,10.139.26.2,sshd,Connection closed by invalid user webadmin 109.160.32.113 port 58940 [preauth]
2012.01.10 10:48:25,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55345 ssh2
2012.01.10 10:48:25,info,10.139.26.2,sshd,Invalid user drcomadmin from 109.160.32.113 port 39658
2012.01.10 10:48:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55345 [preauth]
2012.01.10 10:48:25,info,10.139.26.2,sshd,Invalid user bilal from 34.123.134.194 port 58974
2012.01.10 10:48:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:25,info,10.139.26.2,sshd,Failed password for invalid user bilal from 34.123.134.194 port 58974 ssh2
2012.01.10 10:48:26,info,10.139.26.2,sshd,Failed password for invalid user drcomadmin from 109.160.32.113 port 39658 ssh2
2012.01.10 10:48:26,info,10.139.26.2,sshd,Connection closed by invalid user drcomadmin 109.160.32.113 port 39658 [preauth]
2012.01.10 10:48:26,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 58974:11: Bye Bye [preauth]
2012.01.10 10:48:26,info,10.139.26.2,sshd,Disconnected from invalid user bilal 34.123.134.194 port 58974 [preauth]
2012.01.10 10:48:26,info,10.139.26.2,sshd,Invalid user kingbase from 109.160.32.115 port 43950
2012.01.10 10:48:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:26,info,10.139.26.2,sshd,Failed password for invalid user kingbase from 109.160.32.115 port 43950 ssh2
2012.01.10 10:48:27,info,10.139.26.2,sshd,Connection closed by invalid user kingbase 109.160.32.115 port 43950 [preauth]
2012.01.10 10:48:29,info,10.139.26.2,sshd,Invalid user admins from 109.160.32.113 port 39724
2012.01.10 10:48:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:30,info,10.139.26.2,sshd,Failed password for invalid user admins from 109.160.32.113 port 39724 ssh2
2012.01.10 10:48:30,info,10.139.26.2,sshd,Connection closed by invalid user admins 109.160.32.113 port 39724 [preauth]
2012.01.10 10:48:32,info,10.139.26.2,sshd,Invalid user jenkins from 109.160.32.115 port 58676
2012.01.10 10:48:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:32,info,10.139.26.2,sshd,Failed password for invalid user jenkins from 109.160.32.115 port 58676 ssh2
2012.01.10 10:48:32,info,10.139.26.2,sshd,Connection closed by invalid user jenkins 109.160.32.115 port 58676 [preauth]
2012.01.10 10:48:34,info,10.139.26.2,sshd,Invalid user benoit from 109.160.32.113 port 45598
2012.01.10 10:48:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:34,info,10.139.26.2,sshd,Failed password for invalid user benoit from 109.160.32.113 port 45598 ssh2
2012.01.10 10:48:34,info,10.139.26.2,sshd,Connection closed by invalid user benoit 109.160.32.113 port 45598 [preauth]
2012.01.10 10:48:37,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.115 port 58710
2012.01.10 10:48:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:37,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.115 port 58710 ssh2
2012.01.10 10:48:37,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.115 port 58710 [preauth]
2012.01.10 10:48:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45620 ssh2
2012.01.10 10:48:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45620 [preauth]
2012.01.10 10:48:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58764 ssh2
2012.01.10 10:48:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58764 [preauth]
2012.01.10 10:48:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34768 ssh2
2012.01.10 10:48:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34768 [preauth]
2012.01.10 10:48:46,info,10.139.26.2,sshd,Invalid user arma3server from 109.160.32.115 port 41744
2012.01.10 10:48:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:46,info,10.139.26.2,sshd,Failed password for invalid user arma3server from 109.160.32.115 port 41744 ssh2
2012.01.10 10:48:47,info,10.139.26.2,sshd,Connection closed by invalid user arma3server 109.160.32.115 port 41744 [preauth]
2012.01.10 10:48:47,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 34814
2012.01.10 10:48:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:47,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 34814 ssh2
2012.01.10 10:48:48,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 34814 [preauth]
2012.01.10 10:48:51,info,10.139.26.2,sshd,Invalid user russo from 109.160.32.115 port 41826
2012.01.10 10:48:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:51,info,10.139.26.2,sshd,Failed password for invalid user russo from 109.160.32.115 port 41826 ssh2
2012.01.10 10:48:52,info,10.139.26.2,sshd,Connection closed by invalid user russo 109.160.32.115 port 41826 [preauth]
2012.01.10 10:48:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38650 ssh2
2012.01.10 10:48:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38650 [preauth]
2012.01.10 10:48:56,info,10.139.26.2,sshd,Invalid user kubernetes from 109.160.32.115 port 54818
2012.01.10 10:48:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:56,info,10.139.26.2,sshd,Failed password for invalid user kubernetes from 109.160.32.115 port 54818 ssh2
2012.01.10 10:48:56,info,10.139.26.2,sshd,Connection closed by invalid user kubernetes 109.160.32.115 port 54818 [preauth]
2012.01.10 10:48:57,info,10.139.26.2,sshd,Invalid user Admin from 109.160.32.113 port 38680
2012.01.10 10:48:57,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:48:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:48:57,info,10.139.26.2,sshd,Failed password for invalid user Admin from 109.160.32.113 port 38680 ssh2
2012.01.10 10:48:57,info,10.139.26.2,sshd,Connection closed by invalid user Admin 109.160.32.113 port 38680 [preauth]
2012.01.10 10:49:01,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.115 port 54908
2012.01.10 10:49:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:02,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.115 port 54908 ssh2
2012.01.10 10:49:02,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.115 port 54908 [preauth]
2012.01.10 10:49:02,info,10.139.26.2,sshd,Failed password for operator from 109.160.32.113 port 37134 ssh2
2012.01.10 10:49:02,info,10.139.26.2,sshd,Connection closed by authenticating user operator 109.160.32.113 port 37134 [preauth]
2012.01.10 10:49:06,info,10.139.26.2,sshd,Invalid user user2 from 109.160.32.115 port 39616
2012.01.10 10:49:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37182 ssh2
2012.01.10 10:49:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37182 [preauth]
2012.01.10 10:49:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:07,info,10.139.26.2,sshd,Failed password for invalid user user2 from 109.160.32.115 port 39616 ssh2
2012.01.10 10:49:08,info,10.139.26.2,sshd,Connection closed by invalid user user2 109.160.32.115 port 39616 [preauth]
2012.01.10 10:49:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37218 ssh2
2012.01.10 10:49:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37218 [preauth]
2012.01.10 10:49:12,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 39668
2012.01.10 10:49:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:13,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 39668 ssh2
2012.01.10 10:49:13,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 39668 [preauth]
2012.01.10 10:49:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37656 ssh2
2012.01.10 10:49:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37656 [preauth]
2012.01.10 10:49:16,info,10.139.26.2,sshd,Invalid user ops from 109.160.32.115 port 36206
2012.01.10 10:49:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:17,info,10.139.26.2,sshd,Failed password for invalid user ops from 109.160.32.115 port 36206 ssh2
2012.01.10 10:49:17,info,10.139.26.2,sshd,Connection closed by invalid user ops 109.160.32.115 port 36206 [preauth]
2012.01.10 10:49:21,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.113 port 37746
2012.01.10 10:49:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:21,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.113 port 37746 ssh2
2012.01.10 10:49:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36284 ssh2
2012.01.10 10:49:21,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.113 port 37746 [preauth]
2012.01.10 10:49:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36284 [preauth]
2012.01.10 10:49:23,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 48064 ssh2
2012.01.10 10:49:24,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 48064 [preauth]
2012.01.10 10:49:25,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.113 port 34912
2012.01.10 10:49:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:26,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.113 port 34912 ssh2
2012.01.10 10:49:26,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.113 port 34912 [preauth]
2012.01.10 10:49:26,info,10.139.26.2,sshd,Invalid user hduser from 109.160.32.115 port 56390
2012.01.10 10:49:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:26,info,10.139.26.2,sshd,Failed password for invalid user hduser from 109.160.32.115 port 56390 ssh2
2012.01.10 10:49:26,info,10.139.26.2,sshd,Connection closed by invalid user hduser 109.160.32.115 port 56390 [preauth]
2012.01.10 10:49:30,info,10.139.26.2,sshd,Invalid user prueba from 109.160.32.113 port 34984
2012.01.10 10:49:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:30,info,10.139.26.2,sshd,Failed password for invalid user prueba from 109.160.32.113 port 34984 ssh2
2012.01.10 10:49:30,info,10.139.26.2,sshd,Connection closed by invalid user prueba 109.160.32.113 port 34984 [preauth]
2012.01.10 10:49:31,info,10.139.26.2,sshd,Invalid user openvpn from 109.160.32.115 port 56450
2012.01.10 10:49:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:32,info,10.139.26.2,sshd,Failed password for invalid user openvpn from 109.160.32.115 port 56450 ssh2
2012.01.10 10:49:32,info,10.139.26.2,sshd,Connection closed by invalid user openvpn 109.160.32.115 port 56450 [preauth]
2012.01.10 10:49:35,info,10.139.26.2,sshd,Invalid user florida1 from 109.160.32.113 port 54620
2012.01.10 10:49:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:35,info,10.139.26.2,sshd,Failed password for invalid user florida1 from 109.160.32.113 port 54620 ssh2
2012.01.10 10:49:35,info,10.139.26.2,sshd,Connection closed by invalid user florida1 109.160.32.113 port 54620 [preauth]
2012.01.10 10:49:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47618 ssh2
2012.01.10 10:49:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47618 [preauth]
2012.01.10 10:49:39,info,10.139.26.2,sshd,Invalid user sysupdate from 109.160.32.113 port 54684
2012.01.10 10:49:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:39,info,10.139.26.2,sshd,Failed password for invalid user sysupdate from 109.160.32.113 port 54684 ssh2
2012.01.10 10:49:40,info,10.139.26.2,sshd,Connection closed by invalid user sysupdate 109.160.32.113 port 54684 [preauth]
2012.01.10 10:49:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47670 ssh2
2012.01.10 10:49:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47670 [preauth]
2012.01.10 10:49:44,info,10.139.26.2,sshd,Invalid user arma3server from 109.160.32.113 port 50058
2012.01.10 10:49:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:44,info,10.139.26.2,sshd,Failed password for invalid user arma3server from 109.160.32.113 port 50058 ssh2
2012.01.10 10:49:44,info,10.139.26.2,sshd,Connection closed by invalid user arma3server 109.160.32.113 port 50058 [preauth]
2012.01.10 10:49:47,info,10.139.26.2,sshd,Invalid user doris from 109.160.32.115 port 52028
2012.01.10 10:49:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:47,info,10.139.26.2,sshd,Failed password for invalid user doris from 109.160.32.115 port 52028 ssh2
2012.01.10 10:49:48,info,10.139.26.2,sshd,Connection closed by invalid user doris 109.160.32.115 port 52028 [preauth]
2012.01.10 10:49:48,info,10.139.26.2,sshd,Invalid user dspace from 109.160.32.113 port 50158
2012.01.10 10:49:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:49,info,10.139.26.2,sshd,Failed password for invalid user dspace from 109.160.32.113 port 50158 ssh2
2012.01.10 10:49:49,info,10.139.26.2,sshd,Connection closed by invalid user dspace 109.160.32.113 port 50158 [preauth]
2012.01.10 10:49:49,info,10.139.26.2,sshd,Invalid user ubuntu from 34.123.134.194 port 57092
2012.01.10 10:49:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:49,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 34.123.134.194 port 57092 ssh2
2012.01.10 10:49:49,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 57092:11: Bye Bye [preauth]
2012.01.10 10:49:49,info,10.139.26.2,sshd,Disconnected from invalid user ubuntu 34.123.134.194 port 57092 [preauth]
2012.01.10 10:49:51,info,10.139.26.2,sshd,Invalid user desktop from 109.160.32.115 port 52090
2012.01.10 10:49:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:51,info,10.139.26.2,sshd,Failed password for invalid user desktop from 109.160.32.115 port 52090 ssh2
2012.01.10 10:49:52,info,10.139.26.2,sshd,Connection closed by invalid user desktop 109.160.32.115 port 52090 [preauth]
2012.01.10 10:49:53,info,10.139.26.2,sshd,Invalid user student from 109.160.32.113 port 43484
2012.01.10 10:49:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:53,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.113 port 43484 ssh2
2012.01.10 10:49:53,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.113 port 43484 [preauth]
2012.01.10 10:49:56,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34092 ssh2
2012.01.10 10:49:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34092 [preauth]
2012.01.10 10:49:57,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:49:58,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.113 port 43584
2012.01.10 10:49:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:49:58,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.113 port 43584 ssh2
2012.01.10 10:49:58,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.113 port 43584 [preauth]
2012.01.10 10:50:02,info,10.139.26.2,sshd,Invalid user master from 109.160.32.115 port 57208
2012.01.10 10:50:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:02,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.115 port 57208 ssh2
2012.01.10 10:50:02,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.115 port 57208 [preauth]
2012.01.10 10:50:03,info,10.139.26.2,sshd,Invalid user martin from 109.160.32.113 port 33514
2012.01.10 10:50:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:03,info,10.139.26.2,sshd,Failed password for invalid user martin from 109.160.32.113 port 33514 ssh2
2012.01.10 10:50:03,info,10.139.26.2,sshd,Connection closed by invalid user martin 109.160.32.113 port 33514 [preauth]
2012.01.10 10:50:07,info,10.139.26.2,sshd,Invalid user adminuser from 109.160.32.115 port 57258
2012.01.10 10:50:07,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 33550
2012.01.10 10:50:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:07,info,10.139.26.2,sshd,Failed password for invalid user adminuser from 109.160.32.115 port 57258 ssh2
2012.01.10 10:50:07,info,10.139.26.2,sshd,Connection closed by invalid user adminuser 109.160.32.115 port 57258 [preauth]
2012.01.10 10:50:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:08,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 33550 ssh2
2012.01.10 10:50:08,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 33550 [preauth]
2012.01.10 10:50:12,info,10.139.26.2,sshd,Invalid user openclaw from 109.160.32.113 port 58516
2012.01.10 10:50:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46618 ssh2
2012.01.10 10:50:12,info,10.139.26.2,sshd,Failed password for invalid user openclaw from 109.160.32.113 port 58516 ssh2
2012.01.10 10:50:12,info,10.139.26.2,sshd,Connection closed by invalid user openclaw 109.160.32.113 port 58516 [preauth]
2012.01.10 10:50:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46618 [preauth]
2012.01.10 10:50:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58572 ssh2
2012.01.10 10:50:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58572 [preauth]
2012.01.10 10:50:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46668 ssh2
2012.01.10 10:50:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46668 [preauth]
2012.01.10 10:50:21,info,10.139.26.2,sshd,Invalid user admin2 from 109.160.32.113 port 58626
2012.01.10 10:50:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46750 ssh2
2012.01.10 10:50:21,info,10.139.26.2,sshd,Failed password for invalid user admin2 from 109.160.32.113 port 58626 ssh2
2012.01.10 10:50:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46750 [preauth]
2012.01.10 10:50:21,info,10.139.26.2,sshd,Connection closed by invalid user admin2 109.160.32.113 port 58626 [preauth]
2012.01.10 10:50:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 54648 ssh2
2012.01.10 10:50:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 54648 [preauth]
2012.01.10 10:50:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58382 ssh2
2012.01.10 10:50:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58382 [preauth]
2012.01.10 10:50:26,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.115 port 44948
2012.01.10 10:50:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:27,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.115 port 44948 ssh2
2012.01.10 10:50:27,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.115 port 44948 [preauth]
2012.01.10 10:50:30,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.113 port 58428
2012.01.10 10:50:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:30,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.113 port 58428 ssh2
2012.01.10 10:50:30,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.113 port 58428 [preauth]
2012.01.10 10:50:31,info,10.139.26.2,sshd,Invalid user azureuser from 109.160.32.115 port 44992
2012.01.10 10:50:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:31,info,10.139.26.2,sshd,Failed password for invalid user azureuser from 109.160.32.115 port 44992 ssh2
2012.01.10 10:50:31,info,10.139.26.2,sshd,Connection closed by invalid user azureuser 109.160.32.115 port 44992 [preauth]
2012.01.10 10:50:35,info,10.139.26.2,sshd,Invalid user apollo from 109.160.32.113 port 53082
2012.01.10 10:50:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:35,info,10.139.26.2,sshd,Failed password for invalid user apollo from 109.160.32.113 port 53082 ssh2
2012.01.10 10:50:35,info,10.139.26.2,sshd,Connection closed by invalid user apollo 109.160.32.113 port 53082 [preauth]
2012.01.10 10:50:35,info,10.139.26.2,sshd,Invalid user ikea from 109.160.32.115 port 54356
2012.01.10 10:50:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:35,info,10.139.26.2,sshd,Failed password for invalid user ikea from 109.160.32.115 port 54356 ssh2
2012.01.10 10:50:36,info,10.139.26.2,sshd,Connection closed by invalid user ikea 109.160.32.115 port 54356 [preauth]
2012.01.10 10:50:39,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 53140
2012.01.10 10:50:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:39,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 53140 ssh2
2012.01.10 10:50:40,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 53140 [preauth]
2012.01.10 10:50:41,info,10.139.26.2,sshd,Invalid user milad from 109.160.32.115 port 54420
2012.01.10 10:50:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:41,info,10.139.26.2,sshd,Failed password for invalid user milad from 109.160.32.115 port 54420 ssh2
2012.01.10 10:50:41,info,10.139.26.2,sshd,Connection closed by invalid user milad 109.160.32.115 port 54420 [preauth]
2012.01.10 10:50:44,info,10.139.26.2,sshd,Invalid user pratik from 109.160.32.113 port 53228
2012.01.10 10:50:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:44,info,10.139.26.2,sshd,Failed password for invalid user pratik from 109.160.32.113 port 53228 ssh2
2012.01.10 10:50:44,info,10.139.26.2,sshd,Connection closed by invalid user pratik 109.160.32.113 port 53228 [preauth]
2012.01.10 10:50:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34442 ssh2
2012.01.10 10:50:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34442 [preauth]
2012.01.10 10:50:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53296 ssh2
2012.01.10 10:50:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53296 [preauth]
2012.01.10 10:50:50,info,10.139.26.2,sshd,Invalid user minecraft from 109.160.32.115 port 34558
2012.01.10 10:50:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:50,info,10.139.26.2,sshd,Failed password for invalid user minecraft from 109.160.32.115 port 34558 ssh2
2012.01.10 10:50:51,info,10.139.26.2,sshd,Connection closed by invalid user minecraft 109.160.32.115 port 34558 [preauth]
2012.01.10 10:50:53,info,10.139.26.2,sshd,Invalid user paas from 109.160.32.113 port 49712
2012.01.10 10:50:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:53,info,10.139.26.2,sshd,Failed password for invalid user paas from 109.160.32.113 port 49712 ssh2
2012.01.10 10:50:53,info,10.139.26.2,sshd,Connection closed by invalid user paas 109.160.32.113 port 49712 [preauth]
2012.01.10 10:50:55,info,10.139.26.2,sshd,Invalid user yzb from 109.160.32.115 port 50224
2012.01.10 10:50:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:50:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:55,info,10.139.26.2,sshd,Failed password for invalid user yzb from 109.160.32.115 port 50224 ssh2
2012.01.10 10:50:56,info,10.139.26.2,sshd,Connection closed by invalid user yzb 109.160.32.115 port 50224 [preauth]
2012.01.10 10:50:57,info,10.139.26.2,sshd,Invalid user kailin from 109.160.32.113 port 49762
2012.01.10 10:50:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:50:58,info,10.139.26.2,sshd,Failed password for invalid user kailin from 109.160.32.113 port 49762 ssh2
2012.01.10 10:50:58,info,10.139.26.2,sshd,Connection closed by invalid user kailin 109.160.32.113 port 49762 [preauth]
2012.01.10 10:51:00,info,10.139.26.2,sshd,Invalid user myuser from 109.160.32.115 port 50338
2012.01.10 10:51:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:00,info,10.139.26.2,sshd,Failed password for invalid user myuser from 109.160.32.115 port 50338 ssh2
2012.01.10 10:51:00,info,10.139.26.2,sshd,Connection closed by invalid user myuser 109.160.32.115 port 50338 [preauth]
2012.01.10 10:51:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41974 ssh2
2012.01.10 10:51:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41974 [preauth]
2012.01.10 10:51:05,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39928 ssh2
2012.01.10 10:51:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39928 [preauth]
2012.01.10 10:51:06,warning,10.139.26.2,iec104_slave,Connection rejected 45.148.10.33 
2012.01.10 10:51:07,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.113 port 42004
2012.01.10 10:51:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:08,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.113 port 42004 ssh2
2012.01.10 10:51:08,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.113 port 42004 [preauth]
2012.01.10 10:51:10,info,10.139.26.2,sshd,Invalid user djangouser from 109.160.32.115 port 39990
2012.01.10 10:51:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:10,info,10.139.26.2,sshd,Failed password for invalid user djangouser from 109.160.32.115 port 39990 ssh2
2012.01.10 10:51:10,info,10.139.26.2,sshd,Connection closed by invalid user djangouser 109.160.32.115 port 39990 [preauth]
2012.01.10 10:51:11,info,10.139.26.2,sshd,Invalid user rajat from 34.123.134.194 port 55210
2012.01.10 10:51:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:11,info,10.139.26.2,sshd,Failed password for invalid user rajat from 34.123.134.194 port 55210 ssh2
2012.01.10 10:51:11,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 55210:11: Bye Bye [preauth]
2012.01.10 10:51:11,info,10.139.26.2,sshd,Disconnected from invalid user rajat 34.123.134.194 port 55210 [preauth]
2012.01.10 10:51:12,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 53384
2012.01.10 10:51:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:12,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 53384 ssh2
2012.01.10 10:51:12,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 53384 [preauth]
2012.01.10 10:51:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 38238 ssh2
2012.01.10 10:51:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 38238 [preauth]
2012.01.10 10:51:16,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.113 port 53446
2012.01.10 10:51:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:16,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.113 port 53446 ssh2
2012.01.10 10:51:17,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.113 port 53446 [preauth]
2012.01.10 10:51:19,info,10.139.26.2,sshd,Invalid user customer from 109.160.32.115 port 38270
2012.01.10 10:51:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:20,info,10.139.26.2,sshd,Failed password for invalid user customer from 109.160.32.115 port 38270 ssh2
2012.01.10 10:51:20,info,10.139.26.2,sshd,Connection closed by invalid user customer 109.160.32.115 port 38270 [preauth]
2012.01.10 10:51:21,info,10.139.26.2,sshd,Invalid user riccardo from 109.160.32.113 port 53530
2012.01.10 10:51:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:21,info,10.139.26.2,sshd,Failed password for invalid user riccardo from 109.160.32.113 port 53530 ssh2
2012.01.10 10:51:21,info,10.139.26.2,sshd,Connection closed by invalid user riccardo 109.160.32.113 port 53530 [preauth]
2012.01.10 10:51:24,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 52134
2012.01.10 10:51:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:25,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 52134 ssh2
2012.01.10 10:51:25,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 52134 [preauth]
2012.01.10 10:51:25,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44994 ssh2
2012.01.10 10:51:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44994 [preauth]
2012.01.10 10:51:29,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52158 ssh2
2012.01.10 10:51:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52158 [preauth]
2012.01.10 10:51:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45040 ssh2
2012.01.10 10:51:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45040 [preauth]
2012.01.10 10:51:34,info,10.139.26.2,sshd,Invalid user apache from 109.160.32.115 port 53734
2012.01.10 10:51:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:34,info,10.139.26.2,sshd,Failed password for invalid user apache from 109.160.32.115 port 53734 ssh2
2012.01.10 10:51:35,info,10.139.26.2,sshd,Connection closed by invalid user apache 109.160.32.115 port 53734 [preauth]
2012.01.10 10:51:35,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 51170 ssh2
2012.01.10 10:51:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46864 ssh2
2012.01.10 10:51:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46864 [preauth]
2012.01.10 10:51:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 51170 [preauth]
2012.01.10 10:51:39,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.113 port 46896
2012.01.10 10:51:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:40,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.113 port 46896 ssh2
2012.01.10 10:51:40,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.113 port 46896 [preauth]
2012.01.10 10:51:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53766 ssh2
2012.01.10 10:51:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53766 [preauth]
2012.01.10 10:51:44,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 56246
2012.01.10 10:51:45,info,10.139.26.2,sshd,Invalid user steam from 109.160.32.113 port 52382
2012.01.10 10:51:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:45,info,10.139.26.2,sshd,Failed password for invalid user steam from 109.160.32.113 port 52382 ssh2
2012.01.10 10:51:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:45,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 56246 ssh2
2012.01.10 10:51:45,info,10.139.26.2,sshd,Connection closed by invalid user steam 109.160.32.113 port 52382 [preauth]
2012.01.10 10:51:45,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 56246 [preauth]
2012.01.10 10:51:49,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.115 port 56310
2012.01.10 10:51:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:49,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.115 port 56310 ssh2
2012.01.10 10:51:49,info,10.139.26.2,sshd,Invalid user hadoop from 109.160.32.113 port 52428
2012.01.10 10:51:49,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.115 port 56310 [preauth]
2012.01.10 10:51:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:49,info,10.139.26.2,sshd,Failed password for invalid user hadoop from 109.160.32.113 port 52428 ssh2
2012.01.10 10:51:49,info,10.139.26.2,sshd,Connection closed by invalid user hadoop 109.160.32.113 port 52428 [preauth]
2012.01.10 10:51:54,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.113 port 43712
2012.01.10 10:51:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:54,info,10.139.26.2,sshd,Invalid user joel from 109.160.32.115 port 38364
2012.01.10 10:51:54,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.113 port 43712 ssh2
2012.01.10 10:51:54,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.113 port 43712 [preauth]
2012.01.10 10:51:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:54,info,10.139.26.2,sshd,Failed password for invalid user joel from 109.160.32.115 port 38364 ssh2
2012.01.10 10:51:54,info,10.139.26.2,sshd,Connection closed by invalid user joel 109.160.32.115 port 38364 [preauth]
2012.01.10 10:51:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:51:58,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 38438
2012.01.10 10:51:58,info,10.139.26.2,sshd,Invalid user grid from 109.160.32.113 port 43794
2012.01.10 10:51:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:59,info,10.139.26.2,sshd,Failed password for invalid user grid from 109.160.32.113 port 43794 ssh2
2012.01.10 10:51:59,info,10.139.26.2,sshd,Connection closed by invalid user grid 109.160.32.113 port 43794 [preauth]
2012.01.10 10:51:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:51:59,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 38438 ssh2
2012.01.10 10:51:59,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 38438 [preauth]
2012.01.10 10:52:03,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.113 port 43696
2012.01.10 10:52:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:04,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.113 port 43696 ssh2
2012.01.10 10:52:04,info,10.139.26.2,sshd,Invalid user user78 from 109.160.32.115 port 57008
2012.01.10 10:52:04,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.113 port 43696 [preauth]
2012.01.10 10:52:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:04,info,10.139.26.2,sshd,Failed password for invalid user user78 from 109.160.32.115 port 57008 ssh2
2012.01.10 10:52:04,info,10.139.26.2,sshd,Connection closed by invalid user user78 109.160.32.115 port 57008 [preauth]
2012.01.10 10:52:08,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.115 port 57128
2012.01.10 10:52:09,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.113 port 43792
2012.01.10 10:52:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:09,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.113 port 43792 ssh2
2012.01.10 10:52:09,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.113 port 43792 [preauth]
2012.01.10 10:52:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:09,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.115 port 57128 ssh2
2012.01.10 10:52:09,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.115 port 57128 [preauth]
2012.01.10 10:52:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33596 ssh2
2012.01.10 10:52:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33596 [preauth]
2012.01.10 10:52:14,info,10.139.26.2,sshd,Invalid user ai from 109.160.32.115 port 58288
2012.01.10 10:52:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:14,info,10.139.26.2,sshd,Failed password for invalid user ai from 109.160.32.115 port 58288 ssh2
2012.01.10 10:52:14,info,10.139.26.2,sshd,Connection closed by invalid user ai 109.160.32.115 port 58288 [preauth]
2012.01.10 10:52:18,info,10.139.26.2,sshd,Invalid user gitlab from 109.160.32.113 port 33642
2012.01.10 10:52:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:18,info,10.139.26.2,sshd,Failed password for invalid user gitlab from 109.160.32.113 port 33642 ssh2
2012.01.10 10:52:18,info,10.139.26.2,sshd,Connection closed by invalid user gitlab 109.160.32.113 port 33642 [preauth]
2012.01.10 10:52:18,info,10.139.26.2,sshd,Invalid user mapingyuan from 109.160.32.115 port 58330
2012.01.10 10:52:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:18,info,10.139.26.2,sshd,Failed password for invalid user mapingyuan from 109.160.32.115 port 58330 ssh2
2012.01.10 10:52:19,info,10.139.26.2,sshd,Connection closed by invalid user mapingyuan 109.160.32.115 port 58330 [preauth]
2012.01.10 10:52:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 60338 ssh2
2012.01.10 10:52:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 60338 [preauth]
2012.01.10 10:52:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53184 ssh2
2012.01.10 10:52:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53184 [preauth]
2012.01.10 10:52:23,info,10.139.26.2,sshd,Invalid user tempuser from 109.160.32.115 port 45746
2012.01.10 10:52:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:24,info,10.139.26.2,sshd,Failed password for invalid user tempuser from 109.160.32.115 port 45746 ssh2
2012.01.10 10:52:24,info,10.139.26.2,sshd,Connection closed by invalid user tempuser 109.160.32.115 port 45746 [preauth]
2012.01.10 10:52:27,info,10.139.26.2,sshd,Invalid user service from 109.160.32.113 port 53226
2012.01.10 10:52:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:27,info,10.139.26.2,sshd,Failed password for invalid user service from 109.160.32.113 port 53226 ssh2
2012.01.10 10:52:27,info,10.139.26.2,sshd,Connection closed by invalid user service 109.160.32.113 port 53226 [preauth]
2012.01.10 10:52:28,info,10.139.26.2,sshd,Invalid user techuser from 109.160.32.115 port 45786
2012.01.10 10:52:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:28,info,10.139.26.2,sshd,Failed password for invalid user techuser from 109.160.32.115 port 45786 ssh2
2012.01.10 10:52:29,info,10.139.26.2,sshd,Connection closed by invalid user techuser 109.160.32.115 port 45786 [preauth]
2012.01.10 10:52:30,info,10.139.26.2,sshd,Invalid user amir from 34.123.134.194 port 53324
2012.01.10 10:52:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:30,info,10.139.26.2,sshd,Failed password for invalid user amir from 34.123.134.194 port 53324 ssh2
2012.01.10 10:52:30,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 53324:11: Bye Bye [preauth]
2012.01.10 10:52:30,info,10.139.26.2,sshd,Disconnected from invalid user amir 34.123.134.194 port 53324 [preauth]
2012.01.10 10:52:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55624 ssh2
2012.01.10 10:52:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55624 [preauth]
2012.01.10 10:52:33,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.115 port 36942
2012.01.10 10:52:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:34,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.115 port 36942 ssh2
2012.01.10 10:52:34,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.115 port 36942 [preauth]
2012.01.10 10:52:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55652 ssh2
2012.01.10 10:52:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55652 [preauth]
2012.01.10 10:52:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37004 ssh2
2012.01.10 10:52:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37004 [preauth]
2012.01.10 10:52:41,info,10.139.26.2,sshd,Invalid user admin from 2.57.121.25 port 65146
2012.01.10 10:52:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:41,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 65146 ssh2
2012.01.10 10:52:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55668 ssh2
2012.01.10 10:52:41,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 65146 ssh2
2012.01.10 10:52:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55668 [preauth]
2012.01.10 10:52:41,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 65146 ssh2
2012.01.10 10:52:42,info,10.139.26.2,sshd,Connection closed by invalid user admin 2.57.121.25 port 65146 [preauth]
2012.01.10 10:52:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36714 ssh2
2012.01.10 10:52:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36714 [preauth]
2012.01.10 10:52:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52864 ssh2
2012.01.10 10:52:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52864 [preauth]
2012.01.10 10:52:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36786 ssh2
2012.01.10 10:52:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36786 [preauth]
2012.01.10 10:52:50,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52930 ssh2
2012.01.10 10:52:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52930 [preauth]
2012.01.10 10:52:54,info,10.139.26.2,sshd,Invalid user ferd from 109.160.32.115 port 38744
2012.01.10 10:52:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:54,info,10.139.26.2,sshd,Failed password for invalid user ferd from 109.160.32.115 port 38744 ssh2
2012.01.10 10:52:54,info,10.139.26.2,sshd,Connection closed by invalid user ferd 109.160.32.115 port 38744 [preauth]
2012.01.10 10:52:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55846 ssh2
2012.01.10 10:52:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:52:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55846 [preauth]
2012.01.10 10:52:59,info,10.139.26.2,sshd,Invalid user support from 109.160.32.115 port 38810
2012.01.10 10:52:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:59,info,10.139.26.2,sshd,Failed password for invalid user support from 109.160.32.115 port 38810 ssh2
2012.01.10 10:52:59,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 55918
2012.01.10 10:52:59,info,10.139.26.2,sshd,Connection closed by invalid user support 109.160.32.115 port 38810 [preauth]
2012.01.10 10:52:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:52:59,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 55918 ssh2
2012.01.10 10:53:00,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 55918 [preauth]
2012.01.10 10:53:03,info,10.139.26.2,sshd,Invalid user sai from 109.160.32.115 port 54826
2012.01.10 10:53:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:04,info,10.139.26.2,sshd,Failed password for invalid user sai from 109.160.32.115 port 54826 ssh2
2012.01.10 10:53:04,info,10.139.26.2,sshd,Invalid user kelly from 109.160.32.113 port 41932
2012.01.10 10:53:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:04,info,10.139.26.2,sshd,Failed password for invalid user kelly from 109.160.32.113 port 41932 ssh2
2012.01.10 10:53:04,info,10.139.26.2,sshd,Connection closed by invalid user sai 109.160.32.115 port 54826 [preauth]
2012.01.10 10:53:04,info,10.139.26.2,sshd,Connection closed by invalid user kelly 109.160.32.113 port 41932 [preauth]
2012.01.10 10:53:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54890 ssh2
2012.01.10 10:53:09,info,10.139.26.2,sshd,Invalid user ec2-user from 109.160.32.113 port 41978
2012.01.10 10:53:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54890 [preauth]
2012.01.10 10:53:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:09,info,10.139.26.2,sshd,Failed password for invalid user ec2-user from 109.160.32.113 port 41978 ssh2
2012.01.10 10:53:09,info,10.139.26.2,sshd,Connection closed by invalid user ec2-user 109.160.32.113 port 41978 [preauth]
2012.01.10 10:53:13,info,10.139.26.2,sshd,Invalid user server from 109.160.32.115 port 36820
2012.01.10 10:53:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34798 ssh2
2012.01.10 10:53:14,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.115 port 36820 ssh2
2012.01.10 10:53:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34798 [preauth]
2012.01.10 10:53:14,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.115 port 36820 [preauth]
2012.01.10 10:53:14,info,10.139.26.2,sshd,Invalid user james from 193.187.110.160 port 35966
2012.01.10 10:53:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:14,info,10.139.26.2,sshd,Failed password for invalid user james from 193.187.110.160 port 35966 ssh2
2012.01.10 10:53:14,info,10.139.26.2,sshd,Received disconnect from 193.187.110.160 port 35966:11: Client disconnecting normally [preauth]
2012.01.10 10:53:14,info,10.139.26.2,sshd,Disconnected from invalid user james 193.187.110.160 port 35966 [preauth]
2012.01.10 10:53:18,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 34896
2012.01.10 10:53:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:18,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 34896 ssh2
2012.01.10 10:53:18,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 34896 [preauth]
2012.01.10 10:53:19,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36876 ssh2
2012.01.10 10:53:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36876 [preauth]
2012.01.10 10:53:22,info,10.139.26.2,sshd,Invalid user splunk from 109.160.32.113 port 57950
2012.01.10 10:53:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:23,info,10.139.26.2,sshd,Failed password for invalid user splunk from 109.160.32.113 port 57950 ssh2
2012.01.10 10:53:23,info,10.139.26.2,sshd,Connection closed by invalid user splunk 109.160.32.113 port 57950 [preauth]
2012.01.10 10:53:23,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.115 port 56288
2012.01.10 10:53:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:23,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.115 port 56288 ssh2
2012.01.10 10:53:23,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.115 port 56288 [preauth]
2012.01.10 10:53:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58034 ssh2
2012.01.10 10:53:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58034 [preauth]
2012.01.10 10:53:29,info,10.139.26.2,sshd,Invalid user user4 from 109.160.32.115 port 56348
2012.01.10 10:53:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:29,info,10.139.26.2,sshd,Failed password for invalid user user4 from 109.160.32.115 port 56348 ssh2
2012.01.10 10:53:29,info,10.139.26.2,sshd,Connection closed by invalid user user4 109.160.32.115 port 56348 [preauth]
2012.01.10 10:53:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58094 ssh2
2012.01.10 10:53:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58094 [preauth]
2012.01.10 10:53:33,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 44334
2012.01.10 10:53:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:34,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 44334 ssh2
2012.01.10 10:53:34,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 44334 [preauth]
2012.01.10 10:53:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48524 ssh2
2012.01.10 10:53:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48524 [preauth]
2012.01.10 10:53:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 44392 ssh2
2012.01.10 10:53:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 44392 [preauth]
2012.01.10 10:53:40,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.113 port 48548
2012.01.10 10:53:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:40,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.113 port 48548 ssh2
2012.01.10 10:53:40,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.113 port 48548 [preauth]
2012.01.10 10:53:43,info,10.139.26.2,sshd,Invalid user ec2-user from 109.160.32.115 port 45254
2012.01.10 10:53:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:43,info,10.139.26.2,sshd,Failed password for invalid user ec2-user from 109.160.32.115 port 45254 ssh2
2012.01.10 10:53:43,info,10.139.26.2,sshd,Connection closed by invalid user ec2-user 109.160.32.115 port 45254 [preauth]
2012.01.10 10:53:45,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 33554
2012.01.10 10:53:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:45,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 33554 ssh2
2012.01.10 10:53:45,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 33554 [preauth]
2012.01.10 10:53:47,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 51436 ssh2
2012.01.10 10:53:47,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 51436:11: Bye Bye [preauth]
2012.01.10 10:53:47,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 51436 [preauth]
2012.01.10 10:53:48,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 45270
2012.01.10 10:53:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:48,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 45270 ssh2
2012.01.10 10:53:48,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 45270 [preauth]
2012.01.10 10:53:49,info,10.139.26.2,sshd,Invalid user monitor from 109.160.32.113 port 33612
2012.01.10 10:53:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:50,info,10.139.26.2,sshd,Failed password for invalid user monitor from 109.160.32.113 port 33612 ssh2
2012.01.10 10:53:50,info,10.139.26.2,sshd,Connection closed by invalid user monitor 109.160.32.113 port 33612 [preauth]
2012.01.10 10:53:50,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 54308 ssh2
2012.01.10 10:53:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 54308 [preauth]
2012.01.10 10:53:52,info,10.139.26.2,sshd,Invalid user dmdba from 109.160.32.115 port 34484
2012.01.10 10:53:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:53,info,10.139.26.2,sshd,Failed password for invalid user dmdba from 109.160.32.115 port 34484 ssh2
2012.01.10 10:53:53,info,10.139.26.2,sshd,Connection closed by invalid user dmdba 109.160.32.115 port 34484 [preauth]
2012.01.10 10:53:54,info,10.139.26.2,sshd,Invalid user wildfly from 109.160.32.113 port 34696
2012.01.10 10:53:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:54,info,10.139.26.2,sshd,Failed password for invalid user wildfly from 109.160.32.113 port 34696 ssh2
2012.01.10 10:53:54,info,10.139.26.2,sshd,Connection closed by invalid user wildfly 109.160.32.113 port 34696 [preauth]
2012.01.10 10:53:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:53:58,info,10.139.26.2,sshd,Invalid user potok from 109.160.32.115 port 34506
2012.01.10 10:53:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:53:58,info,10.139.26.2,sshd,Failed password for invalid user potok from 109.160.32.115 port 34506 ssh2
2012.01.10 10:53:59,info,10.139.26.2,sshd,Connection closed by invalid user potok 109.160.32.115 port 34506 [preauth]
2012.01.10 10:53:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34728 ssh2
2012.01.10 10:53:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34728 [preauth]
2012.01.10 10:54:03,info,10.139.26.2,sshd,Failed password for root from 138.226.239.234 port 29294 ssh2
2012.01.10 10:54:03,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.115 port 41614
2012.01.10 10:54:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 138.226.239.234 port 29294 [preauth]
2012.01.10 10:54:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:03,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.115 port 41614 ssh2
2012.01.10 10:54:03,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.115 port 41614 [preauth]
2012.01.10 10:54:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55512 ssh2
2012.01.10 10:54:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55512 [preauth]
2012.01.10 10:54:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41718 ssh2
2012.01.10 10:54:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41718 [preauth]
2012.01.10 10:54:08,info,10.139.26.2,sshd,Invalid user ub from 109.160.32.113 port 55536
2012.01.10 10:54:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:08,info,10.139.26.2,sshd,Failed password for invalid user ub from 109.160.32.113 port 55536 ssh2
2012.01.10 10:54:08,info,10.139.26.2,sshd,Connection closed by invalid user ub 109.160.32.113 port 55536 [preauth]
2012.01.10 10:54:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52662 ssh2
2012.01.10 10:54:13,info,10.139.26.2,sshd,Invalid user sol from 109.160.32.113 port 39512
2012.01.10 10:54:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52662 [preauth]
2012.01.10 10:54:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:13,info,10.139.26.2,sshd,Failed password for invalid user sol from 109.160.32.113 port 39512 ssh2
2012.01.10 10:54:13,info,10.139.26.2,sshd,Connection closed by invalid user sol 109.160.32.113 port 39512 [preauth]
2012.01.10 10:54:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52782 ssh2
2012.01.10 10:54:17,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 39554
2012.01.10 10:54:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52782 [preauth]
2012.01.10 10:54:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:17,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 39554 ssh2
2012.01.10 10:54:18,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 39554 [preauth]
2012.01.10 10:54:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52896 ssh2
2012.01.10 10:54:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52896 [preauth]
2012.01.10 10:54:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 54129 ssh2
2012.01.10 10:54:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 42340 ssh2
2012.01.10 10:54:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 54129 [preauth]
2012.01.10 10:54:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 42340 [preauth]
2012.01.10 10:54:27,info,10.139.26.2,sshd,Invalid user jakob from 109.160.32.115 port 33040
2012.01.10 10:54:27,info,10.139.26.2,sshd,Invalid user dmdba from 109.160.32.113 port 42402
2012.01.10 10:54:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:27,info,10.139.26.2,sshd,Failed password for invalid user dmdba from 109.160.32.113 port 42402 ssh2
2012.01.10 10:54:27,info,10.139.26.2,sshd,Failed password for invalid user jakob from 109.160.32.115 port 33040 ssh2
2012.01.10 10:54:27,info,10.139.26.2,sshd,Connection closed by invalid user dmdba 109.160.32.113 port 42402 [preauth]
2012.01.10 10:54:27,info,10.139.26.2,sshd,Connection closed by invalid user jakob 109.160.32.115 port 33040 [preauth]
2012.01.10 10:54:31,info,10.139.26.2,sshd,Invalid user gpadmin from 109.160.32.115 port 33078
2012.01.10 10:54:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:31,info,10.139.26.2,sshd,Failed password for invalid user gpadmin from 109.160.32.115 port 33078 ssh2
2012.01.10 10:54:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 42470 ssh2
2012.01.10 10:54:32,info,10.139.26.2,sshd,Connection closed by invalid user gpadmin 109.160.32.115 port 33078 [preauth]
2012.01.10 10:54:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 42470 [preauth]
2012.01.10 10:54:36,info,10.139.26.2,sshd,Invalid user airflow from 109.160.32.113 port 46314
2012.01.10 10:54:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:36,info,10.139.26.2,sshd,Failed password for invalid user airflow from 109.160.32.113 port 46314 ssh2
2012.01.10 10:54:36,info,10.139.26.2,sshd,Connection closed by invalid user airflow 109.160.32.113 port 46314 [preauth]
2012.01.10 10:54:36,info,10.139.26.2,sshd,Invalid user Asalem from 109.160.32.115 port 52928
2012.01.10 10:54:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:36,info,10.139.26.2,sshd,Failed password for invalid user Asalem from 109.160.32.115 port 52928 ssh2
2012.01.10 10:54:37,info,10.139.26.2,sshd,Connection closed by invalid user Asalem 109.160.32.115 port 52928 [preauth]
2012.01.10 10:54:40,info,10.139.26.2,sshd,Invalid user moodle from 109.160.32.113 port 46414
2012.01.10 10:54:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:40,info,10.139.26.2,sshd,Failed password for invalid user moodle from 109.160.32.113 port 46414 ssh2
2012.01.10 10:54:41,info,10.139.26.2,sshd,Connection closed by invalid user moodle 109.160.32.113 port 46414 [preauth]
2012.01.10 10:54:41,info,10.139.26.2,sshd,Invalid user mcserver from 109.160.32.115 port 52994
2012.01.10 10:54:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:42,info,10.139.26.2,sshd,Failed password for invalid user mcserver from 109.160.32.115 port 52994 ssh2
2012.01.10 10:54:42,info,10.139.26.2,sshd,Connection closed by invalid user mcserver 109.160.32.115 port 52994 [preauth]
2012.01.10 10:54:45,info,10.139.26.2,sshd,Invalid user server from 109.160.32.113 port 51404
2012.01.10 10:54:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:45,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.113 port 51404 ssh2
2012.01.10 10:54:45,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.113 port 51404 [preauth]
2012.01.10 10:54:46,info,10.139.26.2,sshd,Invalid user astra from 109.160.32.115 port 40038
2012.01.10 10:54:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:46,info,10.139.26.2,sshd,Failed password for invalid user astra from 109.160.32.115 port 40038 ssh2
2012.01.10 10:54:46,info,10.139.26.2,sshd,Connection closed by invalid user astra 109.160.32.115 port 40038 [preauth]
2012.01.10 10:54:49,info,10.139.26.2,sshd,Invalid user perforce from 109.160.32.113 port 51436
2012.01.10 10:54:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:50,info,10.139.26.2,sshd,Failed password for invalid user perforce from 109.160.32.113 port 51436 ssh2
2012.01.10 10:54:50,info,10.139.26.2,sshd,Connection closed by invalid user perforce 109.160.32.113 port 51436 [preauth]
2012.01.10 10:54:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40114 ssh2
2012.01.10 10:54:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40114 [preauth]
2012.01.10 10:54:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56124 ssh2
2012.01.10 10:54:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56124 [preauth]
2012.01.10 10:54:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:54:57,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 42336 ssh2
2012.01.10 10:54:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 42336 [preauth]
2012.01.10 10:54:58,info,10.139.26.2,sshd,Invalid user sxl from 109.160.32.113 port 56186
2012.01.10 10:54:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:54:59,info,10.139.26.2,sshd,Failed password for invalid user sxl from 109.160.32.113 port 56186 ssh2
2012.01.10 10:54:59,info,10.139.26.2,sshd,Connection closed by invalid user sxl 109.160.32.113 port 56186 [preauth]
2012.01.10 10:55:02,info,10.139.26.2,sshd,Invalid user gk from 109.160.32.115 port 42416
2012.01.10 10:55:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:02,info,10.139.26.2,sshd,Failed password for invalid user gk from 109.160.32.115 port 42416 ssh2
2012.01.10 10:55:02,info,10.139.26.2,sshd,Connection closed by invalid user gk 109.160.32.115 port 42416 [preauth]
2012.01.10 10:55:02,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 49534 ssh2
2012.01.10 10:55:03,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 49534:11: Bye Bye [preauth]
2012.01.10 10:55:03,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 49534 [preauth]
2012.01.10 10:55:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39300 ssh2
2012.01.10 10:55:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39300 [preauth]
2012.01.10 10:55:07,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 56370
2012.01.10 10:55:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:07,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 56370 ssh2
2012.01.10 10:55:07,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 56370 [preauth]
2012.01.10 10:55:08,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 39382
2012.01.10 10:55:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:08,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 39382 ssh2
2012.01.10 10:55:08,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 39382 [preauth]
2012.01.10 10:55:11,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56400 ssh2
2012.01.10 10:55:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56400 [preauth]
2012.01.10 10:55:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57510 ssh2
2012.01.10 10:55:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57510 [preauth]
2012.01.10 10:55:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52334 ssh2
2012.01.10 10:55:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52334 [preauth]
2012.01.10 10:55:17,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 57582
2012.01.10 10:55:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:17,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 57582 ssh2
2012.01.10 10:55:18,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 57582 [preauth]
2012.01.10 10:55:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52388 ssh2
2012.01.10 10:55:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52388 [preauth]
2012.01.10 10:55:22,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.113 port 44928
2012.01.10 10:55:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:22,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.113 port 44928 ssh2
2012.01.10 10:55:22,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.113 port 44928 [preauth]
2012.01.10 10:55:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53446 ssh2
2012.01.10 10:55:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44990 ssh2
2012.01.10 10:55:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44990 [preauth]
2012.01.10 10:55:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53446 [preauth]
2012.01.10 10:55:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45032 ssh2
2012.01.10 10:55:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45032 [preauth]
2012.01.10 10:55:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40198 ssh2
2012.01.10 10:55:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40198 [preauth]
2012.01.10 10:55:36,info,10.139.26.2,sshd,Invalid user appuser from 109.160.32.113 port 54308
2012.01.10 10:55:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:36,info,10.139.26.2,sshd,Failed password for invalid user appuser from 109.160.32.113 port 54308 ssh2
2012.01.10 10:55:36,info,10.139.26.2,sshd,Connection closed by invalid user appuser 109.160.32.113 port 54308 [preauth]
2012.01.10 10:55:37,info,10.139.26.2,sshd,Invalid user amax from 109.160.32.115 port 40216
2012.01.10 10:55:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:37,info,10.139.26.2,sshd,Failed password for invalid user amax from 109.160.32.115 port 40216 ssh2
2012.01.10 10:55:37,info,10.139.26.2,sshd,Connection closed by invalid user amax 109.160.32.115 port 40216 [preauth]
2012.01.10 10:55:39,info,10.139.26.2,sshd,Failed password for root from 58.221.60.25 port 51822 ssh2
2012.01.10 10:55:40,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 51822:11: Bye Bye [preauth]
2012.01.10 10:55:40,info,10.139.26.2,sshd,Disconnected from authenticating user root 58.221.60.25 port 51822 [preauth]
2012.01.10 10:55:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 54346 ssh2
2012.01.10 10:55:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 54346 [preauth]
2012.01.10 10:55:41,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 40234
2012.01.10 10:55:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:41,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 40234 ssh2
2012.01.10 10:55:41,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 40234 [preauth]
2012.01.10 10:55:44,info,10.139.26.2,sshd,Invalid user manoj from 109.160.32.113 port 56904
2012.01.10 10:55:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:44,info,10.139.26.2,sshd,Failed password for invalid user manoj from 109.160.32.113 port 56904 ssh2
2012.01.10 10:55:45,info,10.139.26.2,sshd,Connection closed by invalid user manoj 109.160.32.113 port 56904 [preauth]
2012.01.10 10:55:46,info,10.139.26.2,sshd,Invalid user kali from 109.160.32.115 port 32806
2012.01.10 10:55:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:46,info,10.139.26.2,sshd,Failed password for invalid user kali from 109.160.32.115 port 32806 ssh2
2012.01.10 10:55:47,info,10.139.26.2,sshd,Connection closed by invalid user kali 109.160.32.115 port 32806 [preauth]
2012.01.10 10:55:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56948 ssh2
2012.01.10 10:55:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56948 [preauth]
2012.01.10 10:55:51,info,10.139.26.2,sshd,Invalid user web from 109.160.32.115 port 32842
2012.01.10 10:55:51,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:55:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:51,info,10.139.26.2,sshd,Failed password for invalid user web from 109.160.32.115 port 32842 ssh2
2012.01.10 10:55:52,info,10.139.26.2,sshd,Connection closed by invalid user web 109.160.32.115 port 32842 [preauth]
2012.01.10 10:55:53,info,10.139.26.2,sshd,Invalid user django from 109.160.32.113 port 49960
2012.01.10 10:55:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:53,info,10.139.26.2,sshd,Failed password for invalid user django from 109.160.32.113 port 49960 ssh2
2012.01.10 10:55:54,info,10.139.26.2,sshd,Connection closed by invalid user django 109.160.32.113 port 49960 [preauth]
2012.01.10 10:55:57,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33462 ssh2
2012.01.10 10:55:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33462 [preauth]
2012.01.10 10:55:58,info,10.139.26.2,sshd,Invalid user jakob from 109.160.32.113 port 50006
2012.01.10 10:55:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:55:58,info,10.139.26.2,sshd,Failed password for invalid user jakob from 109.160.32.113 port 50006 ssh2
2012.01.10 10:55:58,info,10.139.26.2,sshd,Connection closed by invalid user jakob 109.160.32.113 port 50006 [preauth]
2012.01.10 10:56:01,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33500 ssh2
2012.01.10 10:56:01,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33500 [preauth]
2012.01.10 10:56:02,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 42028
2012.01.10 10:56:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:02,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 42028 ssh2
2012.01.10 10:56:02,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 42028 [preauth]
2012.01.10 10:56:07,info,10.139.26.2,sshd,Invalid user master from 109.160.32.113 port 42054
2012.01.10 10:56:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:07,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.113 port 42054 ssh2
2012.01.10 10:56:07,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.113 port 42054 [preauth]
2012.01.10 10:56:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50116 ssh2
2012.01.10 10:56:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50116 [preauth]
2012.01.10 10:56:09,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 57474 ssh2
2012.01.10 10:56:10,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 57474 [preauth]
2012.01.10 10:56:10,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50142 ssh2
2012.01.10 10:56:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50142 [preauth]
2012.01.10 10:56:11,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.113 port 42106
2012.01.10 10:56:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:11,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.113 port 42106 ssh2
2012.01.10 10:56:11,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.113 port 42106 [preauth]
2012.01.10 10:56:15,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 47642 ssh2
2012.01.10 10:56:15,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 47642:11: Bye Bye [preauth]
2012.01.10 10:56:15,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 47642 [preauth]
2012.01.10 10:56:15,info,10.139.26.2,sshd,Invalid user erpnext from 109.160.32.115 port 47190
2012.01.10 10:56:16,info,10.139.26.2,sshd,Invalid user djangouser from 109.160.32.113 port 49976
2012.01.10 10:56:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:16,info,10.139.26.2,sshd,Failed password for invalid user erpnext from 109.160.32.115 port 47190 ssh2
2012.01.10 10:56:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:16,info,10.139.26.2,sshd,Failed password for invalid user djangouser from 109.160.32.113 port 49976 ssh2
2012.01.10 10:56:16,info,10.139.26.2,sshd,Connection closed by invalid user erpnext 109.160.32.115 port 47190 [preauth]
2012.01.10 10:56:16,info,10.139.26.2,sshd,Connection closed by invalid user djangouser 109.160.32.113 port 49976 [preauth]
2012.01.10 10:56:18,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59818 ssh2
2012.01.10 10:56:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59818 [preauth]
2012.01.10 10:56:20,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47248 ssh2
2012.01.10 10:56:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47248 [preauth]
2012.01.10 10:56:20,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50008 ssh2
2012.01.10 10:56:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50008 [preauth]
2012.01.10 10:56:25,info,10.139.26.2,sshd,Invalid user benoit from 109.160.32.115 port 45596
2012.01.10 10:56:25,info,10.139.26.2,sshd,Invalid user esuser from 109.160.32.113 port 51914
2012.01.10 10:56:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:25,info,10.139.26.2,sshd,Failed password for invalid user benoit from 109.160.32.115 port 45596 ssh2
2012.01.10 10:56:25,info,10.139.26.2,sshd,Connection closed by invalid user benoit 109.160.32.115 port 45596 [preauth]
2012.01.10 10:56:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:25,info,10.139.26.2,sshd,Failed password for invalid user esuser from 109.160.32.113 port 51914 ssh2
2012.01.10 10:56:25,info,10.139.26.2,sshd,Connection closed by invalid user esuser 109.160.32.113 port 51914 [preauth]
2012.01.10 10:56:29,info,10.139.26.2,sshd,Invalid user fedora from 109.160.32.113 port 51994
2012.01.10 10:56:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:29,info,10.139.26.2,sshd,Failed password for invalid user fedora from 109.160.32.113 port 51994 ssh2
2012.01.10 10:56:29,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.115 port 45618
2012.01.10 10:56:30,info,10.139.26.2,sshd,Connection closed by invalid user fedora 109.160.32.113 port 51994 [preauth]
2012.01.10 10:56:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:30,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.115 port 45618 ssh2
2012.01.10 10:56:30,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.115 port 45618 [preauth]
2012.01.10 10:56:34,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.113 port 52406
2012.01.10 10:56:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:34,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.113 port 52406 ssh2
2012.01.10 10:56:34,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.113 port 52406 [preauth]
2012.01.10 10:56:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57442 ssh2
2012.01.10 10:56:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57442 [preauth]
2012.01.10 10:56:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52438 ssh2
2012.01.10 10:56:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52438 [preauth]
2012.01.10 10:56:40,info,10.139.26.2,sshd,Invalid user dolphinscheduler from 109.160.32.115 port 57478
2012.01.10 10:56:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:40,info,10.139.26.2,sshd,Failed password for invalid user dolphinscheduler from 109.160.32.115 port 57478 ssh2
2012.01.10 10:56:40,info,10.139.26.2,sshd,Connection closed by invalid user dolphinscheduler 109.160.32.115 port 57478 [preauth]
2012.01.10 10:56:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56882 ssh2
2012.01.10 10:56:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56882 [preauth]
2012.01.10 10:56:45,info,10.139.26.2,sshd,Invalid user init from 109.160.32.115 port 42480
2012.01.10 10:56:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:45,info,10.139.26.2,sshd,Failed password for invalid user init from 109.160.32.115 port 42480 ssh2
2012.01.10 10:56:45,info,10.139.26.2,sshd,Connection closed by invalid user init 109.160.32.115 port 42480 [preauth]
2012.01.10 10:56:48,info,10.139.26.2,sshd,Invalid user admin1234 from 109.160.32.113 port 56952
2012.01.10 10:56:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:49,info,10.139.26.2,sshd,Failed password for invalid user admin1234 from 109.160.32.113 port 56952 ssh2
2012.01.10 10:56:49,info,10.139.26.2,sshd,Connection closed by invalid user admin1234 109.160.32.113 port 56952 [preauth]
2012.01.10 10:56:50,info,10.139.26.2,sshd,Invalid user pzuser from 109.160.32.115 port 42528
2012.01.10 10:56:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:50,info,10.139.26.2,sshd,Failed password for invalid user pzuser from 109.160.32.115 port 42528 ssh2
2012.01.10 10:56:50,info,10.139.26.2,sshd,Connection closed by invalid user pzuser 109.160.32.115 port 42528 [preauth]
2012.01.10 10:56:51,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:56:53,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 46720
2012.01.10 10:56:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:54,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 46720 ssh2
2012.01.10 10:56:54,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 46720 [preauth]
2012.01.10 10:56:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 35960 ssh2
2012.01.10 10:56:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 35960 [preauth]
2012.01.10 10:56:58,info,10.139.26.2,sshd,Invalid user student from 109.160.32.113 port 46734
2012.01.10 10:56:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:56:58,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.113 port 46734 ssh2
2012.01.10 10:56:59,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.113 port 46734 [preauth]
2012.01.10 10:57:00,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36004 ssh2
2012.01.10 10:57:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36004 [preauth]
2012.01.10 10:57:03,info,10.139.26.2,sshd,Invalid user calvin from 109.160.32.113 port 36794
2012.01.10 10:57:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:03,info,10.139.26.2,sshd,Failed password for invalid user calvin from 109.160.32.113 port 36794 ssh2
2012.01.10 10:57:03,info,10.139.26.2,sshd,Connection closed by invalid user calvin 109.160.32.113 port 36794 [preauth]
2012.01.10 10:57:05,info,10.139.26.2,sshd,Invalid user fanshu from 109.160.32.115 port 42608
2012.01.10 10:57:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:05,info,10.139.26.2,sshd,Failed password for invalid user fanshu from 109.160.32.115 port 42608 ssh2
2012.01.10 10:57:05,info,10.139.26.2,sshd,Connection closed by invalid user fanshu 109.160.32.115 port 42608 [preauth]
2012.01.10 10:57:07,info,10.139.26.2,sshd,Invalid user media from 109.160.32.113 port 36876
2012.01.10 10:57:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:07,info,10.139.26.2,sshd,Failed password for invalid user media from 109.160.32.113 port 36876 ssh2
2012.01.10 10:57:07,info,10.139.26.2,sshd,Connection closed by invalid user media 109.160.32.113 port 36876 [preauth]
2012.01.10 10:57:10,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 42634
2012.01.10 10:57:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:10,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 42634 ssh2
2012.01.10 10:57:10,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 42634 [preauth]
2012.01.10 10:57:12,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 35378
2012.01.10 10:57:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:12,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 35378 ssh2
2012.01.10 10:57:13,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 35378 [preauth]
2012.01.10 10:57:15,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49158 ssh2
2012.01.10 10:57:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49158 [preauth]
2012.01.10 10:57:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35438 ssh2
2012.01.10 10:57:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35438 [preauth]
2012.01.10 10:57:19,info,10.139.26.2,sshd,Invalid user openproject from 109.160.32.115 port 49216
2012.01.10 10:57:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:20,info,10.139.26.2,sshd,Failed password for invalid user openproject from 109.160.32.115 port 49216 ssh2
2012.01.10 10:57:20,info,10.139.26.2,sshd,Connection closed by invalid user openproject 109.160.32.115 port 49216 [preauth]
2012.01.10 10:57:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35462 ssh2
2012.01.10 10:57:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35462 [preauth]
2012.01.10 10:57:24,info,10.139.26.2,sshd,Invalid user amine from 109.160.32.115 port 58450
2012.01.10 10:57:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:25,info,10.139.26.2,sshd,Failed password for invalid user amine from 109.160.32.115 port 58450 ssh2
2012.01.10 10:57:25,info,10.139.26.2,sshd,Connection closed by invalid user amine 109.160.32.115 port 58450 [preauth]
2012.01.10 10:57:26,info,10.139.26.2,sshd,Invalid user samba from 109.160.32.113 port 33256
2012.01.10 10:57:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:26,info,10.139.26.2,sshd,Failed password for invalid user samba from 109.160.32.113 port 33256 ssh2
2012.01.10 10:57:26,info,10.139.26.2,sshd,Connection closed by invalid user samba 109.160.32.113 port 33256 [preauth]
2012.01.10 10:57:29,info,10.139.26.2,sshd,Invalid user testuser2 from 34.123.134.194 port 45748
2012.01.10 10:57:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:29,info,10.139.26.2,sshd,Failed password for invalid user testuser2 from 34.123.134.194 port 45748 ssh2
2012.01.10 10:57:30,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 45748:11: Bye Bye [preauth]
2012.01.10 10:57:30,info,10.139.26.2,sshd,Disconnected from invalid user testuser2 34.123.134.194 port 45748 [preauth]
2012.01.10 10:57:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58528 ssh2
2012.01.10 10:57:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58528 [preauth]
2012.01.10 10:57:30,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.113 port 33354
2012.01.10 10:57:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:30,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.113 port 33354 ssh2
2012.01.10 10:57:31,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.113 port 33354 [preauth]
2012.01.10 10:57:34,info,10.139.26.2,sshd,Invalid user app from 109.160.32.115 port 60642
2012.01.10 10:57:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:34,info,10.139.26.2,sshd,Failed password for invalid user app from 109.160.32.115 port 60642 ssh2
2012.01.10 10:57:34,info,10.139.26.2,sshd,Connection closed by invalid user app 109.160.32.115 port 60642 [preauth]
2012.01.10 10:57:35,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.113 port 59012
2012.01.10 10:57:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:35,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.113 port 59012 ssh2
2012.01.10 10:57:35,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.113 port 59012 [preauth]
2012.01.10 10:57:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60712 ssh2
2012.01.10 10:57:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60712 [preauth]
2012.01.10 10:57:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59060 ssh2
2012.01.10 10:57:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59060 [preauth]
2012.01.10 10:57:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50400 ssh2
2012.01.10 10:57:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50400 [preauth]
2012.01.10 10:57:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49106 ssh2
2012.01.10 10:57:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49106 [preauth]
2012.01.10 10:57:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50500 ssh2
2012.01.10 10:57:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50500 [preauth]
2012.01.10 10:57:50,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49130 ssh2
2012.01.10 10:57:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49130 [preauth]
2012.01.10 10:57:51,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:57:54,info,10.139.26.2,sshd,Invalid user openvpn from 109.160.32.113 port 36924
2012.01.10 10:57:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 48292 ssh2
2012.01.10 10:57:54,info,10.139.26.2,sshd,Failed password for invalid user openvpn from 109.160.32.113 port 36924 ssh2
2012.01.10 10:57:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 48292 [preauth]
2012.01.10 10:57:54,info,10.139.26.2,sshd,Connection closed by invalid user openvpn 109.160.32.113 port 36924 [preauth]
2012.01.10 10:57:58,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 36986
2012.01.10 10:57:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:57:58,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 36986 ssh2
2012.01.10 10:57:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 48330 ssh2
2012.01.10 10:57:59,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 36986 [preauth]
2012.01.10 10:57:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 48330 [preauth]
2012.01.10 10:58:03,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.113 port 36926
2012.01.10 10:58:03,info,10.139.26.2,sshd,Invalid user nutanix from 109.160.32.115 port 52264
2012.01.10 10:58:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:03,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.113 port 36926 ssh2
2012.01.10 10:58:03,info,10.139.26.2,sshd,Failed password for invalid user nutanix from 109.160.32.115 port 52264 ssh2
2012.01.10 10:58:03,info,10.139.26.2,sshd,Connection closed by invalid user nutanix 109.160.32.115 port 52264 [preauth]
2012.01.10 10:58:04,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.113 port 36926 [preauth]
2012.01.10 10:58:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36996 ssh2
2012.01.10 10:58:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36996 [preauth]
2012.01.10 10:58:08,info,10.139.26.2,sshd,Invalid user john from 109.160.32.115 port 52316
2012.01.10 10:58:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:09,info,10.139.26.2,sshd,Failed password for invalid user john from 109.160.32.115 port 52316 ssh2
2012.01.10 10:58:09,info,10.139.26.2,sshd,Connection closed by invalid user john 109.160.32.115 port 52316 [preauth]
2012.01.10 10:58:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59164 ssh2
2012.01.10 10:58:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59164 [preauth]
2012.01.10 10:58:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57422 ssh2
2012.01.10 10:58:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57422 [preauth]
2012.01.10 10:58:16,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.113 port 59174
2012.01.10 10:58:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:17,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.113 port 59174 ssh2
2012.01.10 10:58:17,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.113 port 59174 [preauth]
2012.01.10 10:58:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57488 ssh2
2012.01.10 10:58:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57488 [preauth]
2012.01.10 10:58:20,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61601 ssh2
2012.01.10 10:58:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61601 [preauth]
2012.01.10 10:58:21,info,10.139.26.2,sshd,Invalid user palworld from 109.160.32.113 port 59238
2012.01.10 10:58:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:21,info,10.139.26.2,sshd,Failed password for invalid user palworld from 109.160.32.113 port 59238 ssh2
2012.01.10 10:58:22,info,10.139.26.2,sshd,Connection closed by invalid user palworld 109.160.32.113 port 59238 [preauth]
2012.01.10 10:58:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49864 ssh2
2012.01.10 10:58:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49864 [preauth]
2012.01.10 10:58:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51938 ssh2
2012.01.10 10:58:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51938 [preauth]
2012.01.10 10:58:27,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.115 port 49904
2012.01.10 10:58:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:27,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.115 port 49904 ssh2
2012.01.10 10:58:28,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.115 port 49904 [preauth]
2012.01.10 10:58:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52014 ssh2
2012.01.10 10:58:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52014 [preauth]
2012.01.10 10:58:33,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54358 ssh2
2012.01.10 10:58:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54358 [preauth]
2012.01.10 10:58:35,info,10.139.26.2,sshd,Invalid user support from 109.160.32.113 port 34144
2012.01.10 10:58:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:35,info,10.139.26.2,sshd,Failed password for invalid user support from 109.160.32.113 port 34144 ssh2
2012.01.10 10:58:35,info,10.139.26.2,sshd,Connection closed by invalid user support 109.160.32.113 port 34144 [preauth]
2012.01.10 10:58:38,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 54392
2012.01.10 10:58:38,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:58:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:38,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 54392 ssh2
2012.01.10 10:58:38,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 54392 [preauth]
2012.01.10 10:58:40,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.113 port 34238
2012.01.10 10:58:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:40,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.113 port 34238 ssh2
2012.01.10 10:58:41,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.113 port 34238 [preauth]
2012.01.10 10:58:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 43830 ssh2
2012.01.10 10:58:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 43830 [preauth]
2012.01.10 10:58:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55068 ssh2
2012.01.10 10:58:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55068 [preauth]
2012.01.10 10:58:46,info,10.139.26.2,sshd,Invalid user git from 34.123.134.194 port 43864
2012.01.10 10:58:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:46,info,10.139.26.2,sshd,Failed password for invalid user git from 34.123.134.194 port 43864 ssh2
2012.01.10 10:58:47,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 43864:11: Bye Bye [preauth]
2012.01.10 10:58:47,info,10.139.26.2,sshd,Disconnected from invalid user git 34.123.134.194 port 43864 [preauth]
2012.01.10 10:58:47,info,10.139.26.2,sshd,Invalid user tactical from 109.160.32.115 port 43924
2012.01.10 10:58:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:47,info,10.139.26.2,sshd,Failed password for invalid user tactical from 109.160.32.115 port 43924 ssh2
2012.01.10 10:58:48,info,10.139.26.2,sshd,Connection closed by invalid user tactical 109.160.32.115 port 43924 [preauth]
2012.01.10 10:58:49,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.113 port 55106
2012.01.10 10:58:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:49,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.113 port 55106 ssh2
2012.01.10 10:58:50,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.113 port 55106 [preauth]
2012.01.10 10:58:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46116 ssh2
2012.01.10 10:58:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46116 [preauth]
2012.01.10 10:58:54,info,10.139.26.2,sshd,Invalid user node from 109.160.32.113 port 43176
2012.01.10 10:58:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:54,info,10.139.26.2,sshd,Failed password for invalid user node from 109.160.32.113 port 43176 ssh2
2012.01.10 10:58:54,info,10.139.26.2,sshd,Connection closed by invalid user node 109.160.32.113 port 43176 [preauth]
2012.01.10 10:58:57,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.115 port 46180
2012.01.10 10:58:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:57,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.115 port 46180 ssh2
2012.01.10 10:58:57,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.115 port 46180 [preauth]
2012.01.10 10:58:58,info,10.139.26.2,sshd,Invalid user Caps from 109.160.32.113 port 43216
2012.01.10 10:58:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:58:58,info,10.139.26.2,sshd,Failed password for invalid user Caps from 109.160.32.113 port 43216 ssh2
2012.01.10 10:58:58,info,10.139.26.2,sshd,Connection closed by invalid user Caps 109.160.32.113 port 43216 [preauth]
2012.01.10 10:59:01,info,10.139.26.2,sshd,Invalid user garcia from 109.160.32.115 port 46248
2012.01.10 10:59:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:02,info,10.139.26.2,sshd,Failed password for invalid user garcia from 109.160.32.115 port 46248 ssh2
2012.01.10 10:59:02,info,10.139.26.2,sshd,Connection closed by invalid user garcia 109.160.32.115 port 46248 [preauth]
2012.01.10 10:59:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38680 ssh2
2012.01.10 10:59:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38680 [preauth]
2012.01.10 10:59:06,info,10.139.26.2,sshd,Invalid user tom from 109.160.32.115 port 34284
2012.01.10 10:59:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:06,info,10.139.26.2,sshd,Failed password for invalid user tom from 109.160.32.115 port 34284 ssh2
2012.01.10 10:59:06,info,10.139.26.2,sshd,Connection closed by invalid user tom 109.160.32.115 port 34284 [preauth]
2012.01.10 10:59:08,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 38722
2012.01.10 10:59:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:08,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 38722 ssh2
2012.01.10 10:59:08,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 38722 [preauth]
2012.01.10 10:59:11,info,10.139.26.2,sshd,Invalid user nitin from 109.160.32.115 port 34370
2012.01.10 10:59:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:11,info,10.139.26.2,sshd,Failed password for invalid user nitin from 109.160.32.115 port 34370 ssh2
2012.01.10 10:59:11,info,10.139.26.2,sshd,Connection closed by invalid user nitin 109.160.32.115 port 34370 [preauth]
2012.01.10 10:59:12,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 55814
2012.01.10 10:59:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:12,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 55814 ssh2
2012.01.10 10:59:13,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 55814 [preauth]
2012.01.10 10:59:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33538 ssh2
2012.01.10 10:59:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33538 [preauth]
2012.01.10 10:59:17,info,10.139.26.2,sshd,Invalid user rdpuser from 109.160.32.113 port 55842
2012.01.10 10:59:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:17,info,10.139.26.2,sshd,Failed password for invalid user rdpuser from 109.160.32.113 port 55842 ssh2
2012.01.10 10:59:17,info,10.139.26.2,sshd,Connection closed by invalid user rdpuser 109.160.32.113 port 55842 [preauth]
2012.01.10 10:59:20,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 60592 ssh2
2012.01.10 10:59:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 60592 [preauth]
2012.01.10 10:59:21,info,10.139.26.2,sshd,Invalid user service from 109.160.32.115 port 33596
2012.01.10 10:59:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:21,info,10.139.26.2,sshd,Failed password for invalid user service from 109.160.32.115 port 33596 ssh2
2012.01.10 10:59:21,info,10.139.26.2,sshd,Connection closed by invalid user service 109.160.32.115 port 33596 [preauth]
2012.01.10 10:59:22,info,10.139.26.2,sshd,Invalid user main from 109.160.32.113 port 58816
2012.01.10 10:59:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:22,info,10.139.26.2,sshd,Failed password for invalid user main from 109.160.32.113 port 58816 ssh2
2012.01.10 10:59:22,info,10.139.26.2,sshd,Connection closed by invalid user main 109.160.32.113 port 58816 [preauth]
2012.01.10 10:59:26,info,10.139.26.2,sshd,Invalid user liyi from 109.160.32.115 port 43222
2012.01.10 10:59:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:26,info,10.139.26.2,sshd,Failed password for invalid user liyi from 109.160.32.115 port 43222 ssh2
2012.01.10 10:59:26,info,10.139.26.2,sshd,Connection closed by invalid user liyi 109.160.32.115 port 43222 [preauth]
2012.01.10 10:59:26,info,10.139.26.2,sshd,Invalid user esuser from 109.160.32.113 port 58862
2012.01.10 10:59:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:27,info,10.139.26.2,sshd,Failed password for invalid user esuser from 109.160.32.113 port 58862 ssh2
2012.01.10 10:59:27,info,10.139.26.2,sshd,Connection closed by invalid user esuser 109.160.32.113 port 58862 [preauth]
2012.01.10 10:59:31,info,10.139.26.2,sshd,Invalid user core from 109.160.32.115 port 43314
2012.01.10 10:59:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:31,info,10.139.26.2,sshd,Invalid user garcia from 109.160.32.113 port 58972
2012.01.10 10:59:31,info,10.139.26.2,sshd,Failed password for invalid user core from 109.160.32.115 port 43314 ssh2
2012.01.10 10:59:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:31,info,10.139.26.2,sshd,Failed password for invalid user garcia from 109.160.32.113 port 58972 ssh2
2012.01.10 10:59:31,info,10.139.26.2,sshd,Connection closed by invalid user core 109.160.32.115 port 43314 [preauth]
2012.01.10 10:59:31,info,10.139.26.2,sshd,Connection closed by invalid user garcia 109.160.32.113 port 58972 [preauth]
2012.01.10 10:59:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41960 ssh2
2012.01.10 10:59:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41960 [preauth]
2012.01.10 10:59:36,info,10.139.26.2,sshd,Invalid user alex from 109.160.32.115 port 58400
2012.01.10 10:59:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:36,info,10.139.26.2,sshd,Failed password for invalid user alex from 109.160.32.115 port 58400 ssh2
2012.01.10 10:59:37,info,10.139.26.2,sshd,Connection closed by invalid user alex 109.160.32.115 port 58400 [preauth]
2012.01.10 10:59:38,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 10:59:41,info,10.139.26.2,sshd,Invalid user tempuser from 109.160.32.113 port 42048
2012.01.10 10:59:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:41,info,10.139.26.2,sshd,Failed password for invalid user tempuser from 109.160.32.113 port 42048 ssh2
2012.01.10 10:59:41,info,10.139.26.2,sshd,Connection closed by invalid user tempuser 109.160.32.113 port 42048 [preauth]
2012.01.10 10:59:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58458 ssh2
2012.01.10 10:59:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58458 [preauth]
2012.01.10 10:59:45,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 35264
2012.01.10 10:59:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:45,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 35264 ssh2
2012.01.10 10:59:46,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 35264 [preauth]
2012.01.10 10:59:46,info,10.139.26.2,sshd,Invalid user elasticsearch from 109.160.32.115 port 43984
2012.01.10 10:59:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:47,info,10.139.26.2,sshd,Failed password for invalid user elasticsearch from 109.160.32.115 port 43984 ssh2
2012.01.10 10:59:47,info,10.139.26.2,sshd,Connection closed by invalid user elasticsearch 109.160.32.115 port 43984 [preauth]
2012.01.10 10:59:50,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35336 ssh2
2012.01.10 10:59:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35336 [preauth]
2012.01.10 10:59:51,info,10.139.26.2,sshd,Invalid user git from 109.160.32.115 port 44014
2012.01.10 10:59:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:51,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.115 port 44014 ssh2
2012.01.10 10:59:51,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.115 port 44014 [preauth]
2012.01.10 10:59:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49942 ssh2
2012.01.10 10:59:55,info,10.139.26.2,sshd,Invalid user opc from 109.160.32.115 port 48704
2012.01.10 10:59:55,info,10.139.26.2,sshd,Invalid user admin from 47.184.58.103 port 44637
2012.01.10 10:59:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49942 [preauth]
2012.01.10 10:59:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:56,info,10.139.26.2,sshd,Failed password for invalid user admin from 47.184.58.103 port 44637 ssh2
2012.01.10 10:59:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 10:59:56,info,10.139.26.2,sshd,Failed password for invalid user opc from 109.160.32.115 port 48704 ssh2
2012.01.10 10:59:56,info,10.139.26.2,sshd,Connection closed by invalid user opc 109.160.32.115 port 48704 [preauth]
2012.01.10 11:00:00,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49992 ssh2
2012.01.10 11:00:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49992 [preauth]
2012.01.10 11:00:00,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.115 port 48742
2012.01.10 11:00:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:01,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.115 port 48742 ssh2
2012.01.10 11:00:01,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.115 port 48742 [preauth]
2012.01.10 11:00:04,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 41970 ssh2
2012.01.10 11:00:04,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 41970:11: Bye Bye [preauth]
2012.01.10 11:00:04,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 41970 [preauth]
2012.01.10 11:00:04,info,10.139.26.2,sshd,Invalid user devuser from 109.160.32.113 port 59466
2012.01.10 11:00:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:05,info,10.139.26.2,sshd,Failed password for invalid user devuser from 109.160.32.113 port 59466 ssh2
2012.01.10 11:00:05,info,10.139.26.2,sshd,Connection closed by invalid user devuser 109.160.32.113 port 59466 [preauth]
2012.01.10 11:00:05,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39328 ssh2
2012.01.10 11:00:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39328 [preauth]
2012.01.10 11:00:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59532 ssh2
2012.01.10 11:00:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59532 [preauth]
2012.01.10 11:00:09,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 39380
2012.01.10 11:00:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:09,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 39380 ssh2
2012.01.10 11:00:10,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 39380 [preauth]
2012.01.10 11:00:10,info,10.139.26.2,sshd,Connection closed by invalid user admin 47.184.58.103 port 44637 [preauth]
2012.01.10 11:00:13,info,10.139.26.2,sshd,Invalid user parsa from 109.160.32.113 port 37608
2012.01.10 11:00:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:13,info,10.139.26.2,sshd,Failed password for invalid user parsa from 109.160.32.113 port 37608 ssh2
2012.01.10 11:00:13,info,10.139.26.2,sshd,Connection closed by invalid user parsa 109.160.32.113 port 37608 [preauth]
2012.01.10 11:00:14,info,10.139.26.2,sshd,Invalid user kevin from 109.160.32.115 port 59350
2012.01.10 11:00:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:14,info,10.139.26.2,sshd,Failed password for invalid user kevin from 109.160.32.115 port 59350 ssh2
2012.01.10 11:00:14,info,10.139.26.2,sshd,Connection closed by invalid user kevin 109.160.32.115 port 59350 [preauth]
2012.01.10 11:00:18,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 37658
2012.01.10 11:00:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:18,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 37658 ssh2
2012.01.10 11:00:18,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 37658 [preauth]
2012.01.10 11:00:18,info,10.139.26.2,sshd,Invalid user zabbix from 109.160.32.115 port 59428
2012.01.10 11:00:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:19,info,10.139.26.2,sshd,Failed password for invalid user zabbix from 109.160.32.115 port 59428 ssh2
2012.01.10 11:00:19,info,10.139.26.2,sshd,Connection closed by invalid user zabbix 109.160.32.115 port 59428 [preauth]
2012.01.10 11:00:22,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.113 port 50218
2012.01.10 11:00:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:23,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.113 port 50218 ssh2
2012.01.10 11:00:23,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.113 port 50218 [preauth]
2012.01.10 11:00:23,info,10.139.26.2,sshd,Invalid user admin1 from 109.160.32.115 port 59856
2012.01.10 11:00:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:23,info,10.139.26.2,sshd,Failed password for invalid user admin1 from 109.160.32.115 port 59856 ssh2
2012.01.10 11:00:23,info,10.139.26.2,sshd,Connection closed by invalid user admin1 109.160.32.115 port 59856 [preauth]
2012.01.10 11:00:25,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 49621 ssh2
2012.01.10 11:00:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 49621 [preauth]
2012.01.10 11:00:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50276 ssh2
2012.01.10 11:00:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50276 [preauth]
2012.01.10 11:00:28,info,10.139.26.2,sshd,Invalid user aaa from 109.160.32.115 port 59934
2012.01.10 11:00:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:28,info,10.139.26.2,sshd,Failed password for invalid user aaa from 109.160.32.115 port 59934 ssh2
2012.01.10 11:00:28,info,10.139.26.2,sshd,Connection closed by invalid user aaa 109.160.32.115 port 59934 [preauth]
2012.01.10 11:00:32,info,10.139.26.2,sshd,Invalid user Asalem from 109.160.32.113 port 50354
2012.01.10 11:00:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:32,info,10.139.26.2,sshd,Failed password for invalid user Asalem from 109.160.32.113 port 50354 ssh2
2012.01.10 11:00:32,info,10.139.26.2,sshd,Connection closed by invalid user Asalem 109.160.32.113 port 50354 [preauth]
2012.01.10 11:00:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52706 ssh2
2012.01.10 11:00:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52706 [preauth]
2012.01.10 11:00:36,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.113 port 57570
2012.01.10 11:00:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:36,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.113 port 57570 ssh2
2012.01.10 11:00:36,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.113 port 57570 [preauth]
2012.01.10 11:00:37,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52758 ssh2
2012.01.10 11:00:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52758 [preauth]
2012.01.10 11:00:38,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:00:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57638 ssh2
2012.01.10 11:00:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57638 [preauth]
2012.01.10 11:00:41,info,10.139.26.2,sshd,Invalid user lighthouse from 109.160.32.115 port 52798
2012.01.10 11:00:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:41,info,10.139.26.2,sshd,Failed password for invalid user lighthouse from 109.160.32.115 port 52798 ssh2
2012.01.10 11:00:42,info,10.139.26.2,sshd,Connection closed by invalid user lighthouse 109.160.32.115 port 52798 [preauth]
2012.01.10 11:00:45,info,10.139.26.2,sshd,Invalid user us81 from 109.160.32.113 port 34750
2012.01.10 11:00:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:45,info,10.139.26.2,sshd,Failed password for invalid user us81 from 109.160.32.113 port 34750 ssh2
2012.01.10 11:00:45,info,10.139.26.2,sshd,Invalid user test3 from 109.160.32.115 port 40394
2012.01.10 11:00:45,info,10.139.26.2,sshd,Connection closed by invalid user us81 109.160.32.113 port 34750 [preauth]
2012.01.10 11:00:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:46,info,10.139.26.2,sshd,Failed password for invalid user test3 from 109.160.32.115 port 40394 ssh2
2012.01.10 11:00:46,info,10.139.26.2,sshd,Connection closed by invalid user test3 109.160.32.115 port 40394 [preauth]
2012.01.10 11:00:49,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.113 port 34798
2012.01.10 11:00:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:50,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.113 port 34798 ssh2
2012.01.10 11:00:50,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.113 port 34798 [preauth]
2012.01.10 11:00:50,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40452 ssh2
2012.01.10 11:00:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40452 [preauth]
2012.01.10 11:00:54,info,10.139.26.2,sshd,Invalid user lx from 109.160.32.113 port 57782
2012.01.10 11:00:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:54,info,10.139.26.2,sshd,Failed password for invalid user lx from 109.160.32.113 port 57782 ssh2
2012.01.10 11:00:54,info,10.139.26.2,sshd,Invalid user rocky from 109.160.32.115 port 54048
2012.01.10 11:00:54,info,10.139.26.2,sshd,Connection closed by invalid user lx 109.160.32.113 port 57782 [preauth]
2012.01.10 11:00:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:00:54,info,10.139.26.2,sshd,Failed password for invalid user rocky from 109.160.32.115 port 54048 ssh2
2012.01.10 11:00:55,info,10.139.26.2,sshd,Connection closed by invalid user rocky 109.160.32.115 port 54048 [preauth]
2012.01.10 11:00:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57820 ssh2
2012.01.10 11:00:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57820 [preauth]
2012.01.10 11:00:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54074 ssh2
2012.01.10 11:00:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54074 [preauth]
2012.01.10 11:01:03,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 41622
2012.01.10 11:01:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:03,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 41622 ssh2
2012.01.10 11:01:03,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 41622 [preauth]
2012.01.10 11:01:04,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 36490
2012.01.10 11:01:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:04,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 36490 ssh2
2012.01.10 11:01:04,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 36490 [preauth]
2012.01.10 11:01:07,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 41668
2012.01.10 11:01:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:07,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 41668 ssh2
2012.01.10 11:01:08,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 41668 [preauth]
2012.01.10 11:01:09,info,10.139.26.2,sshd,Invalid user wjw from 109.160.32.115 port 36502
2012.01.10 11:01:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:09,info,10.139.26.2,sshd,Failed password for invalid user wjw from 109.160.32.115 port 36502 ssh2
2012.01.10 11:01:09,info,10.139.26.2,sshd,Connection closed by invalid user wjw 109.160.32.115 port 36502 [preauth]
2012.01.10 11:01:12,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.113 port 58574
2012.01.10 11:01:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:12,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.113 port 58574 ssh2
2012.01.10 11:01:12,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.113 port 58574 [preauth]
2012.01.10 11:01:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56006 ssh2
2012.01.10 11:01:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56006 [preauth]
2012.01.10 11:01:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58626 ssh2
2012.01.10 11:01:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58626 [preauth]
2012.01.10 11:01:18,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 56050
2012.01.10 11:01:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:18,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 56050 ssh2
2012.01.10 11:01:18,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 56050 [preauth]
2012.01.10 11:01:21,info,10.139.26.2,sshd,Invalid user adminuser from 109.160.32.113 port 58682
2012.01.10 11:01:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:21,info,10.139.26.2,sshd,Failed password for invalid user adminuser from 109.160.32.113 port 58682 ssh2
2012.01.10 11:01:22,info,10.139.26.2,sshd,Connection closed by invalid user adminuser 109.160.32.113 port 58682 [preauth]
2012.01.10 11:01:23,info,10.139.26.2,sshd,Invalid user mslee21 from 34.123.134.194 port 40088
2012.01.10 11:01:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:23,info,10.139.26.2,sshd,Failed password for invalid user mslee21 from 34.123.134.194 port 40088 ssh2
2012.01.10 11:01:23,info,10.139.26.2,sshd,Invalid user student from 109.160.32.115 port 43252
2012.01.10 11:01:23,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 40088:11: Bye Bye [preauth]
2012.01.10 11:01:23,info,10.139.26.2,sshd,Disconnected from invalid user mslee21 34.123.134.194 port 40088 [preauth]
2012.01.10 11:01:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:23,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.115 port 43252 ssh2
2012.01.10 11:01:23,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.115 port 43252 [preauth]
2012.01.10 11:01:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58962 ssh2
2012.01.10 11:01:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58962 [preauth]
2012.01.10 11:01:28,info,10.139.26.2,sshd,Invalid user wildfly from 109.160.32.115 port 43304
2012.01.10 11:01:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:28,info,10.139.26.2,sshd,Failed password for invalid user wildfly from 109.160.32.115 port 43304 ssh2
2012.01.10 11:01:28,info,10.139.26.2,sshd,Connection closed by invalid user wildfly 109.160.32.115 port 43304 [preauth]
2012.01.10 11:01:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59008 ssh2
2012.01.10 11:01:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59008 [preauth]
2012.01.10 11:01:32,info,10.139.26.2,sshd,Invalid user student from 109.160.32.115 port 58840
2012.01.10 11:01:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:33,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.115 port 58840 ssh2
2012.01.10 11:01:33,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.115 port 58840 [preauth]
2012.01.10 11:01:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36798 ssh2
2012.01.10 11:01:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36798 [preauth]
2012.01.10 11:01:37,info,10.139.26.2,sshd,Invalid user AdminGPON from 109.160.32.115 port 58890
2012.01.10 11:01:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:01:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:37,info,10.139.26.2,sshd,Failed password for invalid user AdminGPON from 109.160.32.115 port 58890 ssh2
2012.01.10 11:01:37,info,10.139.26.2,sshd,Connection closed by invalid user AdminGPON 109.160.32.115 port 58890 [preauth]
2012.01.10 11:01:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36842 ssh2
2012.01.10 11:01:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36842 [preauth]
2012.01.10 11:01:41,info,10.139.26.2,sshd,Invalid user voip from 109.160.32.115 port 58928
2012.01.10 11:01:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:41,info,10.139.26.2,sshd,Failed password for invalid user voip from 109.160.32.115 port 58928 ssh2
2012.01.10 11:01:41,info,10.139.26.2,sshd,Connection closed by invalid user voip 109.160.32.115 port 58928 [preauth]
2012.01.10 11:01:44,info,10.139.26.2,sshd,Invalid user alex from 109.160.32.113 port 41220
2012.01.10 11:01:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:44,info,10.139.26.2,sshd,Failed password for invalid user alex from 109.160.32.113 port 41220 ssh2
2012.01.10 11:01:45,info,10.139.26.2,sshd,Connection closed by invalid user alex 109.160.32.113 port 41220 [preauth]
2012.01.10 11:01:45,info,10.139.26.2,sshd,Invalid user user22 from 109.160.32.115 port 56088
2012.01.10 11:01:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:45,info,10.139.26.2,sshd,Failed password for invalid user user22 from 109.160.32.115 port 56088 ssh2
2012.01.10 11:01:46,info,10.139.26.2,sshd,Connection closed by invalid user user22 109.160.32.115 port 56088 [preauth]
2012.01.10 11:01:49,info,10.139.26.2,sshd,Invalid user gitlab-runner from 109.160.32.113 port 41310
2012.01.10 11:01:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:49,info,10.139.26.2,sshd,Failed password for invalid user gitlab-runner from 109.160.32.113 port 41310 ssh2
2012.01.10 11:01:49,info,10.139.26.2,sshd,Connection closed by invalid user gitlab-runner 109.160.32.113 port 41310 [preauth]
2012.01.10 11:01:50,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.115 port 56134
2012.01.10 11:01:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:51,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.115 port 56134 ssh2
2012.01.10 11:01:51,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.115 port 56134 [preauth]
2012.01.10 11:01:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43242 ssh2
2012.01.10 11:01:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43242 [preauth]
2012.01.10 11:01:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33910 ssh2
2012.01.10 11:01:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33910 [preauth]
2012.01.10 11:01:58,info,10.139.26.2,sshd,Invalid user server from 109.160.32.113 port 43304
2012.01.10 11:01:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:01:58,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.113 port 43304 ssh2
2012.01.10 11:01:58,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.113 port 43304 [preauth]
2012.01.10 11:02:00,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33968 ssh2
2012.01.10 11:02:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33968 [preauth]
2012.01.10 11:02:02,info,10.139.26.2,sshd,Invalid user ymy from 109.160.32.113 port 33932
2012.01.10 11:02:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:03,info,10.139.26.2,sshd,Failed password for invalid user ymy from 109.160.32.113 port 33932 ssh2
2012.01.10 11:02:03,info,10.139.26.2,sshd,Connection closed by invalid user ymy 109.160.32.113 port 33932 [preauth]
2012.01.10 11:02:04,info,10.139.26.2,sshd,Invalid user greedo from 109.160.32.115 port 56590
2012.01.10 11:02:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:05,info,10.139.26.2,sshd,Failed password for invalid user greedo from 109.160.32.115 port 56590 ssh2
2012.01.10 11:02:05,info,10.139.26.2,sshd,Connection closed by invalid user greedo 109.160.32.115 port 56590 [preauth]
2012.01.10 11:02:07,info,10.139.26.2,sshd,Invalid user aaa from 109.160.32.113 port 34020
2012.01.10 11:02:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:07,info,10.139.26.2,sshd,Failed password for invalid user aaa from 109.160.32.113 port 34020 ssh2
2012.01.10 11:02:08,info,10.139.26.2,sshd,Connection closed by invalid user aaa 109.160.32.113 port 34020 [preauth]
2012.01.10 11:02:10,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56648 ssh2
2012.01.10 11:02:10,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56648 [preauth]
2012.01.10 11:02:12,info,10.139.26.2,sshd,Invalid user amine from 109.160.32.113 port 32838
2012.01.10 11:02:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:12,info,10.139.26.2,sshd,Failed password for invalid user amine from 109.160.32.113 port 32838 ssh2
2012.01.10 11:02:12,info,10.139.26.2,sshd,Connection closed by invalid user amine 109.160.32.113 port 32838 [preauth]
2012.01.10 11:02:16,info,10.139.26.2,sshd,Invalid user devops from 109.160.32.115 port 47388
2012.01.10 11:02:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:16,info,10.139.26.2,sshd,Failed password for invalid user devops from 109.160.32.115 port 47388 ssh2
2012.01.10 11:02:16,info,10.139.26.2,sshd,Connection closed by invalid user devops 109.160.32.115 port 47388 [preauth]
2012.01.10 11:02:16,info,10.139.26.2,sshd,Invalid user centos from 109.160.32.113 port 32874
2012.01.10 11:02:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:16,info,10.139.26.2,sshd,Failed password for invalid user centos from 109.160.32.113 port 32874 ssh2
2012.01.10 11:02:16,info,10.139.26.2,sshd,Connection closed by invalid user centos 109.160.32.113 port 32874 [preauth]
2012.01.10 11:02:20,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47426 ssh2
2012.01.10 11:02:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47426 [preauth]
2012.01.10 11:02:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 32962 ssh2
2012.01.10 11:02:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 32962 [preauth]
2012.01.10 11:02:26,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 52032
2012.01.10 11:02:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:26,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 52032 ssh2
2012.01.10 11:02:26,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 52032 [preauth]
2012.01.10 11:02:26,info,10.139.26.2,sshd,Invalid user es from 109.160.32.115 port 36296
2012.01.10 11:02:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:26,info,10.139.26.2,sshd,Failed password for invalid user es from 109.160.32.115 port 36296 ssh2
2012.01.10 11:02:27,info,10.139.26.2,sshd,Connection closed by invalid user es 109.160.32.115 port 36296 [preauth]
2012.01.10 11:02:28,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61079 ssh2
2012.01.10 11:02:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61079 [preauth]
2012.01.10 11:02:30,info,10.139.26.2,sshd,Invalid user njupt080 from 109.160.32.113 port 52060
2012.01.10 11:02:31,info,10.139.26.2,sshd,Invalid user jeet from 109.160.32.115 port 36334
2012.01.10 11:02:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:31,info,10.139.26.2,sshd,Failed password for invalid user njupt080 from 109.160.32.113 port 52060 ssh2
2012.01.10 11:02:31,info,10.139.26.2,sshd,Failed password for invalid user jeet from 109.160.32.115 port 36334 ssh2
2012.01.10 11:02:31,info,10.139.26.2,sshd,Connection closed by invalid user jeet 109.160.32.115 port 36334 [preauth]
2012.01.10 11:02:31,info,10.139.26.2,sshd,Connection closed by invalid user njupt080 109.160.32.113 port 52060 [preauth]
2012.01.10 11:02:35,info,10.139.26.2,sshd,Invalid user init from 109.160.32.113 port 39118
2012.01.10 11:02:35,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 43410
2012.01.10 11:02:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:35,info,10.139.26.2,sshd,Failed password for invalid user init from 109.160.32.113 port 39118 ssh2
2012.01.10 11:02:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:35,info,10.139.26.2,sshd,Connection closed by invalid user init 109.160.32.113 port 39118 [preauth]
2012.01.10 11:02:36,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 43410 ssh2
2012.01.10 11:02:36,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 43410 [preauth]
2012.01.10 11:02:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:02:39,info,10.139.26.2,sshd,Invalid user ai from 109.160.32.113 port 39160
2012.01.10 11:02:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:40,info,10.139.26.2,sshd,Failed password for invalid user ai from 109.160.32.113 port 39160 ssh2
2012.01.10 11:02:40,info,10.139.26.2,sshd,Invalid user superadmin from 34.123.134.194 port 38196
2012.01.10 11:02:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:40,info,10.139.26.2,sshd,Failed password for invalid user superadmin from 34.123.134.194 port 38196 ssh2
2012.01.10 11:02:40,info,10.139.26.2,sshd,Connection closed by invalid user ai 109.160.32.113 port 39160 [preauth]
2012.01.10 11:02:40,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 38196:11: Bye Bye [preauth]
2012.01.10 11:02:40,info,10.139.26.2,sshd,Disconnected from invalid user superadmin 34.123.134.194 port 38196 [preauth]
2012.01.10 11:02:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 43454 ssh2
2012.01.10 11:02:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 43454 [preauth]
2012.01.10 11:02:44,info,10.139.26.2,sshd,Invalid user github-runner from 109.160.32.113 port 34728
2012.01.10 11:02:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:44,info,10.139.26.2,sshd,Failed password for invalid user github-runner from 109.160.32.113 port 34728 ssh2
2012.01.10 11:02:44,info,10.139.26.2,sshd,Connection closed by invalid user github-runner 109.160.32.113 port 34728 [preauth]
2012.01.10 11:02:45,info,10.139.26.2,sshd,Invalid user christianna from 109.160.32.115 port 55754
2012.01.10 11:02:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:45,info,10.139.26.2,sshd,Failed password for invalid user christianna from 109.160.32.115 port 55754 ssh2
2012.01.10 11:02:46,info,10.139.26.2,sshd,Connection closed by invalid user christianna 109.160.32.115 port 55754 [preauth]
2012.01.10 11:02:48,info,10.139.26.2,sshd,Invalid user agent from 109.160.32.113 port 34750
2012.01.10 11:02:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:49,info,10.139.26.2,sshd,Failed password for invalid user agent from 109.160.32.113 port 34750 ssh2
2012.01.10 11:02:49,info,10.139.26.2,sshd,Connection closed by invalid user agent 109.160.32.113 port 34750 [preauth]
2012.01.10 11:02:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55796 ssh2
2012.01.10 11:02:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55796 [preauth]
2012.01.10 11:02:53,info,10.139.26.2,sshd,Invalid user file from 109.160.32.113 port 39898
2012.01.10 11:02:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:53,info,10.139.26.2,sshd,Failed password for invalid user file from 109.160.32.113 port 39898 ssh2
2012.01.10 11:02:53,info,10.139.26.2,sshd,Connection closed by invalid user file 109.160.32.113 port 39898 [preauth]
2012.01.10 11:02:54,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.115 port 41080
2012.01.10 11:02:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:54,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.115 port 41080 ssh2
2012.01.10 11:02:55,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.115 port 41080 [preauth]
2012.01.10 11:02:55,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 35466 ssh2
2012.01.10 11:02:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 35466 [preauth]
2012.01.10 11:02:57,info,10.139.26.2,sshd,Invalid user recorder from 109.160.32.113 port 39916
2012.01.10 11:02:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:02:58,info,10.139.26.2,sshd,Failed password for invalid user recorder from 109.160.32.113 port 39916 ssh2
2012.01.10 11:02:58,info,10.139.26.2,sshd,Connection closed by invalid user recorder 109.160.32.113 port 39916 [preauth]
2012.01.10 11:02:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41168 ssh2
2012.01.10 11:02:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41168 [preauth]
2012.01.10 11:03:02,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38830 ssh2
2012.01.10 11:03:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38830 [preauth]
2012.01.10 11:03:03,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 58912
2012.01.10 11:03:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:04,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 58912 ssh2
2012.01.10 11:03:04,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 58912 [preauth]
2012.01.10 11:03:06,info,10.139.26.2,sshd,Invalid user omm from 109.160.32.113 port 38848
2012.01.10 11:03:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:07,info,10.139.26.2,sshd,Failed password for invalid user omm from 109.160.32.113 port 38848 ssh2
2012.01.10 11:03:07,info,10.139.26.2,sshd,Connection closed by invalid user omm 109.160.32.113 port 38848 [preauth]
2012.01.10 11:03:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58956 ssh2
2012.01.10 11:03:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58956 [preauth]
2012.01.10 11:03:11,info,10.139.26.2,sshd,Invalid user sam from 109.160.32.113 port 38874
2012.01.10 11:03:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:11,info,10.139.26.2,sshd,Failed password for invalid user sam from 109.160.32.113 port 38874 ssh2
2012.01.10 11:03:11,info,10.139.26.2,sshd,Connection closed by invalid user sam 109.160.32.113 port 38874 [preauth]
2012.01.10 11:03:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60040 ssh2
2012.01.10 11:03:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60040 [preauth]
2012.01.10 11:03:15,info,10.139.26.2,sshd,Invalid user username from 109.160.32.113 port 60094
2012.01.10 11:03:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:16,info,10.139.26.2,sshd,Failed password for invalid user username from 109.160.32.113 port 60094 ssh2
2012.01.10 11:03:16,info,10.139.26.2,sshd,Connection closed by invalid user username 109.160.32.113 port 60094 [preauth]
2012.01.10 11:03:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60100 ssh2
2012.01.10 11:03:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60100 [preauth]
2012.01.10 11:03:20,info,10.139.26.2,sshd,Invalid user trade from 109.160.32.113 port 60166
2012.01.10 11:03:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:20,info,10.139.26.2,sshd,Failed password for invalid user trade from 109.160.32.113 port 60166 ssh2
2012.01.10 11:03:20,info,10.139.26.2,sshd,Connection closed by invalid user trade 109.160.32.113 port 60166 [preauth]
2012.01.10 11:03:23,info,10.139.26.2,sshd,Invalid user bitrix from 109.160.32.115 port 34894
2012.01.10 11:03:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:23,info,10.139.26.2,sshd,Failed password for invalid user bitrix from 109.160.32.115 port 34894 ssh2
2012.01.10 11:03:23,info,10.139.26.2,sshd,Connection closed by invalid user bitrix 109.160.32.115 port 34894 [preauth]
2012.01.10 11:03:24,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 33426 ssh2
2012.01.10 11:03:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 33426 [preauth]
2012.01.10 11:03:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34934 ssh2
2012.01.10 11:03:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34934 [preauth]
2012.01.10 11:03:29,info,10.139.26.2,sshd,Invalid user jenkins from 109.160.32.113 port 33522
2012.01.10 11:03:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:29,info,10.139.26.2,sshd,Failed password for invalid user jenkins from 109.160.32.113 port 33522 ssh2
2012.01.10 11:03:29,info,10.139.26.2,sshd,Connection closed by invalid user jenkins 109.160.32.113 port 33522 [preauth]
2012.01.10 11:03:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34972 ssh2
2012.01.10 11:03:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34972 [preauth]
2012.01.10 11:03:34,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48490 ssh2
2012.01.10 11:03:34,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48490 [preauth]
2012.01.10 11:03:36,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 60718
2012.01.10 11:03:36,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:03:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:36,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 60718 ssh2
2012.01.10 11:03:37,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 60718 [preauth]
2012.01.10 11:03:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48536 ssh2
2012.01.10 11:03:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48536 [preauth]
2012.01.10 11:03:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60808 ssh2
2012.01.10 11:03:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60808 [preauth]
2012.01.10 11:03:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56274 ssh2
2012.01.10 11:03:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56274 [preauth]
2012.01.10 11:03:45,info,10.139.26.2,sshd,Invalid user dspace from 109.160.32.115 port 38706
2012.01.10 11:03:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:45,info,10.139.26.2,sshd,Failed password for invalid user dspace from 109.160.32.115 port 38706 ssh2
2012.01.10 11:03:45,info,10.139.26.2,sshd,Connection closed by invalid user dspace 109.160.32.115 port 38706 [preauth]
2012.01.10 11:03:47,info,10.139.26.2,sshd,Invalid user www from 109.160.32.113 port 56312
2012.01.10 11:03:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:47,info,10.139.26.2,sshd,Failed password for invalid user www from 109.160.32.113 port 56312 ssh2
2012.01.10 11:03:48,info,10.139.26.2,sshd,Connection closed by invalid user www 109.160.32.113 port 56312 [preauth]
2012.01.10 11:03:50,info,10.139.26.2,sshd,Invalid user tester from 109.160.32.115 port 38774
2012.01.10 11:03:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:50,info,10.139.26.2,sshd,Failed password for invalid user tester from 109.160.32.115 port 38774 ssh2
2012.01.10 11:03:51,info,10.139.26.2,sshd,Connection closed by invalid user tester 109.160.32.115 port 38774 [preauth]
2012.01.10 11:03:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53552 ssh2
2012.01.10 11:03:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53552 [preauth]
2012.01.10 11:03:55,info,10.139.26.2,sshd,Invalid user lx from 109.160.32.115 port 49870
2012.01.10 11:03:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:55,info,10.139.26.2,sshd,Failed password for invalid user lx from 109.160.32.115 port 49870 ssh2
2012.01.10 11:03:55,info,10.139.26.2,sshd,Connection closed by invalid user lx 109.160.32.115 port 49870 [preauth]
2012.01.10 11:03:57,info,10.139.26.2,sshd,Invalid user user17 from 109.160.32.113 port 53610
2012.01.10 11:03:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:57,info,10.139.26.2,sshd,Failed password for invalid user user17 from 109.160.32.113 port 53610 ssh2
2012.01.10 11:03:57,info,10.139.26.2,sshd,Connection closed by invalid user user17 109.160.32.113 port 53610 [preauth]
2012.01.10 11:03:59,info,10.139.26.2,sshd,Invalid user user from 34.123.134.194 port 36316
2012.01.10 11:03:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:03:59,info,10.139.26.2,sshd,Failed password for invalid user user from 34.123.134.194 port 36316 ssh2
2012.01.10 11:03:59,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 36316:11: Bye Bye [preauth]
2012.01.10 11:03:59,info,10.139.26.2,sshd,Disconnected from invalid user user 34.123.134.194 port 36316 [preauth]
2012.01.10 11:04:00,info,10.139.26.2,sshd,Invalid user kelly from 109.160.32.115 port 49930
2012.01.10 11:04:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:00,info,10.139.26.2,sshd,Failed password for invalid user kelly from 109.160.32.115 port 49930 ssh2
2012.01.10 11:04:01,info,10.139.26.2,sshd,Connection closed by invalid user kelly 109.160.32.115 port 49930 [preauth]
2012.01.10 11:04:02,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 41080
2012.01.10 11:04:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:02,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 41080 ssh2
2012.01.10 11:04:02,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 41080 [preauth]
2012.01.10 11:04:05,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53578 ssh2
2012.01.10 11:04:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53578 [preauth]
2012.01.10 11:04:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41144 ssh2
2012.01.10 11:04:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41144 [preauth]
2012.01.10 11:04:10,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 53600
2012.01.10 11:04:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:10,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 53600 ssh2
2012.01.10 11:04:10,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 53600 [preauth]
2012.01.10 11:04:12,info,10.139.26.2,sshd,Invalid user myuser from 109.160.32.113 port 41196
2012.01.10 11:04:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:12,info,10.139.26.2,sshd,Failed password for invalid user myuser from 109.160.32.113 port 41196 ssh2
2012.01.10 11:04:12,info,10.139.26.2,sshd,Connection closed by invalid user myuser 109.160.32.113 port 41196 [preauth]
2012.01.10 11:04:15,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.115 port 60424
2012.01.10 11:04:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:15,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.115 port 60424 ssh2
2012.01.10 11:04:15,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.115 port 60424 [preauth]
2012.01.10 11:04:17,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.113 port 39484
2012.01.10 11:04:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:17,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.113 port 39484 ssh2
2012.01.10 11:04:17,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.113 port 39484 [preauth]
2012.01.10 11:04:19,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60562 ssh2
2012.01.10 11:04:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60562 [preauth]
2012.01.10 11:04:22,info,10.139.26.2,sshd,Invalid user hadoop from 109.160.32.113 port 52456
2012.01.10 11:04:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:22,info,10.139.26.2,sshd,Failed password for invalid user hadoop from 109.160.32.113 port 52456 ssh2
2012.01.10 11:04:22,info,10.139.26.2,sshd,Connection closed by invalid user hadoop 109.160.32.113 port 52456 [preauth]
2012.01.10 11:04:24,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 65446 ssh2
2012.01.10 11:04:25,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 40422
2012.01.10 11:04:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 65446 [preauth]
2012.01.10 11:04:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:25,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 40422 ssh2
2012.01.10 11:04:25,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 40422 [preauth]
2012.01.10 11:04:27,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.113 port 52502
2012.01.10 11:04:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:27,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.113 port 52502 ssh2
2012.01.10 11:04:27,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.113 port 52502 [preauth]
2012.01.10 11:04:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40478 ssh2
2012.01.10 11:04:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40478 [preauth]
2012.01.10 11:04:31,info,10.139.26.2,sshd,Invalid user docker from 109.160.32.113 port 52598
2012.01.10 11:04:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:31,info,10.139.26.2,sshd,Failed password for invalid user docker from 109.160.32.113 port 52598 ssh2
2012.01.10 11:04:32,info,10.139.26.2,sshd,Connection closed by invalid user docker 109.160.32.113 port 52598 [preauth]
2012.01.10 11:04:34,info,10.139.26.2,sshd,Invalid user vpn from 109.160.32.115 port 35976
2012.01.10 11:04:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:35,info,10.139.26.2,sshd,Failed password for invalid user vpn from 109.160.32.115 port 35976 ssh2
2012.01.10 11:04:35,info,10.139.26.2,sshd,Connection closed by invalid user vpn 109.160.32.115 port 35976 [preauth]
2012.01.10 11:04:36,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:04:36,info,10.139.26.2,sshd,Invalid user kaiming from 109.160.32.113 port 57864
2012.01.10 11:04:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:37,info,10.139.26.2,sshd,Failed password for invalid user kaiming from 109.160.32.113 port 57864 ssh2
2012.01.10 11:04:37,info,10.139.26.2,sshd,Connection closed by invalid user kaiming 109.160.32.113 port 57864 [preauth]
2012.01.10 11:04:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36000 ssh2
2012.01.10 11:04:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36000 [preauth]
2012.01.10 11:04:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57888 ssh2
2012.01.10 11:04:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57888 [preauth]
2012.01.10 11:04:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60972 ssh2
2012.01.10 11:04:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60972 [preauth]
2012.01.10 11:04:47,info,10.139.26.2,sshd,Invalid user ark from 109.160.32.113 port 42400
2012.01.10 11:04:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:47,info,10.139.26.2,sshd,Failed password for invalid user ark from 109.160.32.113 port 42400 ssh2
2012.01.10 11:04:47,info,10.139.26.2,sshd,Connection closed by invalid user ark 109.160.32.113 port 42400 [preauth]
2012.01.10 11:04:49,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 32776
2012.01.10 11:04:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:49,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 32776 ssh2
2012.01.10 11:04:50,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 32776 [preauth]
2012.01.10 11:04:51,info,10.139.26.2,sshd,Invalid user dolphinscheduler from 109.160.32.113 port 42454
2012.01.10 11:04:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:51,info,10.139.26.2,sshd,Failed password for invalid user dolphinscheduler from 109.160.32.113 port 42454 ssh2
2012.01.10 11:04:52,info,10.139.26.2,sshd,Connection closed by invalid user dolphinscheduler 109.160.32.113 port 42454 [preauth]
2012.01.10 11:04:54,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 54820
2012.01.10 11:04:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:54,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 54820 ssh2
2012.01.10 11:04:55,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 54820 [preauth]
2012.01.10 11:04:56,info,10.139.26.2,sshd,Invalid user cheryl from 109.160.32.113 port 40280
2012.01.10 11:04:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:04:56,info,10.139.26.2,sshd,Failed password for invalid user cheryl from 109.160.32.113 port 40280 ssh2
2012.01.10 11:04:56,info,10.139.26.2,sshd,Connection closed by invalid user cheryl 109.160.32.113 port 40280 [preauth]
2012.01.10 11:04:59,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 38576 ssh2
2012.01.10 11:04:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54892 ssh2
2012.01.10 11:04:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 38576 [preauth]
2012.01.10 11:04:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54892 [preauth]
2012.01.10 11:05:01,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 40334 ssh2
2012.01.10 11:05:01,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 40334 [preauth]
2012.01.10 11:05:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 57910 ssh2
2012.01.10 11:05:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 57910 [preauth]
2012.01.10 11:05:06,info,10.139.26.2,sshd,Invalid user asiainfo from 109.160.32.113 port 52898
2012.01.10 11:05:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:06,info,10.139.26.2,sshd,Failed password for invalid user asiainfo from 109.160.32.113 port 52898 ssh2
2012.01.10 11:05:06,info,10.139.26.2,sshd,Connection closed by invalid user asiainfo 109.160.32.113 port 52898 [preauth]
2012.01.10 11:05:09,info,10.139.26.2,sshd,Invalid user kingbase from 109.160.32.115 port 57942
2012.01.10 11:05:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:09,info,10.139.26.2,sshd,Failed password for invalid user kingbase from 109.160.32.115 port 57942 ssh2
2012.01.10 11:05:09,info,10.139.26.2,sshd,Connection closed by invalid user kingbase 109.160.32.115 port 57942 [preauth]
2012.01.10 11:05:11,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52938 ssh2
2012.01.10 11:05:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52938 [preauth]
2012.01.10 11:05:14,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 56546
2012.01.10 11:05:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:14,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 56546 ssh2
2012.01.10 11:05:14,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 56546 [preauth]
2012.01.10 11:05:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43696 ssh2
2012.01.10 11:05:16,info,10.139.26.2,sshd,Failed password for root from 34.123.134.194 port 34422 ssh2
2012.01.10 11:05:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43696 [preauth]
2012.01.10 11:05:16,info,10.139.26.2,sshd,Received disconnect from 34.123.134.194 port 34422:11: Bye Bye [preauth]
2012.01.10 11:05:16,info,10.139.26.2,sshd,Disconnected from authenticating user root 34.123.134.194 port 34422 [preauth]
2012.01.10 11:05:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56600 ssh2
2012.01.10 11:05:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56600 [preauth]
2012.01.10 11:05:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43740 ssh2
2012.01.10 11:05:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43740 [preauth]
2012.01.10 11:05:23,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.115 port 51776
2012.01.10 11:05:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:23,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.115 port 51776 ssh2
2012.01.10 11:05:23,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.115 port 51776 [preauth]
2012.01.10 11:05:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48350 ssh2
2012.01.10 11:05:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48350 [preauth]
2012.01.10 11:05:28,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 51838
2012.01.10 11:05:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:28,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 51838 ssh2
2012.01.10 11:05:28,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 51838 [preauth]
2012.01.10 11:05:30,info,10.139.26.2,sshd,Invalid user dev2 from 109.160.32.113 port 48420
2012.01.10 11:05:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:30,info,10.139.26.2,sshd,Failed password for invalid user dev2 from 109.160.32.113 port 48420 ssh2
2012.01.10 11:05:30,info,10.139.26.2,sshd,Connection closed by invalid user dev2 109.160.32.113 port 48420 [preauth]
2012.01.10 11:05:33,info,10.139.26.2,sshd,Invalid user nexus from 109.160.32.115 port 36802
2012.01.10 11:05:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:33,info,10.139.26.2,sshd,Failed password for invalid user nexus from 109.160.32.115 port 36802 ssh2
2012.01.10 11:05:33,info,10.139.26.2,sshd,Connection closed by invalid user nexus 109.160.32.115 port 36802 [preauth]
2012.01.10 11:05:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34086 ssh2
2012.01.10 11:05:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34086 [preauth]
2012.01.10 11:05:36,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:05:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 36850 ssh2
2012.01.10 11:05:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 36850 [preauth]
2012.01.10 11:05:39,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34138 ssh2
2012.01.10 11:05:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34138 [preauth]
2012.01.10 11:05:42,info,10.139.26.2,sshd,Invalid user carlos from 138.226.239.233 port 40172
2012.01.10 11:05:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:43,info,10.139.26.2,sshd,Failed password for invalid user carlos from 138.226.239.233 port 40172 ssh2
2012.01.10 11:05:43,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.115 port 39394
2012.01.10 11:05:43,info,10.139.26.2,sshd,Connection closed by invalid user carlos 138.226.239.233 port 40172 [preauth]
2012.01.10 11:05:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:43,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.115 port 39394 ssh2
2012.01.10 11:05:43,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.115 port 39394 [preauth]
2012.01.10 11:05:44,info,10.139.26.2,sshd,Invalid user teste from 109.160.32.113 port 48528
2012.01.10 11:05:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:44,info,10.139.26.2,sshd,Failed password for invalid user teste from 109.160.32.113 port 48528 ssh2
2012.01.10 11:05:44,info,10.139.26.2,sshd,Connection closed by invalid user teste 109.160.32.113 port 48528 [preauth]
2012.01.10 11:05:47,info,10.139.26.2,sshd,Invalid user ec2-user from 109.160.32.115 port 39428
2012.01.10 11:05:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:48,info,10.139.26.2,sshd,Failed password for invalid user ec2-user from 109.160.32.115 port 39428 ssh2
2012.01.10 11:05:48,info,10.139.26.2,sshd,Connection closed by invalid user ec2-user 109.160.32.115 port 39428 [preauth]
2012.01.10 11:05:49,info,10.139.26.2,sshd,Invalid user rocky from 109.160.32.113 port 48598
2012.01.10 11:05:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:49,info,10.139.26.2,sshd,Failed password for invalid user rocky from 109.160.32.113 port 48598 ssh2
2012.01.10 11:05:49,info,10.139.26.2,sshd,Connection closed by invalid user rocky 109.160.32.113 port 48598 [preauth]
2012.01.10 11:05:53,info,10.139.26.2,sshd,Invalid user asiainfo from 109.160.32.115 port 44336
2012.01.10 11:05:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:53,info,10.139.26.2,sshd,Failed password for invalid user asiainfo from 109.160.32.115 port 44336 ssh2
2012.01.10 11:05:53,info,10.139.26.2,sshd,Connection closed by invalid user asiainfo 109.160.32.115 port 44336 [preauth]
2012.01.10 11:05:53,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.113 port 33938
2012.01.10 11:05:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:54,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.113 port 33938 ssh2
2012.01.10 11:05:54,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.113 port 33938 [preauth]
2012.01.10 11:05:57,info,10.139.26.2,sshd,Invalid user mailuser from 109.160.32.115 port 44380
2012.01.10 11:05:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:57,info,10.139.26.2,sshd,Failed password for invalid user mailuser from 109.160.32.115 port 44380 ssh2
2012.01.10 11:05:57,info,10.139.26.2,sshd,Connection closed by invalid user mailuser 109.160.32.115 port 44380 [preauth]
2012.01.10 11:05:58,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 33996
2012.01.10 11:05:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:05:58,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 33996 ssh2
2012.01.10 11:05:58,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 33996 [preauth]
2012.01.10 11:06:02,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.115 port 33220
2012.01.10 11:06:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:02,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.115 port 33220 ssh2
2012.01.10 11:06:03,info,10.139.26.2,sshd,Invalid user customer from 109.160.32.113 port 39164
2012.01.10 11:06:03,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.115 port 33220 [preauth]
2012.01.10 11:06:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:03,info,10.139.26.2,sshd,Failed password for invalid user customer from 109.160.32.113 port 39164 ssh2
2012.01.10 11:06:03,info,10.139.26.2,sshd,Connection closed by invalid user customer 109.160.32.113 port 39164 [preauth]
2012.01.10 11:06:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33270 ssh2
2012.01.10 11:06:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39222 ssh2
2012.01.10 11:06:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33270 [preauth]
2012.01.10 11:06:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39222 [preauth]
2012.01.10 11:06:12,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.115 port 33350
2012.01.10 11:06:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:12,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.115 port 33350 ssh2
2012.01.10 11:06:12,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.115 port 33350 [preauth]
2012.01.10 11:06:12,info,10.139.26.2,sshd,Invalid user centreon from 109.160.32.113 port 55280
2012.01.10 11:06:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:12,info,10.139.26.2,sshd,Failed password for invalid user centreon from 109.160.32.113 port 55280 ssh2
2012.01.10 11:06:13,info,10.139.26.2,sshd,Connection closed by invalid user centreon 109.160.32.113 port 55280 [preauth]
2012.01.10 11:06:16,info,10.139.26.2,sshd,Invalid user gitlab-runner from 109.160.32.115 port 33356
2012.01.10 11:06:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:17,info,10.139.26.2,sshd,Invalid user azureuser from 109.160.32.113 port 55326
2012.01.10 11:06:17,info,10.139.26.2,sshd,Failed password for invalid user gitlab-runner from 109.160.32.115 port 33356 ssh2
2012.01.10 11:06:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:17,info,10.139.26.2,sshd,Connection closed by invalid user gitlab-runner 109.160.32.115 port 33356 [preauth]
2012.01.10 11:06:17,info,10.139.26.2,sshd,Failed password for invalid user azureuser from 109.160.32.113 port 55326 ssh2
2012.01.10 11:06:17,info,10.139.26.2,sshd,Connection closed by invalid user azureuser 109.160.32.113 port 55326 [preauth]
2012.01.10 11:06:21,info,10.139.26.2,sshd,Invalid user fivem from 109.160.32.115 port 33380
2012.01.10 11:06:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55384 ssh2
2012.01.10 11:06:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:21,info,10.139.26.2,sshd,Failed password for invalid user fivem from 109.160.32.115 port 33380 ssh2
2012.01.10 11:06:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55384 [preauth]
2012.01.10 11:06:22,info,10.139.26.2,sshd,Connection closed by invalid user fivem 109.160.32.115 port 33380 [preauth]
2012.01.10 11:06:26,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 37280
2012.01.10 11:06:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:26,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 37280 ssh2
2012.01.10 11:06:26,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 37280 [preauth]
2012.01.10 11:06:27,info,10.139.26.2,sshd,Invalid user dmdba from 109.160.32.115 port 55062
2012.01.10 11:06:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:27,info,10.139.26.2,sshd,Failed password for invalid user dmdba from 109.160.32.115 port 55062 ssh2
2012.01.10 11:06:27,info,10.139.26.2,sshd,Connection closed by invalid user dmdba 109.160.32.115 port 55062 [preauth]
2012.01.10 11:06:29,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 54017 ssh2
2012.01.10 11:06:29,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 54017 [preauth]
2012.01.10 11:06:30,info,10.139.26.2,sshd,Invalid user kingbase from 109.160.32.113 port 37296
2012.01.10 11:06:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:31,info,10.139.26.2,sshd,Failed password for invalid user kingbase from 109.160.32.113 port 37296 ssh2
2012.01.10 11:06:31,info,10.139.26.2,sshd,Connection closed by invalid user kingbase 109.160.32.113 port 37296 [preauth]
2012.01.10 11:06:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55126 ssh2
2012.01.10 11:06:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55126 [preauth]
2012.01.10 11:06:35,info,10.139.26.2,sshd,Invalid user nvidia from 109.160.32.113 port 41362
2012.01.10 11:06:35,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:06:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:35,info,10.139.26.2,sshd,Failed password for invalid user nvidia from 109.160.32.113 port 41362 ssh2
2012.01.10 11:06:35,info,10.139.26.2,sshd,Connection closed by invalid user nvidia 109.160.32.113 port 41362 [preauth]
2012.01.10 11:06:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 44882 ssh2
2012.01.10 11:06:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 44882 [preauth]
2012.01.10 11:06:39,info,10.139.26.2,sshd,Invalid user jhf from 109.160.32.113 port 41396
2012.01.10 11:06:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:40,info,10.139.26.2,sshd,Failed password for invalid user jhf from 109.160.32.113 port 41396 ssh2
2012.01.10 11:06:40,info,10.139.26.2,sshd,Connection closed by invalid user jhf 109.160.32.113 port 41396 [preauth]
2012.01.10 11:06:41,info,10.139.26.2,sshd,Invalid user sysupdate from 109.160.32.115 port 44926
2012.01.10 11:06:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:41,info,10.139.26.2,sshd,Failed password for invalid user sysupdate from 109.160.32.115 port 44926 ssh2
2012.01.10 11:06:41,info,10.139.26.2,sshd,Connection closed by invalid user sysupdate 109.160.32.115 port 44926 [preauth]
2012.01.10 11:06:44,info,10.139.26.2,sshd,Invalid user github from 109.160.32.113 port 56690
2012.01.10 11:06:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:45,info,10.139.26.2,sshd,Failed password for invalid user github from 109.160.32.113 port 56690 ssh2
2012.01.10 11:06:45,info,10.139.26.2,sshd,Connection closed by invalid user github 109.160.32.113 port 56690 [preauth]
2012.01.10 11:06:45,info,10.139.26.2,sshd,Invalid user ftpuser from 109.160.32.115 port 38848
2012.01.10 11:06:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:46,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 109.160.32.115 port 38848 ssh2
2012.01.10 11:06:46,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 109.160.32.115 port 38848 [preauth]
2012.01.10 11:06:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56728 ssh2
2012.01.10 11:06:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56728 [preauth]
2012.01.10 11:06:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 38902 ssh2
2012.01.10 11:06:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 38902 [preauth]
2012.01.10 11:06:54,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 33034
2012.01.10 11:06:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:06:55,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 33034 ssh2
2012.01.10 11:06:55,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 33034 [preauth]
2012.01.10 11:06:56,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49210 ssh2
2012.01.10 11:06:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49210 [preauth]
2012.01.10 11:06:59,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 33074
2012.01.10 11:07:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:00,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 33074 ssh2
2012.01.10 11:07:00,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 33074 [preauth]
2012.01.10 11:07:03,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.115 port 43986
2012.01.10 11:07:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:03,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.115 port 43986 ssh2
2012.01.10 11:07:03,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.115 port 43986 [preauth]
2012.01.10 11:07:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43346 ssh2
2012.01.10 11:07:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43346 [preauth]
2012.01.10 11:07:08,info,10.139.26.2,sshd,Invalid user john from 109.160.32.115 port 44032
2012.01.10 11:07:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:08,info,10.139.26.2,sshd,Failed password for invalid user john from 109.160.32.115 port 44032 ssh2
2012.01.10 11:07:09,info,10.139.26.2,sshd,Connection closed by invalid user john 109.160.32.115 port 44032 [preauth]
2012.01.10 11:07:09,info,10.139.26.2,sshd,Invalid user wang from 109.160.32.113 port 43394
2012.01.10 11:07:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:09,info,10.139.26.2,sshd,Failed password for invalid user wang from 109.160.32.113 port 43394 ssh2
2012.01.10 11:07:10,info,10.139.26.2,sshd,Connection closed by invalid user wang 109.160.32.113 port 43394 [preauth]
2012.01.10 11:07:10,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 41668 ssh2
2012.01.10 11:07:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 41668 [preauth]
2012.01.10 11:07:13,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 53384
2012.01.10 11:07:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:13,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 53384 ssh2
2012.01.10 11:07:13,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 53384 [preauth]
2012.01.10 11:07:14,info,10.139.26.2,sshd,Invalid user username from 109.160.32.113 port 57036
2012.01.10 11:07:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:14,info,10.139.26.2,sshd,Failed password for invalid user username from 109.160.32.113 port 57036 ssh2
2012.01.10 11:07:14,info,10.139.26.2,sshd,Connection closed by invalid user username 109.160.32.113 port 57036 [preauth]
2012.01.10 11:07:19,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 57102
2012.01.10 11:07:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:19,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 57102 ssh2
2012.01.10 11:07:19,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53492 ssh2
2012.01.10 11:07:19,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 57102 [preauth]
2012.01.10 11:07:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53492 [preauth]
2012.01.10 11:07:23,info,10.139.26.2,sshd,Invalid user appuser from 109.160.32.115 port 44100
2012.01.10 11:07:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:23,info,10.139.26.2,sshd,Failed password for invalid user appuser from 109.160.32.115 port 44100 ssh2
2012.01.10 11:07:23,info,10.139.26.2,sshd,Connection closed by invalid user appuser 109.160.32.115 port 44100 [preauth]
2012.01.10 11:07:23,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.113 port 55456
2012.01.10 11:07:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:24,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.113 port 55456 ssh2
2012.01.10 11:07:24,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.113 port 55456 [preauth]
2012.01.10 11:07:27,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 44144
2012.01.10 11:07:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:28,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 44144 ssh2
2012.01.10 11:07:28,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 44144 [preauth]
2012.01.10 11:07:28,info,10.139.26.2,sshd,Invalid user odoo17 from 109.160.32.113 port 55480
2012.01.10 11:07:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:28,info,10.139.26.2,sshd,Failed password for invalid user odoo17 from 109.160.32.113 port 55480 ssh2
2012.01.10 11:07:29,info,10.139.26.2,sshd,Connection closed by invalid user odoo17 109.160.32.113 port 55480 [preauth]
2012.01.10 11:07:33,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 51348 ssh2
2012.01.10 11:07:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 51348 [preauth]
2012.01.10 11:07:33,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55230 ssh2
2012.01.10 11:07:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55230 [preauth]
2012.01.10 11:07:35,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:07:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 51426 ssh2
2012.01.10 11:07:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 51426 [preauth]
2012.01.10 11:07:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55290 ssh2
2012.01.10 11:07:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55290 [preauth]
2012.01.10 11:07:42,info,10.139.26.2,sshd,Invalid user oracle from 109.160.32.115 port 52348
2012.01.10 11:07:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:42,info,10.139.26.2,sshd,Failed password for invalid user oracle from 109.160.32.115 port 52348 ssh2
2012.01.10 11:07:43,info,10.139.26.2,sshd,Invalid user bitrix from 109.160.32.113 port 56510
2012.01.10 11:07:43,info,10.139.26.2,sshd,Connection closed by invalid user oracle 109.160.32.115 port 52348 [preauth]
2012.01.10 11:07:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:43,info,10.139.26.2,sshd,Failed password for invalid user bitrix from 109.160.32.113 port 56510 ssh2
2012.01.10 11:07:43,info,10.139.26.2,sshd,Connection closed by invalid user bitrix 109.160.32.113 port 56510 [preauth]
2012.01.10 11:07:47,info,10.139.26.2,sshd,Invalid user lucas from 109.160.32.113 port 56542
2012.01.10 11:07:47,info,10.139.26.2,sshd,Invalid user codex from 109.160.32.115 port 52418
2012.01.10 11:07:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:48,info,10.139.26.2,sshd,Failed password for invalid user lucas from 109.160.32.113 port 56542 ssh2
2012.01.10 11:07:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:48,info,10.139.26.2,sshd,Failed password for invalid user codex from 109.160.32.115 port 52418 ssh2
2012.01.10 11:07:48,info,10.139.26.2,sshd,Connection closed by invalid user lucas 109.160.32.113 port 56542 [preauth]
2012.01.10 11:07:48,info,10.139.26.2,sshd,Connection closed by invalid user codex 109.160.32.115 port 52418 [preauth]
2012.01.10 11:07:52,info,10.139.26.2,sshd,Invalid user zabbix from 109.160.32.113 port 53148
2012.01.10 11:07:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:52,info,10.139.26.2,sshd,Failed password for invalid user zabbix from 109.160.32.113 port 53148 ssh2
2012.01.10 11:07:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33124 ssh2
2012.01.10 11:07:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33124 [preauth]
2012.01.10 11:07:52,info,10.139.26.2,sshd,Connection closed by invalid user zabbix 109.160.32.113 port 53148 [preauth]
2012.01.10 11:07:57,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53262 ssh2
2012.01.10 11:07:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53262 [preauth]
2012.01.10 11:07:57,info,10.139.26.2,sshd,Invalid user alex from 109.160.32.115 port 33144
2012.01.10 11:07:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:07:57,info,10.139.26.2,sshd,Failed password for invalid user alex from 109.160.32.115 port 33144 ssh2
2012.01.10 11:07:57,info,10.139.26.2,sshd,Connection closed by invalid user alex 109.160.32.115 port 33144 [preauth]
2012.01.10 11:08:01,info,10.139.26.2,sshd,Invalid user hujiahao from 109.160.32.113 port 53374
2012.01.10 11:08:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:01,info,10.139.26.2,sshd,Failed password for invalid user hujiahao from 109.160.32.113 port 53374 ssh2
2012.01.10 11:08:01,info,10.139.26.2,sshd,Invalid user www from 109.160.32.115 port 58150
2012.01.10 11:08:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:02,info,10.139.26.2,sshd,Failed password for invalid user www from 109.160.32.115 port 58150 ssh2
2012.01.10 11:08:02,info,10.139.26.2,sshd,Connection closed by invalid user hujiahao 109.160.32.113 port 53374 [preauth]
2012.01.10 11:08:02,info,10.139.26.2,sshd,Connection closed by invalid user www 109.160.32.115 port 58150 [preauth]
2012.01.10 11:08:06,info,10.139.26.2,sshd,Invalid user fivem from 109.160.32.113 port 56072
2012.01.10 11:08:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:06,info,10.139.26.2,sshd,Failed password for invalid user fivem from 109.160.32.113 port 56072 ssh2
2012.01.10 11:08:06,info,10.139.26.2,sshd,Connection closed by invalid user fivem 109.160.32.113 port 56072 [preauth]
2012.01.10 11:08:06,info,10.139.26.2,sshd,Invalid user arthur from 109.160.32.115 port 58218
2012.01.10 11:08:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:07,info,10.139.26.2,sshd,Failed password for invalid user arthur from 109.160.32.115 port 58218 ssh2
2012.01.10 11:08:07,info,10.139.26.2,sshd,Connection closed by invalid user arthur 109.160.32.115 port 58218 [preauth]
2012.01.10 11:08:11,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 56128
2012.01.10 11:08:11,info,10.139.26.2,sshd,Invalid user webadmin from 109.160.32.115 port 58292
2012.01.10 11:08:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:11,info,10.139.26.2,sshd,Failed password for invalid user webadmin from 109.160.32.115 port 58292 ssh2
2012.01.10 11:08:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:11,info,10.139.26.2,sshd,Connection closed by invalid user webadmin 109.160.32.115 port 58292 [preauth]
2012.01.10 11:08:11,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 56128 ssh2
2012.01.10 11:08:12,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 56128 [preauth]
2012.01.10 11:08:15,info,10.139.26.2,sshd,Invalid user bernard from 109.160.32.113 port 45802
2012.01.10 11:08:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:15,info,10.139.26.2,sshd,Failed password for invalid user bernard from 109.160.32.113 port 45802 ssh2
2012.01.10 11:08:16,info,10.139.26.2,sshd,Connection closed by invalid user bernard 109.160.32.113 port 45802 [preauth]
2012.01.10 11:08:16,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.115 port 41660
2012.01.10 11:08:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:17,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.115 port 41660 ssh2
2012.01.10 11:08:17,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.115 port 41660 [preauth]
2012.01.10 11:08:20,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45846 ssh2
2012.01.10 11:08:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45846 [preauth]
2012.01.10 11:08:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41730 ssh2
2012.01.10 11:08:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41730 [preauth]
2012.01.10 11:08:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53000 ssh2
2012.01.10 11:08:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53000 [preauth]
2012.01.10 11:08:25,info,10.139.26.2,sshd,Invalid user adm1n from 109.160.32.113 port 47266
2012.01.10 11:08:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:25,info,10.139.26.2,sshd,Failed password for invalid user adm1n from 109.160.32.113 port 47266 ssh2
2012.01.10 11:08:25,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.115 port 41486
2012.01.10 11:08:25,info,10.139.26.2,sshd,Connection closed by invalid user adm1n 109.160.32.113 port 47266 [preauth]
2012.01.10 11:08:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:25,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.115 port 41486 ssh2
2012.01.10 11:08:26,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.115 port 41486 [preauth]
2012.01.10 11:08:29,info,10.139.26.2,sshd,Invalid user root1 from 109.160.32.113 port 47354
2012.01.10 11:08:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:08:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:29,info,10.139.26.2,sshd,Failed password for invalid user root1 from 109.160.32.113 port 47354 ssh2
2012.01.10 11:08:29,info,10.139.26.2,sshd,Connection closed by invalid user root1 109.160.32.113 port 47354 [preauth]
2012.01.10 11:08:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41574 ssh2
2012.01.10 11:08:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41574 [preauth]
2012.01.10 11:08:34,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.113 port 60874
2012.01.10 11:08:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:34,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.113 port 60874 ssh2
2012.01.10 11:08:34,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.113 port 60874 [preauth]
2012.01.10 11:08:35,info,10.139.26.2,sshd,Invalid user hamid from 109.160.32.115 port 40678
2012.01.10 11:08:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:36,info,10.139.26.2,sshd,Failed password for invalid user hamid from 109.160.32.115 port 40678 ssh2
2012.01.10 11:08:36,info,10.139.26.2,sshd,Connection closed by invalid user hamid 109.160.32.115 port 40678 [preauth]
2012.01.10 11:08:39,info,10.139.26.2,sshd,Invalid user gitlab-runner from 109.160.32.113 port 60972
2012.01.10 11:08:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:39,info,10.139.26.2,sshd,Failed password for invalid user gitlab-runner from 109.160.32.113 port 60972 ssh2
2012.01.10 11:08:39,info,10.139.26.2,sshd,Connection closed by invalid user gitlab-runner 109.160.32.113 port 60972 [preauth]
2012.01.10 11:08:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40692 ssh2
2012.01.10 11:08:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40692 [preauth]
2012.01.10 11:08:43,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 57172
2012.01.10 11:08:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:44,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 57172 ssh2
2012.01.10 11:08:44,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 57172 [preauth]
2012.01.10 11:08:46,info,10.139.26.2,sshd,Invalid user daniel from 109.160.32.115 port 44050
2012.01.10 11:08:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:46,info,10.139.26.2,sshd,Failed password for invalid user daniel from 109.160.32.115 port 44050 ssh2
2012.01.10 11:08:47,info,10.139.26.2,sshd,Connection closed by invalid user daniel 109.160.32.115 port 44050 [preauth]
2012.01.10 11:08:48,info,10.139.26.2,sshd,Invalid user m from 109.160.32.113 port 57230
2012.01.10 11:08:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:48,info,10.139.26.2,sshd,Failed password for invalid user m from 109.160.32.113 port 57230 ssh2
2012.01.10 11:08:48,info,10.139.26.2,sshd,Connection closed by invalid user m 109.160.32.113 port 57230 [preauth]
2012.01.10 11:08:51,info,10.139.26.2,sshd,Invalid user wang from 109.160.32.115 port 44132
2012.01.10 11:08:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:52,info,10.139.26.2,sshd,Failed password for invalid user wang from 109.160.32.115 port 44132 ssh2
2012.01.10 11:08:52,info,10.139.26.2,sshd,Connection closed by invalid user wang 109.160.32.115 port 44132 [preauth]
2012.01.10 11:08:53,info,10.139.26.2,sshd,Invalid user gayan from 109.160.32.113 port 37510
2012.01.10 11:08:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:53,info,10.139.26.2,sshd,Failed password for invalid user gayan from 109.160.32.113 port 37510 ssh2
2012.01.10 11:08:53,info,10.139.26.2,sshd,Connection closed by invalid user gayan 109.160.32.113 port 37510 [preauth]
2012.01.10 11:08:56,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.115 port 45998
2012.01.10 11:08:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:57,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.115 port 45998 ssh2
2012.01.10 11:08:57,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.115 port 45998 [preauth]
2012.01.10 11:08:57,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 37564
2012.01.10 11:08:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:08:57,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 37564 ssh2
2012.01.10 11:08:57,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 37564 [preauth]
2012.01.10 11:09:01,info,10.139.26.2,sshd,Invalid user ec2-user from 109.160.32.115 port 46052
2012.01.10 11:09:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:02,info,10.139.26.2,sshd,Failed password for invalid user ec2-user from 109.160.32.115 port 46052 ssh2
2012.01.10 11:09:02,info,10.139.26.2,sshd,Connection closed by invalid user ec2-user 109.160.32.115 port 46052 [preauth]
2012.01.10 11:09:02,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 46132
2012.01.10 11:09:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:02,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 46132 ssh2
2012.01.10 11:09:02,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 46132 [preauth]
2012.01.10 11:09:06,info,10.139.26.2,sshd,Invalid user media from 109.160.32.115 port 34434
2012.01.10 11:09:06,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46178 ssh2
2012.01.10 11:09:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46178 [preauth]
2012.01.10 11:09:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:07,info,10.139.26.2,sshd,Failed password for invalid user media from 109.160.32.115 port 34434 ssh2
2012.01.10 11:09:08,info,10.139.26.2,sshd,Connection closed by invalid user media 109.160.32.115 port 34434 [preauth]
2012.01.10 11:09:11,info,10.139.26.2,sshd,Invalid user devops from 109.160.32.115 port 34476
2012.01.10 11:09:11,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.113 port 46224
2012.01.10 11:09:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:11,info,10.139.26.2,sshd,Failed password for invalid user devops from 109.160.32.115 port 34476 ssh2
2012.01.10 11:09:12,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.113 port 46224 ssh2
2012.01.10 11:09:12,info,10.139.26.2,sshd,Connection closed by invalid user devops 109.160.32.115 port 34476 [preauth]
2012.01.10 11:09:12,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.113 port 46224 [preauth]
2012.01.10 11:09:16,info,10.139.26.2,sshd,Invalid user chris from 109.160.32.115 port 47730
2012.01.10 11:09:16,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45824 ssh2
2012.01.10 11:09:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45824 [preauth]
2012.01.10 11:09:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:16,info,10.139.26.2,sshd,Failed password for invalid user chris from 109.160.32.115 port 47730 ssh2
2012.01.10 11:09:16,info,10.139.26.2,sshd,Connection closed by invalid user chris 109.160.32.115 port 47730 [preauth]
2012.01.10 11:09:20,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.113 port 45908
2012.01.10 11:09:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:21,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.113 port 45908 ssh2
2012.01.10 11:09:21,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.113 port 45908 [preauth]
2012.01.10 11:09:21,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 47808
2012.01.10 11:09:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:21,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 47808 ssh2
2012.01.10 11:09:22,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 47808 [preauth]
2012.01.10 11:09:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45480 ssh2
2012.01.10 11:09:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45480 [preauth]
2012.01.10 11:09:26,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 37852
2012.01.10 11:09:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:26,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 37852 ssh2
2012.01.10 11:09:27,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 37852 [preauth]
2012.01.10 11:09:28,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 44790 ssh2
2012.01.10 11:09:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 44790 [preauth]
2012.01.10 11:09:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:09:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45536 ssh2
2012.01.10 11:09:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45536 [preauth]
2012.01.10 11:09:31,info,10.139.26.2,sshd,Invalid user claw from 109.160.32.115 port 37888
2012.01.10 11:09:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:31,info,10.139.26.2,sshd,Failed password for invalid user claw from 109.160.32.115 port 37888 ssh2
2012.01.10 11:09:32,info,10.139.26.2,sshd,Connection closed by invalid user claw 109.160.32.115 port 37888 [preauth]
2012.01.10 11:09:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 60852 ssh2
2012.01.10 11:09:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 60852 [preauth]
2012.01.10 11:09:36,info,10.139.26.2,sshd,Invalid user clawdbot from 109.160.32.115 port 52366
2012.01.10 11:09:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:36,info,10.139.26.2,sshd,Failed password for invalid user clawdbot from 109.160.32.115 port 52366 ssh2
2012.01.10 11:09:37,info,10.139.26.2,sshd,Connection closed by invalid user clawdbot 109.160.32.115 port 52366 [preauth]
2012.01.10 11:09:39,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 60916
2012.01.10 11:09:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:40,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 60916 ssh2
2012.01.10 11:09:40,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 60916 [preauth]
2012.01.10 11:09:41,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 52436
2012.01.10 11:09:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:41,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 52436 ssh2
2012.01.10 11:09:41,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 52436 [preauth]
2012.01.10 11:09:44,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 50816
2012.01.10 11:09:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:44,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 50816 ssh2
2012.01.10 11:09:44,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 50816 [preauth]
2012.01.10 11:09:46,info,10.139.26.2,sshd,Invalid user node from 109.160.32.115 port 34652
2012.01.10 11:09:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:46,info,10.139.26.2,sshd,Failed password for invalid user node from 109.160.32.115 port 34652 ssh2
2012.01.10 11:09:46,info,10.139.26.2,sshd,Connection closed by invalid user node 109.160.32.115 port 34652 [preauth]
2012.01.10 11:09:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50862 ssh2
2012.01.10 11:09:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50862 [preauth]
2012.01.10 11:09:51,info,10.139.26.2,sshd,Invalid user splunk from 109.160.32.115 port 34676
2012.01.10 11:09:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:51,info,10.139.26.2,sshd,Failed password for invalid user splunk from 109.160.32.115 port 34676 ssh2
2012.01.10 11:09:51,info,10.139.26.2,sshd,Connection closed by invalid user splunk 109.160.32.115 port 34676 [preauth]
2012.01.10 11:09:53,info,10.139.26.2,sshd,Invalid user ops from 109.160.32.113 port 46276
2012.01.10 11:09:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:54,info,10.139.26.2,sshd,Failed password for invalid user ops from 109.160.32.113 port 46276 ssh2
2012.01.10 11:09:54,info,10.139.26.2,sshd,Connection closed by invalid user ops 109.160.32.113 port 46276 [preauth]
2012.01.10 11:09:56,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 51384
2012.01.10 11:09:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:57,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 51384 ssh2
2012.01.10 11:09:58,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 51384 [preauth]
2012.01.10 11:09:58,info,10.139.26.2,sshd,Invalid user appuser from 109.160.32.113 port 46310
2012.01.10 11:09:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:09:58,info,10.139.26.2,sshd,Failed password for invalid user appuser from 109.160.32.113 port 46310 ssh2
2012.01.10 11:09:59,info,10.139.26.2,sshd,Connection closed by invalid user appuser 109.160.32.113 port 46310 [preauth]
2012.01.10 11:10:01,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 51454 ssh2
2012.01.10 11:10:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 51454 [preauth]
2012.01.10 11:10:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 45874 ssh2
2012.01.10 11:10:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 45874 [preauth]
2012.01.10 11:10:06,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55520 ssh2
2012.01.10 11:10:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55520 [preauth]
2012.01.10 11:10:07,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 45926
2012.01.10 11:10:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:08,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 45926 ssh2
2012.01.10 11:10:08,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 45926 [preauth]
2012.01.10 11:10:11,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55558 ssh2
2012.01.10 11:10:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55558 [preauth]
2012.01.10 11:10:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59676 ssh2
2012.01.10 11:10:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59676 [preauth]
2012.01.10 11:10:16,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 34982
2012.01.10 11:10:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:16,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 34982 ssh2
2012.01.10 11:10:16,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 34982 [preauth]
2012.01.10 11:10:17,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.113 port 59708
2012.01.10 11:10:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:17,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.113 port 59708 ssh2
2012.01.10 11:10:17,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.113 port 59708 [preauth]
2012.01.10 11:10:20,info,10.139.26.2,sshd,Invalid user mcserver from 109.160.32.115 port 35062
2012.01.10 11:10:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:21,info,10.139.26.2,sshd,Failed password for invalid user mcserver from 109.160.32.115 port 35062 ssh2
2012.01.10 11:10:21,info,10.139.26.2,sshd,Connection closed by invalid user mcserver 109.160.32.115 port 35062 [preauth]
2012.01.10 11:10:21,info,10.139.26.2,sshd,Invalid user ts3 from 109.160.32.113 port 59772
2012.01.10 11:10:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:21,info,10.139.26.2,sshd,Failed password for invalid user ts3 from 109.160.32.113 port 59772 ssh2
2012.01.10 11:10:22,info,10.139.26.2,sshd,Connection closed by invalid user ts3 109.160.32.113 port 59772 [preauth]
2012.01.10 11:10:24,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57520 ssh2
2012.01.10 11:10:24,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57520 [preauth]
2012.01.10 11:10:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55988 ssh2
2012.01.10 11:10:26,info,10.139.26.2,sshd,Invalid user tom from 109.160.32.113 port 55110
2012.01.10 11:10:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:26,info,10.139.26.2,sshd,Failed password for invalid user tom from 109.160.32.113 port 55110 ssh2
2012.01.10 11:10:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55988 [preauth]
2012.01.10 11:10:27,info,10.139.26.2,sshd,Connection closed by invalid user tom 109.160.32.113 port 55110 [preauth]
2012.01.10 11:10:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:10:30,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 56050
2012.01.10 11:10:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:30,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 56050 ssh2
2012.01.10 11:10:31,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 56050 [preauth]
2012.01.10 11:10:31,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.113 port 55184
2012.01.10 11:10:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:31,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.113 port 55184 ssh2
2012.01.10 11:10:31,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.113 port 55184 [preauth]
2012.01.10 11:10:35,info,10.139.26.2,sshd,Invalid user teamspeak from 109.160.32.113 port 55646
2012.01.10 11:10:35,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 44440
2012.01.10 11:10:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:35,info,10.139.26.2,sshd,Failed password for invalid user teamspeak from 109.160.32.113 port 55646 ssh2
2012.01.10 11:10:36,info,10.139.26.2,sshd,Connection closed by invalid user teamspeak 109.160.32.113 port 55646 [preauth]
2012.01.10 11:10:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:36,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 44440 ssh2
2012.01.10 11:10:36,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 44440 [preauth]
2012.01.10 11:10:40,info,10.139.26.2,sshd,Invalid user work from 109.160.32.113 port 55690
2012.01.10 11:10:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:40,info,10.139.26.2,sshd,Failed password for invalid user work from 109.160.32.113 port 55690 ssh2
2012.01.10 11:10:41,info,10.139.26.2,sshd,Invalid user user16 from 109.160.32.115 port 44494
2012.01.10 11:10:41,info,10.139.26.2,sshd,Connection closed by invalid user work 109.160.32.113 port 55690 [preauth]
2012.01.10 11:10:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:41,info,10.139.26.2,sshd,Failed password for invalid user user16 from 109.160.32.115 port 44494 ssh2
2012.01.10 11:10:41,info,10.139.26.2,sshd,Connection closed by invalid user user16 109.160.32.115 port 44494 [preauth]
2012.01.10 11:10:45,info,10.139.26.2,sshd,Invalid user marcu1 from 109.160.32.113 port 33764
2012.01.10 11:10:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:45,info,10.139.26.2,sshd,Failed password for invalid user marcu1 from 109.160.32.113 port 33764 ssh2
2012.01.10 11:10:45,info,10.139.26.2,sshd,Connection closed by invalid user marcu1 109.160.32.113 port 33764 [preauth]
2012.01.10 11:10:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37290 ssh2
2012.01.10 11:10:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37290 [preauth]
2012.01.10 11:10:49,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 33822
2012.01.10 11:10:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:49,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 33822 ssh2
2012.01.10 11:10:49,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 33822 [preauth]
2012.01.10 11:10:49,info,10.139.26.2,sshd,Invalid user vncuser from 109.160.32.115 port 37346
2012.01.10 11:10:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:50,info,10.139.26.2,sshd,Failed password for invalid user vncuser from 109.160.32.115 port 37346 ssh2
2012.01.10 11:10:50,info,10.139.26.2,sshd,Connection closed by invalid user vncuser 109.160.32.115 port 37346 [preauth]
2012.01.10 11:10:54,info,10.139.26.2,sshd,Invalid user mk from 109.160.32.113 port 38830
2012.01.10 11:10:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:10:54,info,10.139.26.2,sshd,Failed password for invalid user mk from 109.160.32.113 port 38830 ssh2
2012.01.10 11:10:54,info,10.139.26.2,sshd,Connection closed by invalid user mk 109.160.32.113 port 38830 [preauth]
2012.01.10 11:10:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54694 ssh2
2012.01.10 11:10:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54694 [preauth]
2012.01.10 11:10:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38854 ssh2
2012.01.10 11:10:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38854 [preauth]
2012.01.10 11:11:00,info,10.139.26.2,sshd,Invalid user opc from 109.160.32.115 port 54722
2012.01.10 11:11:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:00,info,10.139.26.2,sshd,Failed password for invalid user opc from 109.160.32.115 port 54722 ssh2
2012.01.10 11:11:01,info,10.139.26.2,sshd,Connection closed by invalid user opc 109.160.32.115 port 54722 [preauth]
2012.01.10 11:11:03,info,10.139.26.2,sshd,Invalid user sftpuser from 109.160.32.113 port 48952
2012.01.10 11:11:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:03,info,10.139.26.2,sshd,Failed password for invalid user sftpuser from 109.160.32.113 port 48952 ssh2
2012.01.10 11:11:04,info,10.139.26.2,sshd,Connection closed by invalid user sftpuser 109.160.32.113 port 48952 [preauth]
2012.01.10 11:11:05,info,10.139.26.2,sshd,Invalid user sonar from 109.160.32.115 port 57096
2012.01.10 11:11:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:05,info,10.139.26.2,sshd,Failed password for invalid user sonar from 109.160.32.115 port 57096 ssh2
2012.01.10 11:11:05,info,10.139.26.2,sshd,Connection closed by invalid user sonar 109.160.32.115 port 57096 [preauth]
2012.01.10 11:11:08,info,10.139.26.2,sshd,Invalid user dolphinscheduler from 109.160.32.113 port 49050
2012.01.10 11:11:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:08,info,10.139.26.2,sshd,Failed password for invalid user dolphinscheduler from 109.160.32.113 port 49050 ssh2
2012.01.10 11:11:08,info,10.139.26.2,sshd,Connection closed by invalid user dolphinscheduler 109.160.32.113 port 49050 [preauth]
2012.01.10 11:11:10,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.115 port 57160
2012.01.10 11:11:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:10,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.115 port 57160 ssh2
2012.01.10 11:11:10,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.115 port 57160 [preauth]
2012.01.10 11:11:12,info,10.139.26.2,sshd,Invalid user tom from 109.160.32.113 port 51240
2012.01.10 11:11:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:12,info,10.139.26.2,sshd,Failed password for invalid user tom from 109.160.32.113 port 51240 ssh2
2012.01.10 11:11:12,info,10.139.26.2,sshd,Connection closed by invalid user tom 109.160.32.113 port 51240 [preauth]
2012.01.10 11:11:15,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 47528
2012.01.10 11:11:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:16,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 47528 ssh2
2012.01.10 11:11:16,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 47528 [preauth]
2012.01.10 11:11:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51302 ssh2
2012.01.10 11:11:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51302 [preauth]
2012.01.10 11:11:20,info,10.139.26.2,sshd,Invalid user fahmi from 109.160.32.115 port 47574
2012.01.10 11:11:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:21,info,10.139.26.2,sshd,Failed password for invalid user fahmi from 109.160.32.115 port 47574 ssh2
2012.01.10 11:11:21,info,10.139.26.2,sshd,Connection closed by invalid user fahmi 109.160.32.115 port 47574 [preauth]
2012.01.10 11:11:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58946 ssh2
2012.01.10 11:11:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58946 [preauth]
2012.01.10 11:11:26,info,10.139.26.2,sshd,Invalid user kafka from 109.160.32.115 port 37174
2012.01.10 11:11:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:26,info,10.139.26.2,sshd,Failed password for invalid user kafka from 109.160.32.115 port 37174 ssh2
2012.01.10 11:11:26,info,10.139.26.2,sshd,Connection closed by invalid user kafka 109.160.32.115 port 37174 [preauth]
2012.01.10 11:11:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58982 ssh2
2012.01.10 11:11:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58982 [preauth]
2012.01.10 11:11:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:11:31,info,10.139.26.2,sshd,Invalid user david from 109.160.32.115 port 37228
2012.01.10 11:11:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59018 ssh2
2012.01.10 11:11:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:32,info,10.139.26.2,sshd,Failed password for invalid user david from 109.160.32.115 port 37228 ssh2
2012.01.10 11:11:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59018 [preauth]
2012.01.10 11:11:32,info,10.139.26.2,sshd,Connection closed by invalid user david 109.160.32.115 port 37228 [preauth]
2012.01.10 11:11:35,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.113 port 34576
2012.01.10 11:11:36,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 47888 ssh2
2012.01.10 11:11:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:36,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.113 port 34576 ssh2
2012.01.10 11:11:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 47888 [preauth]
2012.01.10 11:11:36,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.113 port 34576 [preauth]
2012.01.10 11:11:36,info,10.139.26.2,sshd,Invalid user steam from 109.160.32.115 port 43760
2012.01.10 11:11:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:36,info,10.139.26.2,sshd,Failed password for invalid user steam from 109.160.32.115 port 43760 ssh2
2012.01.10 11:11:37,info,10.139.26.2,sshd,Connection closed by invalid user steam 109.160.32.115 port 43760 [preauth]
2012.01.10 11:11:40,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 34638
2012.01.10 11:11:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:40,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 34638 ssh2
2012.01.10 11:11:40,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 34638 [preauth]
2012.01.10 11:11:42,info,10.139.26.2,sshd,Invalid user debian from 47.184.58.103 port 50392
2012.01.10 11:11:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:42,info,10.139.26.2,sshd,Failed password for invalid user debian from 47.184.58.103 port 50392 ssh2
2012.01.10 11:11:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 43782 ssh2
2012.01.10 11:11:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 43782 [preauth]
2012.01.10 11:11:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44008 ssh2
2012.01.10 11:11:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44008 [preauth]
2012.01.10 11:11:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50158 ssh2
2012.01.10 11:11:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50158 [preauth]
2012.01.10 11:11:49,info,10.139.26.2,sshd,Invalid user pepe from 109.160.32.113 port 44038
2012.01.10 11:11:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:49,info,10.139.26.2,sshd,Failed password for invalid user pepe from 109.160.32.113 port 44038 ssh2
2012.01.10 11:11:49,info,10.139.26.2,sshd,Connection closed by invalid user pepe 109.160.32.113 port 44038 [preauth]
2012.01.10 11:11:50,info,10.139.26.2,sshd,Invalid user hu from 109.160.32.115 port 50214
2012.01.10 11:11:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:50,info,10.139.26.2,sshd,Failed password for invalid user hu from 109.160.32.115 port 50214 ssh2
2012.01.10 11:11:51,info,10.139.26.2,sshd,Connection closed by invalid user hu 109.160.32.115 port 50214 [preauth]
2012.01.10 11:11:53,info,10.139.26.2,sshd,Connection closed by invalid user debian 47.184.58.103 port 50392 [preauth]
2012.01.10 11:11:54,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 43682
2012.01.10 11:11:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:54,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 43682 ssh2
2012.01.10 11:11:54,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 43682 [preauth]
2012.01.10 11:11:56,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 60216
2012.01.10 11:11:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:11:56,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 60216 ssh2
2012.01.10 11:11:57,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 60216 [preauth]
2012.01.10 11:11:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43736 ssh2
2012.01.10 11:11:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43736 [preauth]
2012.01.10 11:12:01,info,10.139.26.2,sshd,Invalid user server from 109.160.32.115 port 60298
2012.01.10 11:12:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:01,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.115 port 60298 ssh2
2012.01.10 11:12:01,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.115 port 60298 [preauth]
2012.01.10 11:12:03,info,10.139.26.2,sshd,Invalid user arul from 109.160.32.113 port 44800
2012.01.10 11:12:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:03,info,10.139.26.2,sshd,Failed password for invalid user arul from 109.160.32.113 port 44800 ssh2
2012.01.10 11:12:03,info,10.139.26.2,sshd,Connection closed by invalid user arul 109.160.32.113 port 44800 [preauth]
2012.01.10 11:12:06,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 52438
2012.01.10 11:12:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:07,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 52438 ssh2
2012.01.10 11:12:07,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 52438 [preauth]
2012.01.10 11:12:07,info,10.139.26.2,sshd,Invalid user steam from 109.160.32.113 port 44836
2012.01.10 11:12:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:08,info,10.139.26.2,sshd,Failed password for invalid user steam from 109.160.32.113 port 44836 ssh2
2012.01.10 11:12:08,info,10.139.26.2,sshd,Connection closed by invalid user steam 109.160.32.113 port 44836 [preauth]
2012.01.10 11:12:11,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.115 port 52488
2012.01.10 11:12:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:11,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.115 port 52488 ssh2
2012.01.10 11:12:12,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.115 port 52488 [preauth]
2012.01.10 11:12:12,info,10.139.26.2,sshd,Invalid user odoo18 from 109.160.32.113 port 36892
2012.01.10 11:12:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:12,info,10.139.26.2,sshd,Failed password for invalid user odoo18 from 109.160.32.113 port 36892 ssh2
2012.01.10 11:12:12,info,10.139.26.2,sshd,Connection closed by invalid user odoo18 109.160.32.113 port 36892 [preauth]
2012.01.10 11:12:16,info,10.139.26.2,sshd,Invalid user david from 109.160.32.115 port 47128
2012.01.10 11:12:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36928 ssh2
2012.01.10 11:12:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36928 [preauth]
2012.01.10 11:12:17,info,10.139.26.2,sshd,Failed password for invalid user david from 109.160.32.115 port 47128 ssh2
2012.01.10 11:12:17,info,10.139.26.2,sshd,Connection closed by invalid user david 109.160.32.115 port 47128 [preauth]
2012.01.10 11:12:21,info,10.139.26.2,sshd,Invalid user master from 109.160.32.115 port 47190
2012.01.10 11:12:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:21,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.115 port 47190 ssh2
2012.01.10 11:12:21,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.115 port 47190 [preauth]
2012.01.10 11:12:22,info,10.139.26.2,sshd,Invalid user vagrant from 109.160.32.113 port 36980
2012.01.10 11:12:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:22,info,10.139.26.2,sshd,Failed password for invalid user vagrant from 109.160.32.113 port 36980 ssh2
2012.01.10 11:12:22,info,10.139.26.2,sshd,Connection closed by invalid user vagrant 109.160.32.113 port 36980 [preauth]
2012.01.10 11:12:26,info,10.139.26.2,sshd,Invalid user mongodb from 109.160.32.115 port 37558
2012.01.10 11:12:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:26,info,10.139.26.2,sshd,Failed password for invalid user mongodb from 109.160.32.115 port 37558 ssh2
2012.01.10 11:12:26,info,10.139.26.2,sshd,Connection closed by invalid user mongodb 109.160.32.115 port 37558 [preauth]
2012.01.10 11:12:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41056 ssh2
2012.01.10 11:12:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41056 [preauth]
2012.01.10 11:12:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:12:31,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 60635 ssh2
2012.01.10 11:12:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41126 ssh2
2012.01.10 11:12:31,info,10.139.26.2,sshd,Invalid user hujiahao from 109.160.32.115 port 37572
2012.01.10 11:12:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41126 [preauth]
2012.01.10 11:12:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 60635 [preauth]
2012.01.10 11:12:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:31,info,10.139.26.2,sshd,Failed password for invalid user hujiahao from 109.160.32.115 port 37572 ssh2
2012.01.10 11:12:32,info,10.139.26.2,sshd,Connection closed by invalid user hujiahao 109.160.32.115 port 37572 [preauth]
2012.01.10 11:12:36,info,10.139.26.2,sshd,Invalid user bob from 109.160.32.113 port 59976
2012.01.10 11:12:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:36,info,10.139.26.2,sshd,Failed password for invalid user bob from 109.160.32.113 port 59976 ssh2
2012.01.10 11:12:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52144 ssh2
2012.01.10 11:12:36,info,10.139.26.2,sshd,Connection closed by invalid user bob 109.160.32.113 port 59976 [preauth]
2012.01.10 11:12:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52144 [preauth]
2012.01.10 11:12:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59996 ssh2
2012.01.10 11:12:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59996 [preauth]
2012.01.10 11:12:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52238 ssh2
2012.01.10 11:12:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52238 [preauth]
2012.01.10 11:12:45,info,10.139.26.2,sshd,Invalid user orange from 109.160.32.113 port 47204
2012.01.10 11:12:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:45,info,10.139.26.2,sshd,Failed password for invalid user orange from 109.160.32.113 port 47204 ssh2
2012.01.10 11:12:45,info,10.139.26.2,sshd,Connection closed by invalid user orange 109.160.32.113 port 47204 [preauth]
2012.01.10 11:12:45,info,10.139.26.2,sshd,Invalid user tester from 109.160.32.115 port 33580
2012.01.10 11:12:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:45,info,10.139.26.2,sshd,Failed password for invalid user tester from 109.160.32.115 port 33580 ssh2
2012.01.10 11:12:46,info,10.139.26.2,sshd,Connection closed by invalid user tester 109.160.32.115 port 33580 [preauth]
2012.01.10 11:12:49,info,10.139.26.2,sshd,Invalid user us6 from 109.160.32.113 port 47260
2012.01.10 11:12:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:50,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 33644
2012.01.10 11:12:50,info,10.139.26.2,sshd,Failed password for invalid user us6 from 109.160.32.113 port 47260 ssh2
2012.01.10 11:12:50,info,10.139.26.2,sshd,Connection closed by invalid user us6 109.160.32.113 port 47260 [preauth]
2012.01.10 11:12:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:50,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 33644 ssh2
2012.01.10 11:12:51,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 33644 [preauth]
2012.01.10 11:12:54,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 37550
2012.01.10 11:12:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:54,info,10.139.26.2,sshd,Invalid user omm from 109.160.32.115 port 36506
2012.01.10 11:12:54,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 37550 ssh2
2012.01.10 11:12:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:54,info,10.139.26.2,sshd,Failed password for invalid user omm from 109.160.32.115 port 36506 ssh2
2012.01.10 11:12:54,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 37550 [preauth]
2012.01.10 11:12:55,info,10.139.26.2,sshd,Connection closed by invalid user omm 109.160.32.115 port 36506 [preauth]
2012.01.10 11:12:59,info,10.139.26.2,sshd,Invalid user cctv from 109.160.32.113 port 37574
2012.01.10 11:12:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:12:59,info,10.139.26.2,sshd,Failed password for invalid user cctv from 109.160.32.113 port 37574 ssh2
2012.01.10 11:12:59,info,10.139.26.2,sshd,Connection closed by invalid user cctv 109.160.32.113 port 37574 [preauth]
2012.01.10 11:12:59,info,10.139.26.2,sshd,Invalid user user2 from 109.160.32.115 port 36558
2012.01.10 11:13:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:00,info,10.139.26.2,sshd,Failed password for invalid user user2 from 109.160.32.115 port 36558 ssh2
2012.01.10 11:13:00,info,10.139.26.2,sshd,Connection closed by invalid user user2 109.160.32.115 port 36558 [preauth]
2012.01.10 11:13:04,info,10.139.26.2,sshd,Invalid user root1 from 109.160.32.113 port 51982
2012.01.10 11:13:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:04,info,10.139.26.2,sshd,Failed password for invalid user root1 from 109.160.32.113 port 51982 ssh2
2012.01.10 11:13:04,info,10.139.26.2,sshd,Connection closed by invalid user root1 109.160.32.113 port 51982 [preauth]
2012.01.10 11:13:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 34286 ssh2
2012.01.10 11:13:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 34286 [preauth]
2012.01.10 11:13:08,info,10.139.26.2,sshd,Invalid user amin from 109.160.32.113 port 52064
2012.01.10 11:13:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:08,info,10.139.26.2,sshd,Failed password for invalid user amin from 109.160.32.113 port 52064 ssh2
2012.01.10 11:13:08,info,10.139.26.2,sshd,Connection closed by invalid user amin 109.160.32.113 port 52064 [preauth]
2012.01.10 11:13:09,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 34334
2012.01.10 11:13:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:09,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 34334 ssh2
2012.01.10 11:13:09,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 34334 [preauth]
2012.01.10 11:13:12,info,10.139.26.2,sshd,Invalid user njupt078 from 109.160.32.113 port 45998
2012.01.10 11:13:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:13,info,10.139.26.2,sshd,Failed password for invalid user njupt078 from 109.160.32.113 port 45998 ssh2
2012.01.10 11:13:13,info,10.139.26.2,sshd,Connection closed by invalid user njupt078 109.160.32.113 port 45998 [preauth]
2012.01.10 11:13:14,info,10.139.26.2,sshd,Invalid user felix from 109.160.32.115 port 46112
2012.01.10 11:13:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:14,info,10.139.26.2,sshd,Failed password for invalid user felix from 109.160.32.115 port 46112 ssh2
2012.01.10 11:13:14,info,10.139.26.2,sshd,Connection closed by invalid user felix 109.160.32.115 port 46112 [preauth]
2012.01.10 11:13:17,info,10.139.26.2,sshd,Invalid user carl from 109.160.32.113 port 46014
2012.01.10 11:13:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:17,info,10.139.26.2,sshd,Failed password for invalid user carl from 109.160.32.113 port 46014 ssh2
2012.01.10 11:13:18,info,10.139.26.2,sshd,Connection closed by invalid user carl 109.160.32.113 port 46014 [preauth]
2012.01.10 11:13:19,info,10.139.26.2,sshd,Invalid user root1 from 109.160.32.115 port 46146
2012.01.10 11:13:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:19,info,10.139.26.2,sshd,Failed password for invalid user root1 from 109.160.32.115 port 46146 ssh2
2012.01.10 11:13:19,info,10.139.26.2,sshd,Connection closed by invalid user root1 109.160.32.115 port 46146 [preauth]
2012.01.10 11:13:22,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 41732
2012.01.10 11:13:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:22,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 41732 ssh2
2012.01.10 11:13:22,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 41732 [preauth]
2012.01.10 11:13:24,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41462 ssh2
2012.01.10 11:13:24,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41462 [preauth]
2012.01.10 11:13:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41764 ssh2
2012.01.10 11:13:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41764 [preauth]
2012.01.10 11:13:29,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.115 port 41510
2012.01.10 11:13:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:13:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:29,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.115 port 41510 ssh2
2012.01.10 11:13:29,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.115 port 41510 [preauth]
2012.01.10 11:13:31,info,10.139.26.2,sshd,Invalid user main from 109.160.32.113 port 41824
2012.01.10 11:13:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:32,info,10.139.26.2,sshd,Failed password for invalid user main from 109.160.32.113 port 41824 ssh2
2012.01.10 11:13:32,info,10.139.26.2,sshd,Connection closed by invalid user main 109.160.32.113 port 41824 [preauth]
2012.01.10 11:13:34,info,10.139.26.2,sshd,Invalid user kipt from 109.160.32.115 port 39610
2012.01.10 11:13:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:35,info,10.139.26.2,sshd,Failed password for invalid user kipt from 109.160.32.115 port 39610 ssh2
2012.01.10 11:13:35,info,10.139.26.2,sshd,Connection closed by invalid user kipt 109.160.32.115 port 39610 [preauth]
2012.01.10 11:13:36,info,10.139.26.2,sshd,Invalid user michael from 109.160.32.113 port 49104
2012.01.10 11:13:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:36,info,10.139.26.2,sshd,Failed password for invalid user michael from 109.160.32.113 port 49104 ssh2
2012.01.10 11:13:36,info,10.139.26.2,sshd,Connection closed by invalid user michael 109.160.32.113 port 49104 [preauth]
2012.01.10 11:13:39,info,10.139.26.2,sshd,Invalid user gzh from 109.160.32.115 port 39678
2012.01.10 11:13:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:39,info,10.139.26.2,sshd,Failed password for invalid user gzh from 109.160.32.115 port 39678 ssh2
2012.01.10 11:13:39,info,10.139.26.2,sshd,Connection closed by invalid user gzh 109.160.32.115 port 39678 [preauth]
2012.01.10 11:13:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49156 ssh2
2012.01.10 11:13:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49156 [preauth]
2012.01.10 11:13:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 44690 ssh2
2012.01.10 11:13:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 44690 [preauth]
2012.01.10 11:13:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59758 ssh2
2012.01.10 11:13:45,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 51018 ssh2
2012.01.10 11:13:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59758 [preauth]
2012.01.10 11:13:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 51018 [preauth]
2012.01.10 11:13:48,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 44734
2012.01.10 11:13:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:49,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 44734 ssh2
2012.01.10 11:13:49,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 44734 [preauth]
2012.01.10 11:13:50,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 59790
2012.01.10 11:13:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:50,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 59790 ssh2
2012.01.10 11:13:50,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 59790 [preauth]
2012.01.10 11:13:53,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 48900
2012.01.10 11:13:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:54,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 48900 ssh2
2012.01.10 11:13:54,info,10.139.26.2,sshd,Invalid user sftp from 109.160.32.113 port 50640
2012.01.10 11:13:54,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 48900 [preauth]
2012.01.10 11:13:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:54,info,10.139.26.2,sshd,Failed password for invalid user sftp from 109.160.32.113 port 50640 ssh2
2012.01.10 11:13:54,info,10.139.26.2,sshd,Connection closed by invalid user sftp 109.160.32.113 port 50640 [preauth]
2012.01.10 11:13:59,info,10.139.26.2,sshd,Invalid user RB from 109.160.32.113 port 50688
2012.01.10 11:13:59,info,10.139.26.2,sshd,Invalid user rajvir from 109.160.32.115 port 48986
2012.01.10 11:13:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:59,info,10.139.26.2,sshd,Failed password for invalid user RB from 109.160.32.113 port 50688 ssh2
2012.01.10 11:13:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:13:59,info,10.139.26.2,sshd,Failed password for invalid user rajvir from 109.160.32.115 port 48986 ssh2
2012.01.10 11:14:00,info,10.139.26.2,sshd,Connection closed by invalid user RB 109.160.32.113 port 50688 [preauth]
2012.01.10 11:14:00,info,10.139.26.2,sshd,Connection closed by invalid user rajvir 109.160.32.115 port 48986 [preauth]
2012.01.10 11:14:03,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 60778
2012.01.10 11:14:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:04,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 60778 ssh2
2012.01.10 11:14:04,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 60778 [preauth]
2012.01.10 11:14:04,info,10.139.26.2,sshd,Invalid user nginx from 109.160.32.115 port 39790
2012.01.10 11:14:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:05,info,10.139.26.2,sshd,Failed password for invalid user nginx from 109.160.32.115 port 39790 ssh2
2012.01.10 11:14:05,info,10.139.26.2,sshd,Connection closed by invalid user nginx 109.160.32.115 port 39790 [preauth]
2012.01.10 11:14:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 60812 ssh2
2012.01.10 11:14:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 60812 [preauth]
2012.01.10 11:14:09,info,10.139.26.2,sshd,Invalid user carl from 109.160.32.115 port 39830
2012.01.10 11:14:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:09,info,10.139.26.2,sshd,Failed password for invalid user carl from 109.160.32.115 port 39830 ssh2
2012.01.10 11:14:09,info,10.139.26.2,sshd,Connection closed by invalid user carl 109.160.32.115 port 39830 [preauth]
2012.01.10 11:14:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35102 ssh2
2012.01.10 11:14:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35102 [preauth]
2012.01.10 11:14:14,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 55666
2012.01.10 11:14:14,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:14,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 55666 ssh2
2012.01.10 11:14:15,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 55666 [preauth]
2012.01.10 11:14:17,info,10.139.26.2,sshd,Invalid user root1 from 109.160.32.113 port 35164
2012.01.10 11:14:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:17,info,10.139.26.2,sshd,Failed password for invalid user root1 from 109.160.32.113 port 35164 ssh2
2012.01.10 11:14:17,info,10.139.26.2,sshd,Connection closed by invalid user root1 109.160.32.113 port 35164 [preauth]
2012.01.10 11:14:19,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 55714
2012.01.10 11:14:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:20,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 55714 ssh2
2012.01.10 11:14:20,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 55714 [preauth]
2012.01.10 11:14:22,info,10.139.26.2,sshd,Invalid user webadmin from 109.160.32.113 port 38166
2012.01.10 11:14:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:22,info,10.139.26.2,sshd,Failed password for invalid user webadmin from 109.160.32.113 port 38166 ssh2
2012.01.10 11:14:22,info,10.139.26.2,sshd,Connection closed by invalid user webadmin 109.160.32.113 port 38166 [preauth]
2012.01.10 11:14:25,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 35404 ssh2
2012.01.10 11:14:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 35404 [preauth]
2012.01.10 11:14:26,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 38272
2012.01.10 11:14:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:26,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 38272 ssh2
2012.01.10 11:14:27,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 38272 [preauth]
2012.01.10 11:14:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:14:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 35422 ssh2
2012.01.10 11:14:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 35422 [preauth]
2012.01.10 11:14:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38354 ssh2
2012.01.10 11:14:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38354 [preauth]
2012.01.10 11:14:32,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 58120 ssh2
2012.01.10 11:14:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 58120 [preauth]
2012.01.10 11:14:34,info,10.139.26.2,sshd,Invalid user liyang from 109.160.32.115 port 42758
2012.01.10 11:14:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:35,info,10.139.26.2,sshd,Failed password for invalid user liyang from 109.160.32.115 port 42758 ssh2
2012.01.10 11:14:35,info,10.139.26.2,sshd,Connection closed by invalid user liyang 109.160.32.115 port 42758 [preauth]
2012.01.10 11:14:35,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 34970
2012.01.10 11:14:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:36,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 34970 ssh2
2012.01.10 11:14:36,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 34970 [preauth]
2012.01.10 11:14:39,info,10.139.26.2,sshd,Invalid user elasticsearch from 109.160.32.115 port 42812
2012.01.10 11:14:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:39,info,10.139.26.2,sshd,Failed password for invalid user elasticsearch from 109.160.32.115 port 42812 ssh2
2012.01.10 11:14:40,info,10.139.26.2,sshd,Connection closed by invalid user elasticsearch 109.160.32.115 port 42812 [preauth]
2012.01.10 11:14:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35008 ssh2
2012.01.10 11:14:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35008 [preauth]
2012.01.10 11:14:44,info,10.139.26.2,sshd,Invalid user backup from 109.160.32.113 port 44918
2012.01.10 11:14:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:44,info,10.139.26.2,sshd,Failed password for invalid user backup from 109.160.32.113 port 44918 ssh2
2012.01.10 11:14:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 51620 ssh2
2012.01.10 11:14:45,info,10.139.26.2,sshd,Connection closed by invalid user backup 109.160.32.113 port 44918 [preauth]
2012.01.10 11:14:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 51620 [preauth]
2012.01.10 11:14:49,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 51636
2012.01.10 11:14:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:49,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 51636 ssh2
2012.01.10 11:14:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44952 ssh2
2012.01.10 11:14:49,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 51636 [preauth]
2012.01.10 11:14:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44952 [preauth]
2012.01.10 11:14:54,info,10.139.26.2,sshd,Invalid user server from 109.160.32.115 port 38188
2012.01.10 11:14:54,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.113 port 44352
2012.01.10 11:14:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:54,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.115 port 38188 ssh2
2012.01.10 11:14:54,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.115 port 38188 [preauth]
2012.01.10 11:14:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:54,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.113 port 44352 ssh2
2012.01.10 11:14:55,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.113 port 44352 [preauth]
2012.01.10 11:14:58,info,10.139.26.2,sshd,Invalid user joel from 109.160.32.113 port 44380
2012.01.10 11:14:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:14:58,info,10.139.26.2,sshd,Failed password for invalid user joel from 109.160.32.113 port 44380 ssh2
2012.01.10 11:14:58,info,10.139.26.2,sshd,Connection closed by invalid user joel 109.160.32.113 port 44380 [preauth]
2012.01.10 11:14:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 38300 ssh2
2012.01.10 11:14:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 38300 [preauth]
2012.01.10 11:15:03,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 54914
2012.01.10 11:15:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:03,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 54914 ssh2
2012.01.10 11:15:03,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 54914 [preauth]
2012.01.10 11:15:04,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 45622
2012.01.10 11:15:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:04,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 45622 ssh2
2012.01.10 11:15:04,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 45622 [preauth]
2012.01.10 11:15:07,info,10.139.26.2,sshd,Invalid user jayalakshmi from 109.160.32.113 port 54986
2012.01.10 11:15:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:08,info,10.139.26.2,sshd,Failed password for invalid user jayalakshmi from 109.160.32.113 port 54986 ssh2
2012.01.10 11:15:08,info,10.139.26.2,sshd,Connection closed by invalid user jayalakshmi 109.160.32.113 port 54986 [preauth]
2012.01.10 11:15:08,info,10.139.26.2,sshd,Invalid user steam from 109.160.32.115 port 45664
2012.01.10 11:15:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:08,info,10.139.26.2,sshd,Failed password for invalid user steam from 109.160.32.115 port 45664 ssh2
2012.01.10 11:15:09,info,10.139.26.2,sshd,Connection closed by invalid user steam 109.160.32.115 port 45664 [preauth]
2012.01.10 11:15:12,info,10.139.26.2,sshd,Invalid user bitrix from 109.160.32.113 port 44334
2012.01.10 11:15:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:12,info,10.139.26.2,sshd,Failed password for invalid user bitrix from 109.160.32.113 port 44334 ssh2
2012.01.10 11:15:12,info,10.139.26.2,sshd,Connection closed by invalid user bitrix 109.160.32.113 port 44334 [preauth]
2012.01.10 11:15:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 59060 ssh2
2012.01.10 11:15:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 59060 [preauth]
2012.01.10 11:15:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44420 ssh2
2012.01.10 11:15:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44420 [preauth]
2012.01.10 11:15:18,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 59080
2012.01.10 11:15:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:18,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 59080 ssh2
2012.01.10 11:15:19,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 59080 [preauth]
2012.01.10 11:15:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44464 ssh2
2012.01.10 11:15:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44464 [preauth]
2012.01.10 11:15:24,info,10.139.26.2,sshd,Invalid user mc from 109.160.32.115 port 47850
2012.01.10 11:15:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:24,info,10.139.26.2,sshd,Failed password for invalid user mc from 109.160.32.115 port 47850 ssh2
2012.01.10 11:15:24,info,10.139.26.2,sshd,Connection closed by invalid user mc 109.160.32.115 port 47850 [preauth]
2012.01.10 11:15:26,info,10.139.26.2,sshd,Invalid user gix from 109.160.32.113 port 45066
2012.01.10 11:15:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:26,info,10.139.26.2,sshd,Failed password for invalid user gix from 109.160.32.113 port 45066 ssh2
2012.01.10 11:15:26,info,10.139.26.2,sshd,Connection closed by invalid user gix 109.160.32.113 port 45066 [preauth]
2012.01.10 11:15:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:15:29,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 47892
2012.01.10 11:15:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:29,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 47892 ssh2
2012.01.10 11:15:29,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 47892 [preauth]
2012.01.10 11:15:30,info,10.139.26.2,sshd,Invalid user media from 109.160.32.113 port 45156
2012.01.10 11:15:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:30,info,10.139.26.2,sshd,Failed password for invalid user media from 109.160.32.113 port 45156 ssh2
2012.01.10 11:15:31,info,10.139.26.2,sshd,Connection closed by invalid user media 109.160.32.113 port 45156 [preauth]
2012.01.10 11:15:33,info,10.139.26.2,sshd,Invalid user sftp from 109.160.32.115 port 41320
2012.01.10 11:15:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:34,info,10.139.26.2,sshd,Failed password for invalid user sftp from 109.160.32.115 port 41320 ssh2
2012.01.10 11:15:34,info,10.139.26.2,sshd,Connection closed by invalid user sftp 109.160.32.115 port 41320 [preauth]
2012.01.10 11:15:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53276 ssh2
2012.01.10 11:15:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53276 [preauth]
2012.01.10 11:15:38,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 41360 ssh2
2012.01.10 11:15:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 41360 [preauth]
2012.01.10 11:15:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53348 ssh2
2012.01.10 11:15:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53348 [preauth]
2012.01.10 11:15:43,info,10.139.26.2,sshd,Invalid user super from 109.160.32.115 port 38974
2012.01.10 11:15:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:43,info,10.139.26.2,sshd,Failed password for invalid user super from 109.160.32.115 port 38974 ssh2
2012.01.10 11:15:44,info,10.139.26.2,sshd,Connection closed by invalid user super 109.160.32.115 port 38974 [preauth]
2012.01.10 11:15:44,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35098 ssh2
2012.01.10 11:15:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35098 [preauth]
2012.01.10 11:15:49,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39030 ssh2
2012.01.10 11:15:49,info,10.139.26.2,sshd,Invalid user rocky from 109.160.32.113 port 35124
2012.01.10 11:15:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39030 [preauth]
2012.01.10 11:15:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:49,info,10.139.26.2,sshd,Failed password for invalid user rocky from 109.160.32.113 port 35124 ssh2
2012.01.10 11:15:49,info,10.139.26.2,sshd,Connection closed by invalid user rocky 109.160.32.113 port 35124 [preauth]
2012.01.10 11:15:53,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56908 ssh2
2012.01.10 11:15:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56908 [preauth]
2012.01.10 11:15:53,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 46070
2012.01.10 11:15:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:15:54,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 46070 ssh2
2012.01.10 11:15:54,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 46070 [preauth]
2012.01.10 11:15:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46118 ssh2
2012.01.10 11:15:59,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 56966 ssh2
2012.01.10 11:15:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46118 [preauth]
2012.01.10 11:15:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 56966 [preauth]
2012.01.10 11:16:03,info,10.139.26.2,sshd,Invalid user es from 109.160.32.113 port 57994
2012.01.10 11:16:03,info,10.139.26.2,sshd,Invalid user smart from 109.160.32.115 port 46680
2012.01.10 11:16:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:03,info,10.139.26.2,sshd,Failed password for invalid user es from 109.160.32.113 port 57994 ssh2
2012.01.10 11:16:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:03,info,10.139.26.2,sshd,Failed password for invalid user smart from 109.160.32.115 port 46680 ssh2
2012.01.10 11:16:03,info,10.139.26.2,sshd,Connection closed by invalid user es 109.160.32.113 port 57994 [preauth]
2012.01.10 11:16:03,info,10.139.26.2,sshd,Connection closed by invalid user smart 109.160.32.115 port 46680 [preauth]
2012.01.10 11:16:07,info,10.139.26.2,sshd,Invalid user esuser from 109.160.32.115 port 46742
2012.01.10 11:16:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58050 ssh2
2012.01.10 11:16:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58050 [preauth]
2012.01.10 11:16:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:08,info,10.139.26.2,sshd,Failed password for invalid user esuser from 109.160.32.115 port 46742 ssh2
2012.01.10 11:16:08,info,10.139.26.2,sshd,Connection closed by invalid user esuser 109.160.32.115 port 46742 [preauth]
2012.01.10 11:16:12,info,10.139.26.2,sshd,Invalid user nexus from 109.160.32.113 port 46230
2012.01.10 11:16:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:12,info,10.139.26.2,sshd,Failed password for invalid user nexus from 109.160.32.113 port 46230 ssh2
2012.01.10 11:16:12,info,10.139.26.2,sshd,Connection closed by invalid user nexus 109.160.32.113 port 46230 [preauth]
2012.01.10 11:16:13,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 44096
2012.01.10 11:16:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:13,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 44096 ssh2
2012.01.10 11:16:13,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 44096 [preauth]
2012.01.10 11:16:16,info,10.139.26.2,sshd,Invalid user vps from 109.160.32.113 port 46294
2012.01.10 11:16:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:17,info,10.139.26.2,sshd,Failed password for invalid user vps from 109.160.32.113 port 46294 ssh2
2012.01.10 11:16:17,info,10.139.26.2,sshd,Connection closed by invalid user vps 109.160.32.113 port 46294 [preauth]
2012.01.10 11:16:17,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 44168
2012.01.10 11:16:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:18,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 44168 ssh2
2012.01.10 11:16:18,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 44168 [preauth]
2012.01.10 11:16:21,info,10.139.26.2,sshd,Invalid user minecraft from 109.160.32.113 port 46320
2012.01.10 11:16:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:21,info,10.139.26.2,sshd,Failed password for invalid user minecraft from 109.160.32.113 port 46320 ssh2
2012.01.10 11:16:22,info,10.139.26.2,sshd,Connection closed by invalid user minecraft 109.160.32.113 port 46320 [preauth]
2012.01.10 11:16:22,info,10.139.26.2,sshd,Invalid user gitlab-runner from 109.160.32.115 port 37498
2012.01.10 11:16:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:22,info,10.139.26.2,sshd,Failed password for invalid user gitlab-runner from 109.160.32.115 port 37498 ssh2
2012.01.10 11:16:22,info,10.139.26.2,sshd,Connection closed by invalid user gitlab-runner 109.160.32.115 port 37498 [preauth]
2012.01.10 11:16:26,info,10.139.26.2,sshd,Invalid user frappe from 109.160.32.113 port 52964
2012.01.10 11:16:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:26,info,10.139.26.2,sshd,Failed password for invalid user frappe from 109.160.32.113 port 52964 ssh2
2012.01.10 11:16:26,info,10.139.26.2,sshd,Connection closed by invalid user frappe 109.160.32.113 port 52964 [preauth]
2012.01.10 11:16:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37548 ssh2
2012.01.10 11:16:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37548 [preauth]
2012.01.10 11:16:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:16:31,info,10.139.26.2,sshd,Invalid user gy from 109.160.32.113 port 53052
2012.01.10 11:16:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:31,info,10.139.26.2,sshd,Failed password for invalid user gy from 109.160.32.113 port 53052 ssh2
2012.01.10 11:16:31,info,10.139.26.2,sshd,Connection closed by invalid user gy 109.160.32.113 port 53052 [preauth]
2012.01.10 11:16:33,info,10.139.26.2,sshd,Invalid user zookeeper from 109.160.32.115 port 59572
2012.01.10 11:16:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:34,info,10.139.26.2,sshd,Failed password for invalid user zookeeper from 109.160.32.115 port 59572 ssh2
2012.01.10 11:16:34,info,10.139.26.2,sshd,Connection closed by invalid user zookeeper 109.160.32.115 port 59572 [preauth]
2012.01.10 11:16:35,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 51423 ssh2
2012.01.10 11:16:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 51423 [preauth]
2012.01.10 11:16:35,info,10.139.26.2,sshd,Invalid user oracle11g from 109.160.32.113 port 54598
2012.01.10 11:16:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:36,info,10.139.26.2,sshd,Failed password for invalid user oracle11g from 109.160.32.113 port 54598 ssh2
2012.01.10 11:16:36,info,10.139.26.2,sshd,Connection closed by invalid user oracle11g 109.160.32.113 port 54598 [preauth]
2012.01.10 11:16:38,info,10.139.26.2,sshd,Invalid user devuser from 109.160.32.115 port 59602
2012.01.10 11:16:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:38,info,10.139.26.2,sshd,Failed password for invalid user devuser from 109.160.32.115 port 59602 ssh2
2012.01.10 11:16:38,info,10.139.26.2,sshd,Connection closed by invalid user devuser 109.160.32.115 port 59602 [preauth]
2012.01.10 11:16:40,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 54642
2012.01.10 11:16:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:40,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 54642 ssh2
2012.01.10 11:16:40,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 54642 [preauth]
2012.01.10 11:16:43,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 52880
2012.01.10 11:16:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:43,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 52880 ssh2
2012.01.10 11:16:43,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 54150 ssh2
2012.01.10 11:16:43,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 52880 [preauth]
2012.01.10 11:16:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 54150 [preauth]
2012.01.10 11:16:44,info,10.139.26.2,sshd,Invalid user server from 109.160.32.113 port 54262
2012.01.10 11:16:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:44,info,10.139.26.2,sshd,Failed password for invalid user server from 109.160.32.113 port 54262 ssh2
2012.01.10 11:16:45,info,10.139.26.2,sshd,Connection closed by invalid user server 109.160.32.113 port 54262 [preauth]
2012.01.10 11:16:48,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52920 ssh2
2012.01.10 11:16:48,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52920 [preauth]
2012.01.10 11:16:49,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.113 port 54308
2012.01.10 11:16:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:49,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.113 port 54308 ssh2
2012.01.10 11:16:50,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.113 port 54308 [preauth]
2012.01.10 11:16:52,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.115 port 57892
2012.01.10 11:16:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:52,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.115 port 57892 ssh2
2012.01.10 11:16:52,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.115 port 57892 [preauth]
2012.01.10 11:16:54,info,10.139.26.2,sshd,Invalid user cloud from 109.160.32.113 port 53192
2012.01.10 11:16:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:54,info,10.139.26.2,sshd,Failed password for invalid user cloud from 109.160.32.113 port 53192 ssh2
2012.01.10 11:16:54,info,10.139.26.2,sshd,Connection closed by invalid user cloud 109.160.32.113 port 53192 [preauth]
2012.01.10 11:16:58,info,10.139.26.2,sshd,Invalid user ftp from 109.160.32.115 port 57902
2012.01.10 11:16:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:16:58,info,10.139.26.2,sshd,Failed password for invalid user ftp from 109.160.32.115 port 57902 ssh2
2012.01.10 11:16:58,info,10.139.26.2,sshd,Connection closed by invalid user ftp 109.160.32.115 port 57902 [preauth]
2012.01.10 11:16:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53254 ssh2
2012.01.10 11:16:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53254 [preauth]
2012.01.10 11:17:03,info,10.139.26.2,sshd,Invalid user vbox from 109.160.32.115 port 55642
2012.01.10 11:17:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:03,info,10.139.26.2,sshd,Failed password for invalid user vbox from 109.160.32.115 port 55642 ssh2
2012.01.10 11:17:03,info,10.139.26.2,sshd,Invalid user reza from 109.160.32.113 port 32936
2012.01.10 11:17:03,info,10.139.26.2,sshd,Connection closed by invalid user vbox 109.160.32.115 port 55642 [preauth]
2012.01.10 11:17:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:03,info,10.139.26.2,sshd,Failed password for invalid user reza from 109.160.32.113 port 32936 ssh2
2012.01.10 11:17:03,info,10.139.26.2,sshd,Connection closed by invalid user reza 109.160.32.113 port 32936 [preauth]
2012.01.10 11:17:08,info,10.139.26.2,sshd,Invalid user codex from 109.160.32.113 port 33012
2012.01.10 11:17:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:08,info,10.139.26.2,sshd,Failed password for invalid user codex from 109.160.32.113 port 33012 ssh2
2012.01.10 11:17:08,info,10.139.26.2,sshd,Connection closed by invalid user codex 109.160.32.113 port 33012 [preauth]
2012.01.10 11:17:09,info,10.139.26.2,sshd,Invalid user cursor from 109.160.32.115 port 55708
2012.01.10 11:17:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:09,info,10.139.26.2,sshd,Failed password for invalid user cursor from 109.160.32.115 port 55708 ssh2
2012.01.10 11:17:09,info,10.139.26.2,sshd,Connection closed by invalid user cursor 109.160.32.115 port 55708 [preauth]
2012.01.10 11:17:13,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39166 ssh2
2012.01.10 11:17:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39166 [preauth]
2012.01.10 11:17:13,info,10.139.26.2,sshd,Invalid user alumni from 109.160.32.115 port 53938
2012.01.10 11:17:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:13,info,10.139.26.2,sshd,Failed password for invalid user alumni from 109.160.32.115 port 53938 ssh2
2012.01.10 11:17:14,info,10.139.26.2,sshd,Connection closed by invalid user alumni 109.160.32.115 port 53938 [preauth]
2012.01.10 11:17:18,info,10.139.26.2,sshd,Invalid user zyh from 109.160.32.115 port 53950
2012.01.10 11:17:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:18,info,10.139.26.2,sshd,Failed password for invalid user zyh from 109.160.32.115 port 53950 ssh2
2012.01.10 11:17:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39248 ssh2
2012.01.10 11:17:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39248 [preauth]
2012.01.10 11:17:18,info,10.139.26.2,sshd,Connection closed by invalid user zyh 109.160.32.115 port 53950 [preauth]
2012.01.10 11:17:21,info,10.139.26.2,sshd,Invalid user fivem from 109.160.32.113 port 39270
2012.01.10 11:17:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:21,info,10.139.26.2,sshd,Failed password for invalid user fivem from 109.160.32.113 port 39270 ssh2
2012.01.10 11:17:21,info,10.139.26.2,sshd,Connection closed by invalid user fivem 109.160.32.113 port 39270 [preauth]
2012.01.10 11:17:23,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 48470
2012.01.10 11:17:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:24,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 48470 ssh2
2012.01.10 11:17:24,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 48470 [preauth]
2012.01.10 11:17:26,info,10.139.26.2,sshd,Invalid user azureuser from 109.160.32.113 port 33526
2012.01.10 11:17:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:26,info,10.139.26.2,sshd,Failed password for invalid user azureuser from 109.160.32.113 port 33526 ssh2
2012.01.10 11:17:26,info,10.139.26.2,sshd,Connection closed by invalid user azureuser 109.160.32.113 port 33526 [preauth]
2012.01.10 11:17:28,info,10.139.26.2,sshd,Invalid user oracle from 109.160.32.115 port 48532
2012.01.10 11:17:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:17:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:29,info,10.139.26.2,sshd,Failed password for invalid user oracle from 109.160.32.115 port 48532 ssh2
2012.01.10 11:17:29,info,10.139.26.2,sshd,Connection closed by invalid user oracle 109.160.32.115 port 48532 [preauth]
2012.01.10 11:17:31,info,10.139.26.2,sshd,Invalid user mongodb from 109.160.32.113 port 33564
2012.01.10 11:17:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:31,info,10.139.26.2,sshd,Failed password for invalid user mongodb from 109.160.32.113 port 33564 ssh2
2012.01.10 11:17:31,info,10.139.26.2,sshd,Connection closed by invalid user mongodb 109.160.32.113 port 33564 [preauth]
2012.01.10 11:17:33,info,10.139.26.2,sshd,Invalid user minecraft from 109.160.32.115 port 60594
2012.01.10 11:17:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:33,info,10.139.26.2,sshd,Failed password for invalid user minecraft from 109.160.32.115 port 60594 ssh2
2012.01.10 11:17:34,info,10.139.26.2,sshd,Connection closed by invalid user minecraft 109.160.32.115 port 60594 [preauth]
2012.01.10 11:17:36,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44530 ssh2
2012.01.10 11:17:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44530 [preauth]
2012.01.10 11:17:38,info,10.139.26.2,sshd,Invalid user myuser from 109.160.32.115 port 60628
2012.01.10 11:17:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:38,info,10.139.26.2,sshd,Failed password for invalid user myuser from 109.160.32.115 port 60628 ssh2
2012.01.10 11:17:38,info,10.139.26.2,sshd,Connection closed by invalid user myuser 109.160.32.115 port 60628 [preauth]
2012.01.10 11:17:40,info,10.139.26.2,sshd,Invalid user liuyan from 109.160.32.113 port 44560
2012.01.10 11:17:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:41,info,10.139.26.2,sshd,Failed password for invalid user liuyan from 109.160.32.113 port 44560 ssh2
2012.01.10 11:17:41,info,10.139.26.2,sshd,Connection closed by invalid user liuyan 109.160.32.113 port 44560 [preauth]
2012.01.10 11:17:42,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.115 port 55178
2012.01.10 11:17:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:43,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.115 port 55178 ssh2
2012.01.10 11:17:43,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.115 port 55178 [preauth]
2012.01.10 11:17:45,info,10.139.26.2,sshd,Invalid user user4 from 109.160.32.113 port 58972
2012.01.10 11:17:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:45,info,10.139.26.2,sshd,Failed password for invalid user user4 from 109.160.32.113 port 58972 ssh2
2012.01.10 11:17:45,info,10.139.26.2,sshd,Connection closed by invalid user user4 109.160.32.113 port 58972 [preauth]
2012.01.10 11:17:47,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 55228 ssh2
2012.01.10 11:17:48,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 55228 [preauth]
2012.01.10 11:17:50,info,10.139.26.2,sshd,Invalid user ranga from 109.160.32.113 port 59048
2012.01.10 11:17:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:50,info,10.139.26.2,sshd,Failed password for invalid user ranga from 109.160.32.113 port 59048 ssh2
2012.01.10 11:17:50,info,10.139.26.2,sshd,Connection closed by invalid user ranga 109.160.32.113 port 59048 [preauth]
2012.01.10 11:17:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33024 ssh2
2012.01.10 11:17:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33024 [preauth]
2012.01.10 11:17:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 49378 ssh2
2012.01.10 11:17:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 49378 [preauth]
2012.01.10 11:17:57,info,10.139.26.2,sshd,Invalid user user2 from 109.160.32.115 port 33074
2012.01.10 11:17:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:57,info,10.139.26.2,sshd,Failed password for invalid user user2 from 109.160.32.115 port 33074 ssh2
2012.01.10 11:17:57,info,10.139.26.2,sshd,Connection closed by invalid user user2 109.160.32.115 port 33074 [preauth]
2012.01.10 11:17:59,info,10.139.26.2,sshd,Invalid user 1111 from 138.226.239.234 port 37084
2012.01.10 11:17:59,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.113 port 49422
2012.01.10 11:17:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:17:59,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.113 port 49422 ssh2
2012.01.10 11:17:59,info,10.139.26.2,sshd,Failed password for invalid user 1111 from 138.226.239.234 port 37084 ssh2
2012.01.10 11:17:59,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.113 port 49422 [preauth]
2012.01.10 11:17:59,info,10.139.26.2,sshd,Connection closed by invalid user 1111 138.226.239.234 port 37084 [preauth]
2012.01.10 11:18:02,info,10.139.26.2,sshd,Invalid user onkar from 109.160.32.115 port 52162
2012.01.10 11:18:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:02,info,10.139.26.2,sshd,Failed password for invalid user onkar from 109.160.32.115 port 52162 ssh2
2012.01.10 11:18:02,info,10.139.26.2,sshd,Connection closed by invalid user onkar 109.160.32.115 port 52162 [preauth]
2012.01.10 11:18:04,info,10.139.26.2,sshd,Invalid user krish from 109.160.32.113 port 38118
2012.01.10 11:18:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:04,info,10.139.26.2,sshd,Failed password for invalid user krish from 109.160.32.113 port 38118 ssh2
2012.01.10 11:18:04,info,10.139.26.2,sshd,Connection closed by invalid user krish 109.160.32.113 port 38118 [preauth]
2012.01.10 11:18:07,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 52224 ssh2
2012.01.10 11:18:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 52224 [preauth]
2012.01.10 11:18:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38180 ssh2
2012.01.10 11:18:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38180 [preauth]
2012.01.10 11:18:11,info,10.139.26.2,sshd,Invalid user appuser from 109.160.32.115 port 59320
2012.01.10 11:18:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:12,info,10.139.26.2,sshd,Failed password for invalid user appuser from 109.160.32.115 port 59320 ssh2
2012.01.10 11:18:12,info,10.139.26.2,sshd,Connection closed by invalid user appuser 109.160.32.115 port 59320 [preauth]
2012.01.10 11:18:13,info,10.139.26.2,sshd,Invalid user newuser from 109.160.32.113 port 41516
2012.01.10 11:18:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:13,info,10.139.26.2,sshd,Failed password for invalid user newuser from 109.160.32.113 port 41516 ssh2
2012.01.10 11:18:13,info,10.139.26.2,sshd,Connection closed by invalid user newuser 109.160.32.113 port 41516 [preauth]
2012.01.10 11:18:17,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 59394
2012.01.10 11:18:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:17,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 59394 ssh2
2012.01.10 11:18:18,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 59394 [preauth]
2012.01.10 11:18:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41584 ssh2
2012.01.10 11:18:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41584 [preauth]
2012.01.10 11:18:21,info,10.139.26.2,sshd,Invalid user user10 from 109.160.32.115 port 59518
2012.01.10 11:18:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:21,info,10.139.26.2,sshd,Failed password for invalid user user10 from 109.160.32.115 port 59518 ssh2
2012.01.10 11:18:22,info,10.139.26.2,sshd,Connection closed by invalid user user10 109.160.32.115 port 59518 [preauth]
2012.01.10 11:18:22,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 41838
2012.01.10 11:18:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:22,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 41838 ssh2
2012.01.10 11:18:23,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 41838 [preauth]
2012.01.10 11:18:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49984 ssh2
2012.01.10 11:18:27,info,10.139.26.2,sshd,Invalid user vncuser from 109.160.32.113 port 41942
2012.01.10 11:18:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49984 [preauth]
2012.01.10 11:18:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:27,info,10.139.26.2,sshd,Failed password for invalid user vncuser from 109.160.32.113 port 41942 ssh2
2012.01.10 11:18:27,info,10.139.26.2,sshd,Connection closed by invalid user vncuser 109.160.32.113 port 41942 [preauth]
2012.01.10 11:18:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:18:30,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.115 port 50078
2012.01.10 11:18:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:30,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.115 port 50078 ssh2
2012.01.10 11:18:31,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.115 port 50078 [preauth]
2012.01.10 11:18:32,info,10.139.26.2,sshd,Invalid user gns3 from 109.160.32.113 port 39338
2012.01.10 11:18:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:32,info,10.139.26.2,sshd,Failed password for invalid user gns3 from 109.160.32.113 port 39338 ssh2
2012.01.10 11:18:32,info,10.139.26.2,sshd,Connection closed by invalid user gns3 109.160.32.113 port 39338 [preauth]
2012.01.10 11:18:35,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 57608
2012.01.10 11:18:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:35,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 57608 ssh2
2012.01.10 11:18:35,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 57608 [preauth]
2012.01.10 11:18:36,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 39410
2012.01.10 11:18:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:37,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 39410 ssh2
2012.01.10 11:18:37,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 39410 [preauth]
2012.01.10 11:18:38,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 56322 ssh2
2012.01.10 11:18:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 56322 [preauth]
2012.01.10 11:18:40,info,10.139.26.2,sshd,Invalid user test from 109.160.32.115 port 57622
2012.01.10 11:18:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:40,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.115 port 57622 ssh2
2012.01.10 11:18:40,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.115 port 57622 [preauth]
2012.01.10 11:18:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39502 ssh2
2012.01.10 11:18:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39502 [preauth]
2012.01.10 11:18:44,info,10.139.26.2,sshd,Invalid user ub from 109.160.32.115 port 45054
2012.01.10 11:18:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:44,info,10.139.26.2,sshd,Failed password for invalid user ub from 109.160.32.115 port 45054 ssh2
2012.01.10 11:18:45,info,10.139.26.2,sshd,Connection closed by invalid user ub 109.160.32.115 port 45054 [preauth]
2012.01.10 11:18:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 42732 ssh2
2012.01.10 11:18:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 42732 [preauth]
2012.01.10 11:18:49,info,10.139.26.2,sshd,Invalid user amin from 109.160.32.115 port 45104
2012.01.10 11:18:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:50,info,10.139.26.2,sshd,Failed password for invalid user amin from 109.160.32.115 port 45104 ssh2
2012.01.10 11:18:50,info,10.139.26.2,sshd,Connection closed by invalid user amin 109.160.32.115 port 45104 [preauth]
2012.01.10 11:18:51,info,10.139.26.2,sshd,Invalid user devops from 109.160.32.113 port 42776
2012.01.10 11:18:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:51,info,10.139.26.2,sshd,Failed password for invalid user devops from 109.160.32.113 port 42776 ssh2
2012.01.10 11:18:51,info,10.139.26.2,sshd,Connection closed by invalid user devops 109.160.32.113 port 42776 [preauth]
2012.01.10 11:18:54,info,10.139.26.2,sshd,Invalid user webadmin from 109.160.32.115 port 59010
2012.01.10 11:18:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:55,info,10.139.26.2,sshd,Failed password for invalid user webadmin from 109.160.32.115 port 59010 ssh2
2012.01.10 11:18:55,info,10.139.26.2,sshd,Connection closed by invalid user webadmin 109.160.32.115 port 59010 [preauth]
2012.01.10 11:18:56,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.113 port 58548
2012.01.10 11:18:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:18:56,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.113 port 58548 ssh2
2012.01.10 11:18:56,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.113 port 58548 [preauth]
2012.01.10 11:19:00,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 59076 ssh2
2012.01.10 11:19:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 59076 [preauth]
2012.01.10 11:19:00,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58598 ssh2
2012.01.10 11:19:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58598 [preauth]
2012.01.10 11:19:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49528 ssh2
2012.01.10 11:19:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49528 [preauth]
2012.01.10 11:19:05,info,10.139.26.2,sshd,Invalid user cursor from 109.160.32.113 port 35646
2012.01.10 11:19:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:05,info,10.139.26.2,sshd,Failed password for invalid user cursor from 109.160.32.113 port 35646 ssh2
2012.01.10 11:19:05,info,10.139.26.2,sshd,Connection closed by invalid user cursor 109.160.32.113 port 35646 [preauth]
2012.01.10 11:19:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 49552 ssh2
2012.01.10 11:19:10,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 49552 [preauth]
2012.01.10 11:19:10,info,10.139.26.2,sshd,Invalid user kevin from 109.160.32.113 port 35716
2012.01.10 11:19:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:10,info,10.139.26.2,sshd,Failed password for invalid user kevin from 109.160.32.113 port 35716 ssh2
2012.01.10 11:19:10,info,10.139.26.2,sshd,Connection closed by invalid user kevin 109.160.32.113 port 35716 [preauth]
2012.01.10 11:19:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37842 ssh2
2012.01.10 11:19:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37842 [preauth]
2012.01.10 11:19:15,info,10.139.26.2,sshd,Invalid user hu from 109.160.32.113 port 57754
2012.01.10 11:19:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:15,info,10.139.26.2,sshd,Failed password for invalid user hu from 109.160.32.113 port 57754 ssh2
2012.01.10 11:19:15,info,10.139.26.2,sshd,Connection closed by invalid user hu 109.160.32.113 port 57754 [preauth]
2012.01.10 11:19:19,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57842 ssh2
2012.01.10 11:19:19,info,10.139.26.2,sshd,Invalid user rdpuser from 109.160.32.115 port 37884
2012.01.10 11:19:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57842 [preauth]
2012.01.10 11:19:20,info,10.139.26.2,sshd,Failed password for invalid user rdpuser from 109.160.32.115 port 37884 ssh2
2012.01.10 11:19:20,info,10.139.26.2,sshd,Connection closed by invalid user rdpuser 109.160.32.115 port 37884 [preauth]
2012.01.10 11:19:24,info,10.139.26.2,sshd,Invalid user ruoyi from 109.160.32.113 port 54320
2012.01.10 11:19:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:24,info,10.139.26.2,sshd,Failed password for invalid user ruoyi from 109.160.32.113 port 54320 ssh2
2012.01.10 11:19:24,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.115 port 60696
2012.01.10 11:19:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:24,info,10.139.26.2,sshd,Connection closed by invalid user ruoyi 109.160.32.113 port 54320 [preauth]
2012.01.10 11:19:24,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.115 port 60696 ssh2
2012.01.10 11:19:25,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.115 port 60696 [preauth]
2012.01.10 11:19:28,info,10.139.26.2,sshd,Invalid user myuser from 109.160.32.113 port 54450
2012.01.10 11:19:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:19:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:29,info,10.139.26.2,sshd,Failed password for invalid user myuser from 109.160.32.113 port 54450 ssh2
2012.01.10 11:19:29,info,10.139.26.2,sshd,Connection closed by invalid user myuser 109.160.32.113 port 54450 [preauth]
2012.01.10 11:19:29,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 60758 ssh2
2012.01.10 11:19:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 60758 [preauth]
2012.01.10 11:19:33,info,10.139.26.2,sshd,Invalid user odoo from 109.160.32.113 port 37790
2012.01.10 11:19:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:33,info,10.139.26.2,sshd,Failed password for invalid user odoo from 109.160.32.113 port 37790 ssh2
2012.01.10 11:19:34,info,10.139.26.2,sshd,Connection closed by invalid user odoo 109.160.32.113 port 37790 [preauth]
2012.01.10 11:19:34,info,10.139.26.2,sshd,Invalid user app from 109.160.32.115 port 53912
2012.01.10 11:19:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:34,info,10.139.26.2,sshd,Failed password for invalid user app from 109.160.32.115 port 53912 ssh2
2012.01.10 11:19:35,info,10.139.26.2,sshd,Connection closed by invalid user app 109.160.32.115 port 53912 [preauth]
2012.01.10 11:19:38,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.113 port 37852
2012.01.10 11:19:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:38,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.113 port 37852 ssh2
2012.01.10 11:19:38,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.113 port 37852 [preauth]
2012.01.10 11:19:39,info,10.139.26.2,sshd,Invalid user webmaster from 109.160.32.115 port 53920
2012.01.10 11:19:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:39,info,10.139.26.2,sshd,Failed password for invalid user webmaster from 109.160.32.115 port 53920 ssh2
2012.01.10 11:19:39,info,10.139.26.2,sshd,Connection closed by invalid user webmaster 109.160.32.115 port 53920 [preauth]
2012.01.10 11:19:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50082 ssh2
2012.01.10 11:19:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50082 [preauth]
2012.01.10 11:19:44,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.115 port 39774
2012.01.10 11:19:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:44,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.115 port 39774 ssh2
2012.01.10 11:19:44,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.115 port 39774 [preauth]
2012.01.10 11:19:47,info,10.139.26.2,sshd,Invalid user git from 109.160.32.113 port 50126
2012.01.10 11:19:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:48,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.113 port 50126 ssh2
2012.01.10 11:19:48,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.113 port 50126 [preauth]
2012.01.10 11:19:48,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39816 ssh2
2012.01.10 11:19:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39816 [preauth]
2012.01.10 11:19:52,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.113 port 43180
2012.01.10 11:19:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:53,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.113 port 43180 ssh2
2012.01.10 11:19:53,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.113 port 43180 [preauth]
2012.01.10 11:19:53,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 47596
2012.01.10 11:19:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:54,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 47596 ssh2
2012.01.10 11:19:54,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 47596 [preauth]
2012.01.10 11:19:57,info,10.139.26.2,sshd,Invalid user tester from 109.160.32.113 port 43228
2012.01.10 11:19:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:19:57,info,10.139.26.2,sshd,Failed password for invalid user tester from 109.160.32.113 port 43228 ssh2
2012.01.10 11:19:57,info,10.139.26.2,sshd,Connection closed by invalid user tester 109.160.32.113 port 43228 [preauth]
2012.01.10 11:19:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 47648 ssh2
2012.01.10 11:19:58,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 47648 [preauth]
2012.01.10 11:20:02,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38998 ssh2
2012.01.10 11:20:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38998 [preauth]
2012.01.10 11:20:03,info,10.139.26.2,sshd,Invalid user git from 109.160.32.115 port 54090
2012.01.10 11:20:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:03,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.115 port 54090 ssh2
2012.01.10 11:20:04,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.115 port 54090 [preauth]
2012.01.10 11:20:06,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 39028
2012.01.10 11:20:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:07,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 39028 ssh2
2012.01.10 11:20:07,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 39028 [preauth]
2012.01.10 11:20:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 54134 ssh2
2012.01.10 11:20:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 54134 [preauth]
2012.01.10 11:20:11,info,10.139.26.2,sshd,Invalid user mdm from 109.160.32.113 port 39068
2012.01.10 11:20:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:11,info,10.139.26.2,sshd,Failed password for invalid user mdm from 109.160.32.113 port 39068 ssh2
2012.01.10 11:20:12,info,10.139.26.2,sshd,Connection closed by invalid user mdm 109.160.32.113 port 39068 [preauth]
2012.01.10 11:20:13,info,10.139.26.2,sshd,Invalid user devops from 109.160.32.115 port 37454
2012.01.10 11:20:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:13,info,10.139.26.2,sshd,Failed password for invalid user devops from 109.160.32.115 port 37454 ssh2
2012.01.10 11:20:13,info,10.139.26.2,sshd,Connection closed by invalid user devops 109.160.32.115 port 37454 [preauth]
2012.01.10 11:20:16,info,10.139.26.2,sshd,Invalid user splunk from 109.160.32.113 port 53266
2012.01.10 11:20:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:16,info,10.139.26.2,sshd,Failed password for invalid user splunk from 109.160.32.113 port 53266 ssh2
2012.01.10 11:20:16,info,10.139.26.2,sshd,Connection closed by invalid user splunk 109.160.32.113 port 53266 [preauth]
2012.01.10 11:20:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37510 ssh2
2012.01.10 11:20:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37510 [preauth]
2012.01.10 11:20:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53300 ssh2
2012.01.10 11:20:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53300 [preauth]
2012.01.10 11:20:23,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 38894
2012.01.10 11:20:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:23,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 38894 ssh2
2012.01.10 11:20:24,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 38894 [preauth]
2012.01.10 11:20:25,info,10.139.26.2,sshd,Invalid user AdminGPON from 109.160.32.113 port 56952
2012.01.10 11:20:25,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:25,info,10.139.26.2,sshd,Failed password for invalid user AdminGPON from 109.160.32.113 port 56952 ssh2
2012.01.10 11:20:25,info,10.139.26.2,sshd,Connection closed by invalid user AdminGPON 109.160.32.113 port 56952 [preauth]
2012.01.10 11:20:28,info,10.139.26.2,sshd,Invalid user student from 109.160.32.115 port 38924
2012.01.10 11:20:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:28,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.115 port 38924 ssh2
2012.01.10 11:20:28,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.115 port 38924 [preauth]
2012.01.10 11:20:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:20:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56978 ssh2
2012.01.10 11:20:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56978 [preauth]
2012.01.10 11:20:33,info,10.139.26.2,sshd,Invalid user mohammad from 109.160.32.115 port 38468
2012.01.10 11:20:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:34,info,10.139.26.2,sshd,Failed password for invalid user mohammad from 109.160.32.115 port 38468 ssh2
2012.01.10 11:20:34,info,10.139.26.2,sshd,Connection closed by invalid user mohammad 109.160.32.115 port 38468 [preauth]
2012.01.10 11:20:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 42270 ssh2
2012.01.10 11:20:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 42270 [preauth]
2012.01.10 11:20:38,info,10.139.26.2,sshd,Invalid user codex from 109.160.32.115 port 38520
2012.01.10 11:20:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:38,info,10.139.26.2,sshd,Failed password for invalid user codex from 109.160.32.115 port 38520 ssh2
2012.01.10 11:20:38,info,10.139.26.2,sshd,Connection closed by invalid user codex 109.160.32.115 port 38520 [preauth]
2012.01.10 11:20:39,info,10.139.26.2,sshd,Invalid user radio from 109.160.32.113 port 42302
2012.01.10 11:20:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:39,info,10.139.26.2,sshd,Failed password for invalid user radio from 109.160.32.113 port 42302 ssh2
2012.01.10 11:20:40,info,10.139.26.2,sshd,Connection closed by invalid user radio 109.160.32.113 port 42302 [preauth]
2012.01.10 11:20:42,info,10.139.26.2,sshd,Invalid user git from 109.160.32.115 port 39214
2012.01.10 11:20:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:42,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.115 port 39214 ssh2
2012.01.10 11:20:43,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.115 port 39214 [preauth]
2012.01.10 11:20:43,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.113 port 39372
2012.01.10 11:20:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:44,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.113 port 39372 ssh2
2012.01.10 11:20:44,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.113 port 39372 [preauth]
2012.01.10 11:20:45,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52409 ssh2
2012.01.10 11:20:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52409 [preauth]
2012.01.10 11:20:47,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 39246 ssh2
2012.01.10 11:20:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 39246 [preauth]
2012.01.10 11:20:48,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39404 ssh2
2012.01.10 11:20:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39404 [preauth]
2012.01.10 11:20:52,info,10.139.26.2,sshd,Invalid user ranga from 109.160.32.115 port 46790
2012.01.10 11:20:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:52,info,10.139.26.2,sshd,Failed password for invalid user ranga from 109.160.32.115 port 46790 ssh2
2012.01.10 11:20:52,info,10.139.26.2,sshd,Connection closed by invalid user ranga 109.160.32.115 port 46790 [preauth]
2012.01.10 11:20:53,info,10.139.26.2,sshd,Invalid user nana from 109.160.32.113 port 34796
2012.01.10 11:20:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:53,info,10.139.26.2,sshd,Failed password for invalid user nana from 109.160.32.113 port 34796 ssh2
2012.01.10 11:20:53,info,10.139.26.2,sshd,Connection closed by invalid user nana 109.160.32.113 port 34796 [preauth]
2012.01.10 11:20:57,info,10.139.26.2,sshd,Invalid user splunk from 109.160.32.115 port 46832
2012.01.10 11:20:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:20:58,info,10.139.26.2,sshd,Failed password for invalid user splunk from 109.160.32.115 port 46832 ssh2
2012.01.10 11:20:58,info,10.139.26.2,sshd,Connection closed by invalid user splunk 109.160.32.115 port 46832 [preauth]
2012.01.10 11:20:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 34848 ssh2
2012.01.10 11:20:58,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 34848 [preauth]
2012.01.10 11:21:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35882 ssh2
2012.01.10 11:21:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 42082 ssh2
2012.01.10 11:21:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35882 [preauth]
2012.01.10 11:21:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 42082 [preauth]
2012.01.10 11:21:07,info,10.139.26.2,sshd,Invalid user park from 109.160.32.115 port 42108
2012.01.10 11:21:07,info,10.139.26.2,sshd,Invalid user ftpuser1 from 109.160.32.113 port 35934
2012.01.10 11:21:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:07,info,10.139.26.2,sshd,Failed password for invalid user park from 109.160.32.115 port 42108 ssh2
2012.01.10 11:21:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:07,info,10.139.26.2,sshd,Failed password for invalid user ftpuser1 from 109.160.32.113 port 35934 ssh2
2012.01.10 11:21:08,info,10.139.26.2,sshd,Connection closed by invalid user park 109.160.32.115 port 42108 [preauth]
2012.01.10 11:21:08,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser1 109.160.32.113 port 35934 [preauth]
2012.01.10 11:21:12,info,10.139.26.2,sshd,Invalid user fahmi from 109.160.32.113 port 54998
2012.01.10 11:21:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:12,info,10.139.26.2,sshd,Failed password for invalid user fahmi from 109.160.32.113 port 54998 ssh2
2012.01.10 11:21:12,info,10.139.26.2,sshd,Connection closed by invalid user fahmi 109.160.32.113 port 54998 [preauth]
2012.01.10 11:21:12,info,10.139.26.2,sshd,Invalid user csgo from 109.160.32.115 port 58104
2012.01.10 11:21:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:13,info,10.139.26.2,sshd,Failed password for invalid user csgo from 109.160.32.115 port 58104 ssh2
2012.01.10 11:21:13,info,10.139.26.2,sshd,Connection closed by invalid user csgo 109.160.32.115 port 58104 [preauth]
2012.01.10 11:21:17,info,10.139.26.2,sshd,Invalid user tester from 109.160.32.113 port 55088
2012.01.10 11:21:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:17,info,10.139.26.2,sshd,Failed password for invalid user tester from 109.160.32.113 port 55088 ssh2
2012.01.10 11:21:17,info,10.139.26.2,sshd,Invalid user hadoop from 109.160.32.115 port 58118
2012.01.10 11:21:17,info,10.139.26.2,sshd,Connection closed by invalid user tester 109.160.32.113 port 55088 [preauth]
2012.01.10 11:21:18,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:18,info,10.139.26.2,sshd,Failed password for invalid user hadoop from 109.160.32.115 port 58118 ssh2
2012.01.10 11:21:18,info,10.139.26.2,sshd,Connection closed by invalid user hadoop 109.160.32.115 port 58118 [preauth]
2012.01.10 11:21:22,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 50344
2012.01.10 11:21:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:22,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 50344 ssh2
2012.01.10 11:21:22,info,10.139.26.2,sshd,Invalid user localhost from 109.160.32.115 port 33392
2012.01.10 11:21:22,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 50344 [preauth]
2012.01.10 11:21:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:23,info,10.139.26.2,sshd,Failed password for invalid user localhost from 109.160.32.115 port 33392 ssh2
2012.01.10 11:21:23,info,10.139.26.2,sshd,Connection closed by invalid user localhost 109.160.32.115 port 33392 [preauth]
2012.01.10 11:21:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50380 ssh2
2012.01.10 11:21:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50380 [preauth]
2012.01.10 11:21:27,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 33446
2012.01.10 11:21:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:27,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 33446 ssh2
2012.01.10 11:21:27,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 33446 [preauth]
2012.01.10 11:21:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:21:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 50432 ssh2
2012.01.10 11:21:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 50432 [preauth]
2012.01.10 11:21:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 59050 ssh2
2012.01.10 11:21:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 59050 [preauth]
2012.01.10 11:21:36,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 48688
2012.01.10 11:21:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:36,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 48688 ssh2
2012.01.10 11:21:36,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 48688 [preauth]
2012.01.10 11:21:37,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.115 port 59150
2012.01.10 11:21:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:37,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.115 port 59150 ssh2
2012.01.10 11:21:37,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.115 port 59150 [preauth]
2012.01.10 11:21:41,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.113 port 48728
2012.01.10 11:21:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:41,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.113 port 48728 ssh2
2012.01.10 11:21:41,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.113 port 48728 [preauth]
2012.01.10 11:21:42,info,10.139.26.2,sshd,Invalid user data from 109.160.32.115 port 41754
2012.01.10 11:21:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:43,info,10.139.26.2,sshd,Failed password for invalid user data from 109.160.32.115 port 41754 ssh2
2012.01.10 11:21:43,info,10.139.26.2,sshd,Connection closed by invalid user data 109.160.32.115 port 41754 [preauth]
2012.01.10 11:21:45,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43702 ssh2
2012.01.10 11:21:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43702 [preauth]
2012.01.10 11:21:48,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.115 port 41764
2012.01.10 11:21:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:48,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.115 port 41764 ssh2
2012.01.10 11:21:49,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.115 port 41764 [preauth]
2012.01.10 11:21:50,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 43718
2012.01.10 11:21:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:50,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 43718 ssh2
2012.01.10 11:21:50,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 43718 [preauth]
2012.01.10 11:21:52,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 37970
2012.01.10 11:21:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:52,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 37970 ssh2
2012.01.10 11:21:52,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 37970 [preauth]
2012.01.10 11:21:55,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.113 port 46682
2012.01.10 11:21:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:55,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.113 port 46682 ssh2
2012.01.10 11:21:55,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.113 port 46682 [preauth]
2012.01.10 11:21:56,info,10.139.26.2,sshd,Invalid user hack from 109.160.32.115 port 38014
2012.01.10 11:21:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:56,info,10.139.26.2,sshd,Failed password for invalid user hack from 109.160.32.115 port 38014 ssh2
2012.01.10 11:21:57,info,10.139.26.2,sshd,Connection closed by invalid user hack 109.160.32.115 port 38014 [preauth]
2012.01.10 11:21:59,info,10.139.26.2,sshd,Invalid user test3 from 109.160.32.113 port 46710
2012.01.10 11:21:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:21:59,info,10.139.26.2,sshd,Failed password for invalid user test3 from 109.160.32.113 port 46710 ssh2
2012.01.10 11:22:00,info,10.139.26.2,sshd,Connection closed by invalid user test3 109.160.32.113 port 46710 [preauth]
2012.01.10 11:22:02,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.115 port 33632
2012.01.10 11:22:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:02,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.115 port 33632 ssh2
2012.01.10 11:22:02,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.115 port 33632 [preauth]
2012.01.10 11:22:04,info,10.139.26.2,sshd,Invalid user fanshu from 109.160.32.113 port 57608
2012.01.10 11:22:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:04,info,10.139.26.2,sshd,Failed password for invalid user fanshu from 109.160.32.113 port 57608 ssh2
2012.01.10 11:22:04,info,10.139.26.2,sshd,Connection closed by invalid user fanshu 109.160.32.113 port 57608 [preauth]
2012.01.10 11:22:06,info,10.139.26.2,sshd,Invalid user edge from 109.160.32.115 port 33696
2012.01.10 11:22:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:07,info,10.139.26.2,sshd,Failed password for invalid user edge from 109.160.32.115 port 33696 ssh2
2012.01.10 11:22:07,info,10.139.26.2,sshd,Connection closed by invalid user edge 109.160.32.115 port 33696 [preauth]
2012.01.10 11:22:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57658 ssh2
2012.01.10 11:22:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57658 [preauth]
2012.01.10 11:22:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33762 ssh2
2012.01.10 11:22:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33762 [preauth]
2012.01.10 11:22:13,info,10.139.26.2,sshd,Invalid user alice from 109.160.32.113 port 51582
2012.01.10 11:22:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:13,info,10.139.26.2,sshd,Failed password for invalid user alice from 109.160.32.113 port 51582 ssh2
2012.01.10 11:22:14,info,10.139.26.2,sshd,Connection closed by invalid user alice 109.160.32.113 port 51582 [preauth]
2012.01.10 11:22:16,info,10.139.26.2,sshd,Invalid user coder from 109.160.32.115 port 34294
2012.01.10 11:22:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:16,info,10.139.26.2,sshd,Failed password for invalid user coder from 109.160.32.115 port 34294 ssh2
2012.01.10 11:22:16,info,10.139.26.2,sshd,Connection closed by invalid user coder 109.160.32.115 port 34294 [preauth]
2012.01.10 11:22:18,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51650 ssh2
2012.01.10 11:22:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51650 [preauth]
2012.01.10 11:22:22,info,10.139.26.2,sshd,Invalid user odoo17 from 109.160.32.115 port 50892
2012.01.10 11:22:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:22,info,10.139.26.2,sshd,Failed password for invalid user odoo17 from 109.160.32.115 port 50892 ssh2
2012.01.10 11:22:22,info,10.139.26.2,sshd,Connection closed by invalid user odoo17 109.160.32.115 port 50892 [preauth]
2012.01.10 11:22:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35244 ssh2
2012.01.10 11:22:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35244 [preauth]
2012.01.10 11:22:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 35284 ssh2
2012.01.10 11:22:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 35284 [preauth]
2012.01.10 11:22:28,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 50926 ssh2
2012.01.10 11:22:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 50926 [preauth]
2012.01.10 11:22:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:22:32,info,10.139.26.2,sshd,Invalid user student from 109.160.32.113 port 35328
2012.01.10 11:22:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:32,info,10.139.26.2,sshd,Failed password for invalid user student from 109.160.32.113 port 35328 ssh2
2012.01.10 11:22:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 45620 ssh2
2012.01.10 11:22:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 45620 [preauth]
2012.01.10 11:22:32,info,10.139.26.2,sshd,Connection closed by invalid user student 109.160.32.113 port 35328 [preauth]
2012.01.10 11:22:36,info,10.139.26.2,sshd,Invalid user guest from 109.160.32.113 port 44008
2012.01.10 11:22:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:37,info,10.139.26.2,sshd,Failed password for invalid user guest from 109.160.32.113 port 44008 ssh2
2012.01.10 11:22:37,info,10.139.26.2,sshd,Connection closed by invalid user guest 109.160.32.113 port 44008 [preauth]
2012.01.10 11:22:37,info,10.139.26.2,sshd,Invalid user fastuser from 109.160.32.115 port 45662
2012.01.10 11:22:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:37,info,10.139.26.2,sshd,Failed password for invalid user fastuser from 109.160.32.115 port 45662 ssh2
2012.01.10 11:22:38,info,10.139.26.2,sshd,Connection closed by invalid user fastuser 109.160.32.115 port 45662 [preauth]
2012.01.10 11:22:41,info,10.139.26.2,sshd,Invalid user deploy from 109.160.32.113 port 44060
2012.01.10 11:22:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:41,info,10.139.26.2,sshd,Failed password for invalid user deploy from 109.160.32.113 port 44060 ssh2
2012.01.10 11:22:41,info,10.139.26.2,sshd,Connection closed by invalid user deploy 109.160.32.113 port 44060 [preauth]
2012.01.10 11:22:42,info,10.139.26.2,sshd,Invalid user manager from 109.160.32.115 port 52668
2012.01.10 11:22:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:42,info,10.139.26.2,sshd,Failed password for invalid user manager from 109.160.32.115 port 52668 ssh2
2012.01.10 11:22:43,info,10.139.26.2,sshd,Connection closed by invalid user manager 109.160.32.115 port 52668 [preauth]
2012.01.10 11:22:45,info,10.139.26.2,sshd,Invalid user claw from 109.160.32.113 port 59230
2012.01.10 11:22:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:45,info,10.139.26.2,sshd,Failed password for invalid user claw from 109.160.32.113 port 59230 ssh2
2012.01.10 11:22:46,info,10.139.26.2,sshd,Connection closed by invalid user claw 109.160.32.113 port 59230 [preauth]
2012.01.10 11:22:47,info,10.139.26.2,sshd,Invalid user file from 109.160.32.115 port 52774
2012.01.10 11:22:47,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52127 ssh2
2012.01.10 11:22:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:47,info,10.139.26.2,sshd,Failed password for invalid user file from 109.160.32.115 port 52774 ssh2
2012.01.10 11:22:47,info,10.139.26.2,sshd,Connection closed by invalid user file 109.160.32.115 port 52774 [preauth]
2012.01.10 11:22:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52127 [preauth]
2012.01.10 11:22:50,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 59234
2012.01.10 11:22:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:50,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 59234 ssh2
2012.01.10 11:22:50,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 59234 [preauth]
2012.01.10 11:22:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 58080 ssh2
2012.01.10 11:22:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 58080 [preauth]
2012.01.10 11:22:55,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38624 ssh2
2012.01.10 11:22:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38624 [preauth]
2012.01.10 11:22:57,info,10.139.26.2,sshd,Invalid user monitor from 109.160.32.115 port 58162
2012.01.10 11:22:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:22:58,info,10.139.26.2,sshd,Failed password for invalid user monitor from 109.160.32.115 port 58162 ssh2
2012.01.10 11:22:58,info,10.139.26.2,sshd,Connection closed by invalid user monitor 109.160.32.115 port 58162 [preauth]
2012.01.10 11:23:00,info,10.139.26.2,sshd,Invalid user aiuser from 109.160.32.113 port 38716
2012.01.10 11:23:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:00,info,10.139.26.2,sshd,Failed password for invalid user aiuser from 109.160.32.113 port 38716 ssh2
2012.01.10 11:23:00,info,10.139.26.2,sshd,Connection closed by invalid user aiuser 109.160.32.113 port 38716 [preauth]
2012.01.10 11:23:01,info,10.139.26.2,sshd,Invalid user openclaw from 109.160.32.115 port 46132
2012.01.10 11:23:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:02,info,10.139.26.2,sshd,Failed password for invalid user openclaw from 109.160.32.115 port 46132 ssh2
2012.01.10 11:23:02,info,10.139.26.2,sshd,Connection closed by invalid user openclaw 109.160.32.115 port 46132 [preauth]
2012.01.10 11:23:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 54100 ssh2
2012.01.10 11:23:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 54100 [preauth]
2012.01.10 11:23:07,info,10.139.26.2,sshd,Invalid user vagrant from 109.160.32.115 port 46198
2012.01.10 11:23:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:07,info,10.139.26.2,sshd,Failed password for invalid user vagrant from 109.160.32.115 port 46198 ssh2
2012.01.10 11:23:08,info,10.139.26.2,sshd,Connection closed by invalid user vagrant 109.160.32.115 port 46198 [preauth]
2012.01.10 11:23:08,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 54112 ssh2
2012.01.10 11:23:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 54112 [preauth]
2012.01.10 11:23:12,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 46288 ssh2
2012.01.10 11:23:12,info,10.139.26.2,sshd,Invalid user claude from 109.160.32.113 port 36274
2012.01.10 11:23:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:13,info,10.139.26.2,sshd,Failed password for invalid user claude from 109.160.32.113 port 36274 ssh2
2012.01.10 11:23:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 46288 [preauth]
2012.01.10 11:23:13,info,10.139.26.2,sshd,Connection closed by invalid user claude 109.160.32.113 port 36274 [preauth]
2012.01.10 11:23:16,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.115 port 48652
2012.01.10 11:23:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:17,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.115 port 48652 ssh2
2012.01.10 11:23:17,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.115 port 48652 [preauth]
2012.01.10 11:23:17,info,10.139.26.2,sshd,Invalid user config from 109.160.32.113 port 36362
2012.01.10 11:23:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:17,info,10.139.26.2,sshd,Failed password for invalid user config from 109.160.32.113 port 36362 ssh2
2012.01.10 11:23:18,info,10.139.26.2,sshd,Connection closed by invalid user config 109.160.32.113 port 36362 [preauth]
2012.01.10 11:23:19,info,10.139.26.2,sshd,Invalid user sshadmin from 47.184.58.103 port 54594
2012.01.10 11:23:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:19,info,10.139.26.2,sshd,Failed password for invalid user sshadmin from 47.184.58.103 port 54594 ssh2
2012.01.10 11:23:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 48690 ssh2
2012.01.10 11:23:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 48690 [preauth]
2012.01.10 11:23:22,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52112 ssh2
2012.01.10 11:23:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52112 [preauth]
2012.01.10 11:23:24,info,10.139.26.2,sshd,Connection closed by invalid user sshadmin 47.184.58.103 port 54594 [preauth]
2012.01.10 11:23:26,info,10.139.26.2,sshd,Invalid user frappe from 109.160.32.115 port 41798
2012.01.10 11:23:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:23:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:27,info,10.139.26.2,sshd,Failed password for invalid user frappe from 109.160.32.115 port 41798 ssh2
2012.01.10 11:23:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52198 ssh2
2012.01.10 11:23:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52198 [preauth]
2012.01.10 11:23:27,info,10.139.26.2,sshd,Connection closed by invalid user frappe 109.160.32.115 port 41798 [preauth]
2012.01.10 11:23:31,info,10.139.26.2,sshd,Invalid user elrond from 109.160.32.115 port 41874
2012.01.10 11:23:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:31,info,10.139.26.2,sshd,Failed password for invalid user elrond from 109.160.32.115 port 41874 ssh2
2012.01.10 11:23:32,info,10.139.26.2,sshd,Connection closed by invalid user elrond 109.160.32.115 port 41874 [preauth]
2012.01.10 11:23:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 40882 ssh2
2012.01.10 11:23:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 40882 [preauth]
2012.01.10 11:23:36,info,10.139.26.2,sshd,Invalid user nginx from 109.160.32.115 port 35906
2012.01.10 11:23:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:36,info,10.139.26.2,sshd,Failed password for invalid user nginx from 109.160.32.115 port 35906 ssh2
2012.01.10 11:23:37,info,10.139.26.2,sshd,Invalid user user2 from 109.160.32.113 port 40928
2012.01.10 11:23:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:37,info,10.139.26.2,sshd,Failed password for invalid user user2 from 109.160.32.113 port 40928 ssh2
2012.01.10 11:23:37,info,10.139.26.2,sshd,Connection closed by invalid user user2 109.160.32.113 port 40928 [preauth]
2012.01.10 11:23:37,info,10.139.26.2,sshd,Connection closed by invalid user nginx 109.160.32.115 port 35906 [preauth]
2012.01.10 11:23:41,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 40976
2012.01.10 11:23:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 35942 ssh2
2012.01.10 11:23:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 35942 [preauth]
2012.01.10 11:23:42,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 40976 ssh2
2012.01.10 11:23:42,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 40976 [preauth]
2012.01.10 11:23:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 43494 ssh2
2012.01.10 11:23:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 43494 [preauth]
2012.01.10 11:23:47,info,10.139.26.2,sshd,Invalid user deployer from 109.160.32.115 port 40908
2012.01.10 11:23:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:47,info,10.139.26.2,sshd,Failed password for invalid user deployer from 109.160.32.115 port 40908 ssh2
2012.01.10 11:23:47,info,10.139.26.2,sshd,Connection closed by invalid user deployer 109.160.32.115 port 40908 [preauth]
2012.01.10 11:23:50,info,10.139.26.2,sshd,Invalid user opc from 109.160.32.113 port 43548
2012.01.10 11:23:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:50,info,10.139.26.2,sshd,Failed password for invalid user opc from 109.160.32.113 port 43548 ssh2
2012.01.10 11:23:51,info,10.139.26.2,sshd,Connection closed by invalid user opc 109.160.32.113 port 43548 [preauth]
2012.01.10 11:23:52,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 40946 ssh2
2012.01.10 11:23:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 40946 [preauth]
2012.01.10 11:23:53,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 57322 ssh2
2012.01.10 11:23:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 57322 [preauth]
2012.01.10 11:23:55,info,10.139.26.2,sshd,Invalid user hduser from 109.160.32.113 port 48474
2012.01.10 11:23:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:55,info,10.139.26.2,sshd,Failed password for invalid user hduser from 109.160.32.113 port 48474 ssh2
2012.01.10 11:23:55,info,10.139.26.2,sshd,Connection closed by invalid user hduser 109.160.32.113 port 48474 [preauth]
2012.01.10 11:23:56,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 58302
2012.01.10 11:23:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:23:57,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 58302 ssh2
2012.01.10 11:23:57,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 58302 [preauth]
2012.01.10 11:24:00,info,10.139.26.2,sshd,Invalid user runner from 109.160.32.113 port 48508
2012.01.10 11:24:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:00,info,10.139.26.2,sshd,Failed password for invalid user runner from 109.160.32.113 port 48508 ssh2
2012.01.10 11:24:00,info,10.139.26.2,sshd,Connection closed by invalid user runner 109.160.32.113 port 48508 [preauth]
2012.01.10 11:24:01,info,10.139.26.2,sshd,Invalid user tirex from 109.160.32.115 port 58340
2012.01.10 11:24:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:03,info,10.139.26.2,sshd,Failed password for invalid user tirex from 109.160.32.115 port 58340 ssh2
2012.01.10 11:24:03,info,10.139.26.2,sshd,Connection closed by invalid user tirex 109.160.32.115 port 58340 [preauth]
2012.01.10 11:24:04,info,10.139.26.2,sshd,Invalid user saurav from 109.160.32.113 port 37462
2012.01.10 11:24:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:04,info,10.139.26.2,sshd,Failed password for invalid user saurav from 109.160.32.113 port 37462 ssh2
2012.01.10 11:24:04,info,10.139.26.2,sshd,Connection closed by invalid user saurav 109.160.32.113 port 37462 [preauth]
2012.01.10 11:24:06,info,10.139.26.2,sshd,Invalid user teamspeak from 109.160.32.115 port 56000
2012.01.10 11:24:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:07,info,10.139.26.2,sshd,Failed password for invalid user teamspeak from 109.160.32.115 port 56000 ssh2
2012.01.10 11:24:07,info,10.139.26.2,sshd,Connection closed by invalid user teamspeak 109.160.32.115 port 56000 [preauth]
2012.01.10 11:24:09,info,10.139.26.2,sshd,Invalid user openclaw from 109.160.32.113 port 37530
2012.01.10 11:24:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:09,info,10.139.26.2,sshd,Failed password for invalid user openclaw from 109.160.32.113 port 37530 ssh2
2012.01.10 11:24:09,info,10.139.26.2,sshd,Connection closed by invalid user openclaw 109.160.32.113 port 37530 [preauth]
2012.01.10 11:24:11,info,10.139.26.2,sshd,Invalid user git from 109.160.32.115 port 56026
2012.01.10 11:24:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:11,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.115 port 56026 ssh2
2012.01.10 11:24:11,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.115 port 56026 [preauth]
2012.01.10 11:24:14,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 40374 ssh2
2012.01.10 11:24:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 40374 [preauth]
2012.01.10 11:24:16,info,10.139.26.2,sshd,Invalid user username from 109.160.32.115 port 45316
2012.01.10 11:24:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:16,info,10.139.26.2,sshd,Failed password for invalid user username from 109.160.32.115 port 45316 ssh2
2012.01.10 11:24:16,info,10.139.26.2,sshd,Connection closed by invalid user username 109.160.32.115 port 45316 [preauth]
2012.01.10 11:24:18,info,10.139.26.2,sshd,Invalid user user2 from 109.160.32.113 port 40406
2012.01.10 11:24:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:19,info,10.139.26.2,sshd,Failed password for invalid user user2 from 109.160.32.113 port 40406 ssh2
2012.01.10 11:24:19,info,10.139.26.2,sshd,Connection closed by invalid user user2 109.160.32.113 port 40406 [preauth]
2012.01.10 11:24:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 45416 ssh2
2012.01.10 11:24:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 45416 [preauth]
2012.01.10 11:24:23,info,10.139.26.2,sshd,Invalid user rocky from 109.160.32.113 port 51780
2012.01.10 11:24:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:23,info,10.139.26.2,sshd,Failed password for invalid user rocky from 109.160.32.113 port 51780 ssh2
2012.01.10 11:24:24,info,10.139.26.2,sshd,Connection closed by invalid user rocky 109.160.32.113 port 51780 [preauth]
2012.01.10 11:24:26,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.115 port 38162
2012.01.10 11:24:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:27,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.115 port 38162 ssh2
2012.01.10 11:24:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:24:27,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.115 port 38162 [preauth]
2012.01.10 11:24:28,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 51854 ssh2
2012.01.10 11:24:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 51854 [preauth]
2012.01.10 11:24:31,info,10.139.26.2,sshd,Invalid user minecraft from 109.160.32.115 port 38238
2012.01.10 11:24:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:31,info,10.139.26.2,sshd,Failed password for invalid user minecraft from 109.160.32.115 port 38238 ssh2
2012.01.10 11:24:31,info,10.139.26.2,sshd,Connection closed by invalid user minecraft 109.160.32.115 port 38238 [preauth]
2012.01.10 11:24:33,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.113 port 39854
2012.01.10 11:24:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:33,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.113 port 39854 ssh2
2012.01.10 11:24:33,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.113 port 39854 [preauth]
2012.01.10 11:24:35,info,10.139.26.2,sshd,Invalid user admins from 109.160.32.115 port 49888
2012.01.10 11:24:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:35,info,10.139.26.2,sshd,Failed password for invalid user admins from 109.160.32.115 port 49888 ssh2
2012.01.10 11:24:35,info,10.139.26.2,sshd,Connection closed by invalid user admins 109.160.32.115 port 49888 [preauth]
2012.01.10 11:24:37,info,10.139.26.2,sshd,Invalid user clawdbot from 109.160.32.113 port 39906
2012.01.10 11:24:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:37,info,10.139.26.2,sshd,Failed password for invalid user clawdbot from 109.160.32.113 port 39906 ssh2
2012.01.10 11:24:38,info,10.139.26.2,sshd,Connection closed by invalid user clawdbot 109.160.32.113 port 39906 [preauth]
2012.01.10 11:24:39,info,10.139.26.2,sshd,Invalid user root1 from 109.160.32.115 port 49950
2012.01.10 11:24:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:40,info,10.139.26.2,sshd,Failed password for invalid user root1 from 109.160.32.115 port 49950 ssh2
2012.01.10 11:24:40,info,10.139.26.2,sshd,Connection closed by invalid user root1 109.160.32.115 port 49950 [preauth]
2012.01.10 11:24:42,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53542 ssh2
2012.01.10 11:24:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53542 [preauth]
2012.01.10 11:24:45,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.115 port 46870
2012.01.10 11:24:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:45,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.115 port 46870 ssh2
2012.01.10 11:24:45,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.115 port 46870 [preauth]
2012.01.10 11:24:46,info,10.139.26.2,sshd,Invalid user ec2-user from 109.160.32.113 port 53562
2012.01.10 11:24:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:46,info,10.139.26.2,sshd,Failed password for invalid user ec2-user from 109.160.32.113 port 53562 ssh2
2012.01.10 11:24:47,info,10.139.26.2,sshd,Connection closed by invalid user ec2-user 109.160.32.113 port 53562 [preauth]
2012.01.10 11:24:49,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 46952
2012.01.10 11:24:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:49,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 46952 ssh2
2012.01.10 11:24:49,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 46952 [preauth]
2012.01.10 11:24:52,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.113 port 53592
2012.01.10 11:24:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:52,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.113 port 53592 ssh2
2012.01.10 11:24:52,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.113 port 53592 [preauth]
2012.01.10 11:24:53,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55762 ssh2
2012.01.10 11:24:54,info,10.139.26.2,sshd,Invalid user reza from 109.160.32.115 port 46684
2012.01.10 11:24:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55762 [preauth]
2012.01.10 11:24:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:54,info,10.139.26.2,sshd,Failed password for invalid user reza from 109.160.32.115 port 46684 ssh2
2012.01.10 11:24:54,info,10.139.26.2,sshd,Connection closed by invalid user reza 109.160.32.115 port 46684 [preauth]
2012.01.10 11:24:56,info,10.139.26.2,sshd,Invalid user mapingyuan from 109.160.32.113 port 44892
2012.01.10 11:24:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:56,info,10.139.26.2,sshd,Failed password for invalid user mapingyuan from 109.160.32.113 port 44892 ssh2
2012.01.10 11:24:57,info,10.139.26.2,sshd,Connection closed by invalid user mapingyuan 109.160.32.113 port 44892 [preauth]
2012.01.10 11:24:59,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.115 port 46780
2012.01.10 11:24:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:24:59,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.115 port 46780 ssh2
2012.01.10 11:24:59,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.115 port 46780 [preauth]
2012.01.10 11:25:01,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44944 ssh2
2012.01.10 11:25:01,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44944 [preauth]
2012.01.10 11:25:03,info,10.139.26.2,sshd,Invalid user administrator from 109.160.32.115 port 56488
2012.01.10 11:25:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:03,info,10.139.26.2,sshd,Failed password for invalid user administrator from 109.160.32.115 port 56488 ssh2
2012.01.10 11:25:03,info,10.139.26.2,sshd,Connection closed by invalid user administrator 109.160.32.115 port 56488 [preauth]
2012.01.10 11:25:05,info,10.139.26.2,sshd,Invalid user git from 109.160.32.113 port 55238
2012.01.10 11:25:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:06,info,10.139.26.2,sshd,Failed password for invalid user git from 109.160.32.113 port 55238 ssh2
2012.01.10 11:25:06,info,10.139.26.2,sshd,Connection closed by invalid user git 109.160.32.113 port 55238 [preauth]
2012.01.10 11:25:08,info,10.139.26.2,sshd,Invalid user kingbase from 109.160.32.115 port 56518
2012.01.10 11:25:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:08,info,10.139.26.2,sshd,Failed password for invalid user kingbase from 109.160.32.115 port 56518 ssh2
2012.01.10 11:25:08,info,10.139.26.2,sshd,Connection closed by invalid user kingbase 109.160.32.115 port 56518 [preauth]
2012.01.10 11:25:10,info,10.139.26.2,sshd,Invalid user erp from 109.160.32.113 port 55258
2012.01.10 11:25:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:11,info,10.139.26.2,sshd,Failed password for invalid user erp from 109.160.32.113 port 55258 ssh2
2012.01.10 11:25:11,info,10.139.26.2,sshd,Connection closed by invalid user erp 109.160.32.113 port 55258 [preauth]
2012.01.10 11:25:13,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.115 port 46218
2012.01.10 11:25:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:13,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.115 port 46218 ssh2
2012.01.10 11:25:13,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.115 port 46218 [preauth]
2012.01.10 11:25:15,info,10.139.26.2,sshd,Invalid user pi from 109.160.32.113 port 58382
2012.01.10 11:25:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:15,info,10.139.26.2,sshd,Failed password for invalid user pi from 109.160.32.113 port 58382 ssh2
2012.01.10 11:25:16,info,10.139.26.2,sshd,Connection closed by invalid user pi 109.160.32.113 port 58382 [preauth]
2012.01.10 11:25:18,info,10.139.26.2,sshd,Invalid user master from 109.160.32.115 port 46274
2012.01.10 11:25:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:19,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.115 port 46274 ssh2
2012.01.10 11:25:19,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.115 port 46274 [preauth]
2012.01.10 11:25:20,info,10.139.26.2,sshd,Invalid user admin2 from 109.160.32.113 port 58452
2012.01.10 11:25:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:20,info,10.139.26.2,sshd,Failed password for invalid user admin2 from 109.160.32.113 port 58452 ssh2
2012.01.10 11:25:20,info,10.139.26.2,sshd,Connection closed by invalid user admin2 109.160.32.113 port 58452 [preauth]
2012.01.10 11:25:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 53826 ssh2
2012.01.10 11:25:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 53826 [preauth]
2012.01.10 11:25:24,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.113 port 56464
2012.01.10 11:25:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:25,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.113 port 56464 ssh2
2012.01.10 11:25:25,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.113 port 56464 [preauth]
2012.01.10 11:25:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:25:27,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 53860
2012.01.10 11:25:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:28,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 53860 ssh2
2012.01.10 11:25:29,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 53860 [preauth]
2012.01.10 11:25:29,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56530 ssh2
2012.01.10 11:25:29,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56530 [preauth]
2012.01.10 11:25:32,info,10.139.26.2,sshd,Invalid user usuario from 109.160.32.115 port 59048
2012.01.10 11:25:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:33,info,10.139.26.2,sshd,Failed password for invalid user usuario from 109.160.32.115 port 59048 ssh2
2012.01.10 11:25:33,info,10.139.26.2,sshd,Connection closed by invalid user usuario 109.160.32.115 port 59048 [preauth]
2012.01.10 11:25:34,info,10.139.26.2,sshd,Invalid user core from 109.160.32.113 port 40374
2012.01.10 11:25:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:34,info,10.139.26.2,sshd,Failed password for invalid user core from 109.160.32.113 port 40374 ssh2
2012.01.10 11:25:34,info,10.139.26.2,sshd,Connection closed by invalid user core 109.160.32.113 port 40374 [preauth]
2012.01.10 11:25:37,info,10.139.26.2,sshd,Invalid user ubuntu from 109.160.32.115 port 59078
2012.01.10 11:25:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:37,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 109.160.32.115 port 59078 ssh2
2012.01.10 11:25:37,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 109.160.32.115 port 59078 [preauth]
2012.01.10 11:25:39,info,10.139.26.2,sshd,Invalid user master from 109.160.32.113 port 40458
2012.01.10 11:25:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:39,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.113 port 40458 ssh2
2012.01.10 11:25:39,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.113 port 40458 [preauth]
2012.01.10 11:25:42,info,10.139.26.2,sshd,Invalid user akash from 109.160.32.115 port 34526
2012.01.10 11:25:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:42,info,10.139.26.2,sshd,Failed password for invalid user akash from 109.160.32.115 port 34526 ssh2
2012.01.10 11:25:42,info,10.139.26.2,sshd,Connection closed by invalid user akash 109.160.32.115 port 34526 [preauth]
2012.01.10 11:25:43,info,10.139.26.2,sshd,Invalid user es from 109.160.32.113 port 55612
2012.01.10 11:25:43,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:43,info,10.139.26.2,sshd,Failed password for invalid user es from 109.160.32.113 port 55612 ssh2
2012.01.10 11:25:44,info,10.139.26.2,sshd,Connection closed by invalid user es 109.160.32.113 port 55612 [preauth]
2012.01.10 11:25:47,info,10.139.26.2,sshd,Invalid user parsa from 109.160.32.115 port 34606
2012.01.10 11:25:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:47,info,10.139.26.2,sshd,Failed password for invalid user parsa from 109.160.32.115 port 34606 ssh2
2012.01.10 11:25:47,info,10.139.26.2,sshd,Connection closed by invalid user parsa 109.160.32.115 port 34606 [preauth]
2012.01.10 11:25:48,info,10.139.26.2,sshd,Invalid user yzb from 109.160.32.113 port 55632
2012.01.10 11:25:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:48,info,10.139.26.2,sshd,Failed password for invalid user yzb from 109.160.32.113 port 55632 ssh2
2012.01.10 11:25:49,info,10.139.26.2,sshd,Connection closed by invalid user yzb 109.160.32.113 port 55632 [preauth]
2012.01.10 11:25:52,info,10.139.26.2,sshd,Invalid user test2 from 109.160.32.115 port 55220
2012.01.10 11:25:52,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:52,info,10.139.26.2,sshd,Failed password for invalid user test2 from 109.160.32.115 port 55220 ssh2
2012.01.10 11:25:52,info,10.139.26.2,sshd,Connection closed by invalid user test2 109.160.32.115 port 55220 [preauth]
2012.01.10 11:25:53,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 52436 ssh2
2012.01.10 11:25:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 52436 [preauth]
2012.01.10 11:25:56,info,10.139.26.2,sshd,Invalid user cloud from 109.160.32.115 port 55284
2012.01.10 11:25:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:57,info,10.139.26.2,sshd,Failed password for invalid user cloud from 109.160.32.115 port 55284 ssh2
2012.01.10 11:25:57,info,10.139.26.2,sshd,Connection closed by invalid user cloud 109.160.32.115 port 55284 [preauth]
2012.01.10 11:25:57,info,10.139.26.2,sshd,Invalid user openproject from 109.160.32.113 port 52522
2012.01.10 11:25:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:25:58,info,10.139.26.2,sshd,Failed password for invalid user openproject from 109.160.32.113 port 52522 ssh2
2012.01.10 11:25:58,info,10.139.26.2,sshd,Connection closed by invalid user openproject 109.160.32.113 port 52522 [preauth]
2012.01.10 11:26:02,info,10.139.26.2,sshd,Failed password for operator from 109.160.32.115 port 55356 ssh2
2012.01.10 11:26:02,info,10.139.26.2,sshd,Connection closed by authenticating user operator 109.160.32.115 port 55356 [preauth]
2012.01.10 11:26:02,info,10.139.26.2,sshd,Invalid user gg from 109.160.32.113 port 51818
2012.01.10 11:26:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:03,info,10.139.26.2,sshd,Failed password for invalid user gg from 109.160.32.113 port 51818 ssh2
2012.01.10 11:26:03,info,10.139.26.2,sshd,Connection closed by invalid user gg 109.160.32.113 port 51818 [preauth]
2012.01.10 11:26:06,info,10.139.26.2,sshd,Invalid user mdm from 109.160.32.115 port 35654
2012.01.10 11:26:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:07,info,10.139.26.2,sshd,Failed password for invalid user mdm from 109.160.32.115 port 35654 ssh2
2012.01.10 11:26:07,info,10.139.26.2,sshd,Connection closed by invalid user mdm 109.160.32.115 port 35654 [preauth]
2012.01.10 11:26:07,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.113 port 51868
2012.01.10 11:26:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:07,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.113 port 51868 ssh2
2012.01.10 11:26:07,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.113 port 51868 [preauth]
2012.01.10 11:26:11,info,10.139.26.2,sshd,Invalid user worker from 109.160.32.113 port 47602
2012.01.10 11:26:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:12,info,10.139.26.2,sshd,Invalid user user from 109.160.32.115 port 60354
2012.01.10 11:26:12,info,10.139.26.2,sshd,Failed password for invalid user worker from 109.160.32.113 port 47602 ssh2
2012.01.10 11:26:12,info,10.139.26.2,sshd,Connection closed by invalid user worker 109.160.32.113 port 47602 [preauth]
2012.01.10 11:26:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:12,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.115 port 60354 ssh2
2012.01.10 11:26:12,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.115 port 60354 [preauth]
2012.01.10 11:26:16,info,10.139.26.2,sshd,Invalid user testuser from 109.160.32.113 port 47680
2012.01.10 11:26:16,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:16,info,10.139.26.2,sshd,Failed password for invalid user testuser from 109.160.32.113 port 47680 ssh2
2012.01.10 11:26:17,info,10.139.26.2,sshd,Connection closed by invalid user testuser 109.160.32.113 port 47680 [preauth]
2012.01.10 11:26:17,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.115 port 60416
2012.01.10 11:26:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:17,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.115 port 60416 ssh2
2012.01.10 11:26:18,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.115 port 60416 [preauth]
2012.01.10 11:26:21,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 47778 ssh2
2012.01.10 11:26:21,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 47778 [preauth]
2012.01.10 11:26:22,info,10.139.26.2,sshd,Invalid user postgres from 109.160.32.115 port 50048
2012.01.10 11:26:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:22,info,10.139.26.2,sshd,Failed password for invalid user postgres from 109.160.32.115 port 50048 ssh2
2012.01.10 11:26:23,info,10.139.26.2,sshd,Connection closed by invalid user postgres 109.160.32.115 port 50048 [preauth]
2012.01.10 11:26:26,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 48588 ssh2
2012.01.10 11:26:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 48588 [preauth]
2012.01.10 11:26:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:26:27,info,10.139.26.2,sshd,Invalid user njupt080 from 109.160.32.115 port 50086
2012.01.10 11:26:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:27,info,10.139.26.2,sshd,Failed password for invalid user njupt080 from 109.160.32.115 port 50086 ssh2
2012.01.10 11:26:28,info,10.139.26.2,sshd,Connection closed by invalid user njupt080 109.160.32.115 port 50086 [preauth]
2012.01.10 11:26:30,info,10.139.26.2,sshd,Invalid user us5 from 109.160.32.113 port 48654
2012.01.10 11:26:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:30,info,10.139.26.2,sshd,Failed password for invalid user us5 from 109.160.32.113 port 48654 ssh2
2012.01.10 11:26:31,info,10.139.26.2,sshd,Connection closed by invalid user us5 109.160.32.113 port 48654 [preauth]
2012.01.10 11:26:33,info,10.139.26.2,sshd,Invalid user tomcat from 109.160.32.115 port 60498
2012.01.10 11:26:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:34,info,10.139.26.2,sshd,Failed password for invalid user tomcat from 109.160.32.115 port 60498 ssh2
2012.01.10 11:26:34,info,10.139.26.2,sshd,Connection closed by invalid user tomcat 109.160.32.115 port 60498 [preauth]
2012.01.10 11:26:35,info,10.139.26.2,sshd,Invalid user sftpuser from 109.160.32.113 port 49346
2012.01.10 11:26:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:35,info,10.139.26.2,sshd,Failed password for invalid user sftpuser from 109.160.32.113 port 49346 ssh2
2012.01.10 11:26:35,info,10.139.26.2,sshd,Connection closed by invalid user sftpuser 109.160.32.113 port 49346 [preauth]
2012.01.10 11:26:37,info,10.139.26.2,sshd,Invalid user elasticsearch from 109.160.32.115 port 60558
2012.01.10 11:26:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:38,info,10.139.26.2,sshd,Failed password for invalid user elasticsearch from 109.160.32.115 port 60558 ssh2
2012.01.10 11:26:38,info,10.139.26.2,sshd,Connection closed by invalid user elasticsearch 109.160.32.115 port 60558 [preauth]
2012.01.10 11:26:40,info,10.139.26.2,sshd,Invalid user ali from 109.160.32.113 port 49406
2012.01.10 11:26:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:40,info,10.139.26.2,sshd,Failed password for invalid user ali from 109.160.32.113 port 49406 ssh2
2012.01.10 11:26:40,info,10.139.26.2,sshd,Connection closed by invalid user ali 109.160.32.113 port 49406 [preauth]
2012.01.10 11:26:43,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 37356 ssh2
2012.01.10 11:26:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 37356 [preauth]
2012.01.10 11:26:45,info,10.139.26.2,sshd,Invalid user sam from 109.160.32.113 port 59796
2012.01.10 11:26:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:45,info,10.139.26.2,sshd,Failed password for invalid user sam from 109.160.32.113 port 59796 ssh2
2012.01.10 11:26:46,info,10.139.26.2,sshd,Connection closed by invalid user sam 109.160.32.113 port 59796 [preauth]
2012.01.10 11:26:47,info,10.139.26.2,sshd,Invalid user m from 109.160.32.115 port 37438
2012.01.10 11:26:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:47,info,10.139.26.2,sshd,Failed password for invalid user m from 109.160.32.115 port 37438 ssh2
2012.01.10 11:26:47,info,10.139.26.2,sshd,Connection closed by invalid user m 109.160.32.115 port 37438 [preauth]
2012.01.10 11:26:49,info,10.139.26.2,sshd,Invalid user ferd from 109.160.32.113 port 59828
2012.01.10 11:26:50,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:50,info,10.139.26.2,sshd,Failed password for invalid user ferd from 109.160.32.113 port 59828 ssh2
2012.01.10 11:26:50,info,10.139.26.2,sshd,Connection closed by invalid user ferd 109.160.32.113 port 59828 [preauth]
2012.01.10 11:26:51,info,10.139.26.2,sshd,Invalid user node from 109.160.32.115 port 33080
2012.01.10 11:26:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:52,info,10.139.26.2,sshd,Failed password for invalid user node from 109.160.32.115 port 33080 ssh2
2012.01.10 11:26:52,info,10.139.26.2,sshd,Connection closed by invalid user node 109.160.32.115 port 33080 [preauth]
2012.01.10 11:26:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 46596 ssh2
2012.01.10 11:26:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 46596 [preauth]
2012.01.10 11:26:56,info,10.139.26.2,sshd,Failed password for root from 109.160.32.115 port 33136 ssh2
2012.01.10 11:26:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.115 port 33136 [preauth]
2012.01.10 11:26:59,info,10.139.26.2,sshd,Invalid user liquid from 109.160.32.113 port 46674
2012.01.10 11:26:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:26:59,info,10.139.26.2,sshd,Failed password for invalid user liquid from 109.160.32.113 port 46674 ssh2
2012.01.10 11:26:59,info,10.139.26.2,sshd,Connection closed by invalid user liquid 109.160.32.113 port 46674 [preauth]
2012.01.10 11:27:00,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53830 ssh2
2012.01.10 11:27:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53830 [preauth]
2012.01.10 11:27:01,info,10.139.26.2,sshd,Invalid user developer from 109.160.32.115 port 33184
2012.01.10 11:27:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:01,info,10.139.26.2,sshd,Failed password for invalid user developer from 109.160.32.115 port 33184 ssh2
2012.01.10 11:27:02,info,10.139.26.2,sshd,Connection closed by invalid user developer 109.160.32.115 port 33184 [preauth]
2012.01.10 11:27:03,info,10.139.26.2,sshd,Invalid user test from 109.160.32.113 port 38390
2012.01.10 11:27:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:04,info,10.139.26.2,sshd,Failed password for invalid user test from 109.160.32.113 port 38390 ssh2
2012.01.10 11:27:04,info,10.139.26.2,sshd,Connection closed by invalid user test 109.160.32.113 port 38390 [preauth]
2012.01.10 11:27:09,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 38404 ssh2
2012.01.10 11:27:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 38404 [preauth]
2012.01.10 11:27:09,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 60432 ssh2
2012.01.10 11:27:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 60432 [preauth]
2012.01.10 11:27:13,info,10.139.26.2,sshd,Invalid user lenovo from 109.160.32.113 port 59538
2012.01.10 11:27:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:13,info,10.139.26.2,sshd,Failed password for invalid user lenovo from 109.160.32.113 port 59538 ssh2
2012.01.10 11:27:13,info,10.139.26.2,sshd,Connection closed by invalid user lenovo 109.160.32.113 port 59538 [preauth]
2012.01.10 11:27:17,info,10.139.26.2,sshd,Invalid user t1 from 109.160.32.113 port 59568
2012.01.10 11:27:17,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:17,info,10.139.26.2,sshd,Failed password for invalid user t1 from 109.160.32.113 port 59568 ssh2
2012.01.10 11:27:17,info,10.139.26.2,sshd,Connection closed by invalid user t1 109.160.32.113 port 59568 [preauth]
2012.01.10 11:27:22,info,10.139.26.2,sshd,Invalid user almalinux from 109.160.32.113 port 60988
2012.01.10 11:27:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:22,info,10.139.26.2,sshd,Failed password for invalid user almalinux from 109.160.32.113 port 60988 ssh2
2012.01.10 11:27:22,info,10.139.26.2,sshd,Connection closed by invalid user almalinux 109.160.32.113 port 60988 [preauth]
2012.01.10 11:27:27,info,10.139.26.2,sshd,Invalid user netadmin from 109.160.32.113 port 32806
2012.01.10 11:27:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:27:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:27,info,10.139.26.2,sshd,Failed password for invalid user netadmin from 109.160.32.113 port 32806 ssh2
2012.01.10 11:27:27,info,10.139.26.2,sshd,Connection closed by invalid user netadmin 109.160.32.113 port 32806 [preauth]
2012.01.10 11:27:31,info,10.139.26.2,sshd,Failed password for operator from 109.160.32.113 port 32874 ssh2
2012.01.10 11:27:31,info,10.139.26.2,sshd,Connection closed by authenticating user operator 109.160.32.113 port 32874 [preauth]
2012.01.10 11:27:35,info,10.139.26.2,sshd,Invalid user node from 109.160.32.113 port 59194
2012.01.10 11:27:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:36,info,10.139.26.2,sshd,Failed password for invalid user node from 109.160.32.113 port 59194 ssh2
2012.01.10 11:27:36,info,10.139.26.2,sshd,Connection closed by invalid user node 109.160.32.113 port 59194 [preauth]
2012.01.10 11:27:40,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 59230 ssh2
2012.01.10 11:27:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 59230 [preauth]
2012.01.10 11:27:45,info,10.139.26.2,sshd,Invalid user user78 from 109.160.32.113 port 59886
2012.01.10 11:27:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:45,info,10.139.26.2,sshd,Failed password for invalid user user78 from 109.160.32.113 port 59886 ssh2
2012.01.10 11:27:45,info,10.139.26.2,sshd,Connection closed by invalid user user78 109.160.32.113 port 59886 [preauth]
2012.01.10 11:27:49,info,10.139.26.2,sshd,Invalid user user from 109.160.32.113 port 59922
2012.01.10 11:27:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:27:49,info,10.139.26.2,sshd,Failed password for invalid user user from 109.160.32.113 port 59922 ssh2
2012.01.10 11:27:49,info,10.139.26.2,sshd,Connection closed by invalid user user 109.160.32.113 port 59922 [preauth]
2012.01.10 11:27:54,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 54298 ssh2
2012.01.10 11:27:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 54298 [preauth]
2012.01.10 11:27:58,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 54368 ssh2
2012.01.10 11:27:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 54368 [preauth]
2012.01.10 11:28:03,info,10.139.26.2,sshd,Invalid user trader from 109.160.32.113 port 58232
2012.01.10 11:28:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:03,info,10.139.26.2,sshd,Failed password for invalid user trader from 109.160.32.113 port 58232 ssh2
2012.01.10 11:28:03,info,10.139.26.2,sshd,Connection closed by invalid user trader 109.160.32.113 port 58232 [preauth]
2012.01.10 11:28:08,info,10.139.26.2,sshd,Invalid user cloud from 109.160.32.113 port 58314
2012.01.10 11:28:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:08,info,10.139.26.2,sshd,Failed password for invalid user cloud from 109.160.32.113 port 58314 ssh2
2012.01.10 11:28:08,info,10.139.26.2,sshd,Connection closed by invalid user cloud 109.160.32.113 port 58314 [preauth]
2012.01.10 11:28:12,info,10.139.26.2,sshd,Invalid user super from 109.160.32.113 port 58358
2012.01.10 11:28:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:12,info,10.139.26.2,sshd,Failed password for invalid user super from 109.160.32.113 port 58358 ssh2
2012.01.10 11:28:12,info,10.139.26.2,sshd,Connection closed by invalid user super 109.160.32.113 port 58358 [preauth]
2012.01.10 11:28:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 58414 ssh2
2012.01.10 11:28:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 58414 [preauth]
2012.01.10 11:28:21,info,10.139.26.2,sshd,Invalid user admin from 109.160.32.113 port 58442
2012.01.10 11:28:21,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:21,info,10.139.26.2,sshd,Failed password for invalid user admin from 109.160.32.113 port 58442 ssh2
2012.01.10 11:28:22,info,10.139.26.2,sshd,Connection closed by invalid user admin 109.160.32.113 port 58442 [preauth]
2012.01.10 11:28:26,info,10.139.26.2,sshd,Invalid user webadmin from 109.160.32.113 port 55404
2012.01.10 11:28:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:26,info,10.139.26.2,sshd,Failed password for invalid user webadmin from 109.160.32.113 port 55404 ssh2
2012.01.10 11:28:26,info,10.139.26.2,sshd,Connection closed by invalid user webadmin 109.160.32.113 port 55404 [preauth]
2012.01.10 11:28:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:28:30,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 55460 ssh2
2012.01.10 11:28:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 55460 [preauth]
2012.01.10 11:28:35,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 41392 ssh2
2012.01.10 11:28:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 41392 [preauth]
2012.01.10 11:28:39,info,10.139.26.2,sshd,Invalid user vbox from 109.160.32.113 port 41420
2012.01.10 11:28:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:39,info,10.139.26.2,sshd,Failed password for invalid user vbox from 109.160.32.113 port 41420 ssh2
2012.01.10 11:28:40,info,10.139.26.2,sshd,Connection closed by invalid user vbox 109.160.32.113 port 41420 [preauth]
2012.01.10 11:28:44,info,10.139.26.2,sshd,Invalid user debian from 109.160.32.113 port 44344
2012.01.10 11:28:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:44,info,10.139.26.2,sshd,Failed password for invalid user debian from 109.160.32.113 port 44344 ssh2
2012.01.10 11:28:44,info,10.139.26.2,sshd,Connection closed by invalid user debian 109.160.32.113 port 44344 [preauth]
2012.01.10 11:28:48,info,10.139.26.2,sshd,Invalid user chris from 109.160.32.113 port 44456
2012.01.10 11:28:49,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:49,info,10.139.26.2,sshd,Failed password for invalid user chris from 109.160.32.113 port 44456 ssh2
2012.01.10 11:28:49,info,10.139.26.2,sshd,Connection closed by invalid user chris 109.160.32.113 port 44456 [preauth]
2012.01.10 11:28:53,info,10.139.26.2,sshd,Invalid user admin3 from 109.160.32.113 port 44108
2012.01.10 11:28:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:54,info,10.139.26.2,sshd,Failed password for invalid user admin3 from 109.160.32.113 port 44108 ssh2
2012.01.10 11:28:54,info,10.139.26.2,sshd,Connection closed by invalid user admin3 109.160.32.113 port 44108 [preauth]
2012.01.10 11:28:58,info,10.139.26.2,sshd,Invalid user ivan from 109.160.32.113 port 44170
2012.01.10 11:28:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:28:58,info,10.139.26.2,sshd,Failed password for invalid user ivan from 109.160.32.113 port 44170 ssh2
2012.01.10 11:28:58,info,10.139.26.2,sshd,Connection closed by invalid user ivan 109.160.32.113 port 44170 [preauth]
2012.01.10 11:29:03,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 37646 ssh2
2012.01.10 11:29:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 37646 [preauth]
2012.01.10 11:29:04,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 58160 ssh2
2012.01.10 11:29:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 58160 [preauth]
2012.01.10 11:29:07,info,10.139.26.2,sshd,Invalid user mysql from 109.160.32.113 port 37712
2012.01.10 11:29:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:07,info,10.139.26.2,sshd,Failed password for invalid user mysql from 109.160.32.113 port 37712 ssh2
2012.01.10 11:29:08,info,10.139.26.2,sshd,Connection closed by invalid user mysql 109.160.32.113 port 37712 [preauth]
2012.01.10 11:29:12,info,10.139.26.2,sshd,Invalid user felix from 109.160.32.113 port 37770
2012.01.10 11:29:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:12,info,10.139.26.2,sshd,Failed password for invalid user felix from 109.160.32.113 port 37770 ssh2
2012.01.10 11:29:12,info,10.139.26.2,sshd,Connection closed by invalid user felix 109.160.32.113 port 37770 [preauth]
2012.01.10 11:29:17,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 36976 ssh2
2012.01.10 11:29:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 36976 [preauth]
2012.01.10 11:29:21,info,10.139.26.2,sshd,Invalid user desktop from 109.160.32.113 port 37026
2012.01.10 11:29:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:22,info,10.139.26.2,sshd,Failed password for invalid user desktop from 109.160.32.113 port 37026 ssh2
2012.01.10 11:29:22,info,10.139.26.2,sshd,Connection closed by invalid user desktop 109.160.32.113 port 37026 [preauth]
2012.01.10 11:29:26,info,10.139.26.2,sshd,Invalid user wizard from 109.160.32.113 port 56708
2012.01.10 11:29:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:26,info,10.139.26.2,sshd,Failed password for invalid user wizard from 109.160.32.113 port 56708 ssh2
2012.01.10 11:29:27,info,10.139.26.2,sshd,Connection closed by invalid user wizard 109.160.32.113 port 56708 [preauth]
2012.01.10 11:29:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:29:31,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 56766 ssh2
2012.01.10 11:29:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 56766 [preauth]
2012.01.10 11:29:36,info,10.139.26.2,sshd,Invalid user master from 109.160.32.113 port 44922
2012.01.10 11:29:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:36,info,10.139.26.2,sshd,Failed password for invalid user master from 109.160.32.113 port 44922 ssh2
2012.01.10 11:29:37,info,10.139.26.2,sshd,Connection closed by invalid user master 109.160.32.113 port 44922 [preauth]
2012.01.10 11:29:41,info,10.139.26.2,sshd,Invalid user greedo from 109.160.32.113 port 44988
2012.01.10 11:29:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:41,info,10.139.26.2,sshd,Failed password for invalid user greedo from 109.160.32.113 port 44988 ssh2
2012.01.10 11:29:41,info,10.139.26.2,sshd,Connection closed by invalid user greedo 109.160.32.113 port 44988 [preauth]
2012.01.10 11:29:46,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53482 ssh2
2012.01.10 11:29:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53482 [preauth]
2012.01.10 11:29:51,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 53516 ssh2
2012.01.10 11:29:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 53516 [preauth]
2012.01.10 11:29:55,info,10.139.26.2,sshd,Invalid user lin from 109.160.32.113 port 52440
2012.01.10 11:29:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:29:55,info,10.139.26.2,sshd,Failed password for invalid user lin from 109.160.32.113 port 52440 ssh2
2012.01.10 11:29:55,info,10.139.26.2,sshd,Connection closed by invalid user lin 109.160.32.113 port 52440 [preauth]
2012.01.10 11:30:00,info,10.139.26.2,sshd,Invalid user dev from 109.160.32.113 port 52470
2012.01.10 11:30:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:30:00,info,10.139.26.2,sshd,Failed password for invalid user dev from 109.160.32.113 port 52470 ssh2
2012.01.10 11:30:00,info,10.139.26.2,sshd,Connection closed by invalid user dev 109.160.32.113 port 52470 [preauth]
2012.01.10 11:30:04,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 57530 ssh2
2012.01.10 11:30:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 57530 [preauth]
2012.01.10 11:30:09,info,10.139.26.2,sshd,Invalid user user1 from 109.160.32.113 port 57592
2012.01.10 11:30:10,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:30:10,info,10.139.26.2,sshd,Failed password for invalid user user1 from 109.160.32.113 port 57592 ssh2
2012.01.10 11:30:10,info,10.139.26.2,sshd,Connection closed by invalid user user1 109.160.32.113 port 57592 [preauth]
2012.01.10 11:30:13,info,10.139.26.2,sshd,Invalid user oracle from 109.160.32.113 port 44084
2012.01.10 11:30:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:30:14,info,10.139.26.2,sshd,Failed password for invalid user oracle from 109.160.32.113 port 44084 ssh2
2012.01.10 11:30:14,info,10.139.26.2,sshd,Connection closed by invalid user oracle 109.160.32.113 port 44084 [preauth]
2012.01.10 11:30:19,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 44094 ssh2
2012.01.10 11:30:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 44094 [preauth]
2012.01.10 11:30:23,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 60358 ssh2
2012.01.10 11:30:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 60358 [preauth]
2012.01.10 11:30:23,info,10.139.26.2,sshd,Failed password for root from 92.118.39.14 port 35324 ssh2
2012.01.10 11:30:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 92.118.39.14 port 35324 [preauth]
2012.01.10 11:30:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:30:27,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 60402 ssh2
2012.01.10 11:30:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 60402 [preauth]
2012.01.10 11:30:29,info,10.139.26.2,sshd,Bad protocol version identification 'GET / HTTP/1.1' from 165.245.166.163 port 56790
2012.01.10 11:30:32,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 39982 ssh2
2012.01.10 11:30:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 39982 [preauth]
2012.01.10 11:30:37,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 40054 ssh2
2012.01.10 11:30:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 40054 [preauth]
2012.01.10 11:30:41,info,10.139.26.2,sshd,Failed password for root from 109.160.32.113 port 40084 ssh2
2012.01.10 11:30:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 109.160.32.113 port 40084 [preauth]
2012.01.10 11:30:45,info,10.139.26.2,sshd,Invalid user potok from 109.160.32.113 port 59380
2012.01.10 11:30:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:30:46,info,10.139.26.2,sshd,Failed password for invalid user potok from 109.160.32.113 port 59380 ssh2
2012.01.10 11:30:46,info,10.139.26.2,sshd,Connection closed by invalid user potok 109.160.32.113 port 59380 [preauth]
2012.01.10 11:31:15,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 49584 ssh2
2012.01.10 11:31:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 49584 [preauth]
2012.01.10 11:31:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:32:27,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:32:28,info,10.139.26.2,sshd,Failed password for root from 58.221.60.25 port 42178 ssh2
2012.01.10 11:32:29,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 42178:11: Bye Bye [preauth]
2012.01.10 11:32:29,info,10.139.26.2,sshd,Disconnected from authenticating user root 58.221.60.25 port 42178 [preauth]
2012.01.10 11:33:24,info,10.139.26.2,sshd,Invalid user vpnbot from 177.53.247.76 port 37846
2012.01.10 11:33:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:33:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:33:24,info,10.139.26.2,sshd,Failed password for invalid user vpnbot from 177.53.247.76 port 37846 ssh2
2012.01.10 11:33:25,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 37846:11: Bye Bye [preauth]
2012.01.10 11:33:25,info,10.139.26.2,sshd,Disconnected from invalid user vpnbot 177.53.247.76 port 37846 [preauth]
2012.01.10 11:33:27,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61577 ssh2
2012.01.10 11:33:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61577 [preauth]
2012.01.10 11:33:47,info,10.139.26.2,sshd,Invalid user nutanix from 80.94.95.116 port 56962
2012.01.10 11:33:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:33:48,info,10.139.26.2,sshd,Failed password for invalid user nutanix from 80.94.95.116 port 56962 ssh2
2012.01.10 11:33:48,info,10.139.26.2,sshd,Connection closed by invalid user nutanix 80.94.95.116 port 56962 [preauth]
2012.01.10 11:34:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:35:12,info,10.139.26.2,sshd,Invalid user finance from 103.171.69.67 port 37848
2012.01.10 11:35:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:35:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:35:12,info,10.139.26.2,sshd,Failed password for invalid user finance from 103.171.69.67 port 37848 ssh2
2012.01.10 11:35:12,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 37848:11: Bye Bye [preauth]
2012.01.10 11:35:12,info,10.139.26.2,sshd,Disconnected from invalid user finance 103.171.69.67 port 37848 [preauth]
2012.01.10 11:35:29,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 50572 ssh2
2012.01.10 11:35:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 50572 [preauth]
2012.01.10 11:35:44,info,10.139.26.2,sshd,Invalid user admin from 47.184.58.103 port 59198
2012.01.10 11:35:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:35:44,info,10.139.26.2,sshd,Failed password for invalid user admin from 47.184.58.103 port 59198 ssh2
2012.01.10 11:35:44,info,10.139.26.2,sshd,Did not receive identification string from 85.97.154.156 port 44690
2012.01.10 11:35:50,info,10.139.26.2,sshd,Connection closed by invalid user admin 47.184.58.103 port 59198 [preauth]
2012.01.10 11:36:11,info,10.139.26.2,sshd,Invalid user ubnt from 193.24.211.219 port 23713
2012.01.10 11:36:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:36:11,info,10.139.26.2,sshd,Failed password for invalid user ubnt from 193.24.211.219 port 23713 ssh2
2012.01.10 11:36:11,info,10.139.26.2,sshd,Received disconnect from 193.24.211.219 port 23713:11: Client disconnecting normally [preauth]
2012.01.10 11:36:11,info,10.139.26.2,sshd,Disconnected from invalid user ubnt 193.24.211.219 port 23713 [preauth]
2012.01.10 11:36:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:36:39,info,10.139.26.2,sshd,Invalid user user1 from 37.110.113.113 port 57964
2012.01.10 11:36:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:36:40,info,10.139.26.2,sshd,Failed password for invalid user user1 from 37.110.113.113 port 57964 ssh2
2012.01.10 11:36:40,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 57964:11: Bye Bye [preauth]
2012.01.10 11:36:40,info,10.139.26.2,sshd,Disconnected from invalid user user1 37.110.113.113 port 57964 [preauth]
2012.01.10 11:37:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:37:29,info,10.139.26.2,sshd,Invalid user support from 177.53.247.76 port 44280
2012.01.10 11:37:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:37:29,info,10.139.26.2,sshd,Failed password for invalid user support from 177.53.247.76 port 44280 ssh2
2012.01.10 11:37:29,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 44280:11: Bye Bye [preauth]
2012.01.10 11:37:29,info,10.139.26.2,sshd,Disconnected from invalid user support 177.53.247.76 port 44280 [preauth]
2012.01.10 11:37:43,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 58281 ssh2
2012.01.10 11:37:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 58281 [preauth]
2012.01.10 11:37:44,info,10.139.26.2,sshd,Failed password for root from 103.171.69.67 port 56526 ssh2
2012.01.10 11:37:44,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 56526:11: Bye Bye [preauth]
2012.01.10 11:37:44,info,10.139.26.2,sshd,Disconnected from authenticating user root 103.171.69.67 port 56526 [preauth]
2012.01.10 11:38:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:38:29,info,10.139.26.2,sshd,Invalid user sftpuser from 37.110.113.113 port 58538
2012.01.10 11:38:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:38:29,info,10.139.26.2,sshd,Failed password for invalid user sftpuser from 37.110.113.113 port 58538 ssh2
2012.01.10 11:38:29,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 58538:11: Bye Bye [preauth]
2012.01.10 11:38:29,info,10.139.26.2,sshd,Disconnected from invalid user sftpuser 37.110.113.113 port 58538 [preauth]
2012.01.10 11:39:08,info,10.139.26.2,sshd,Invalid user calibre from 177.53.247.76 port 40030
2012.01.10 11:39:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:39:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:39:08,info,10.139.26.2,sshd,Failed password for invalid user calibre from 177.53.247.76 port 40030 ssh2
2012.01.10 11:39:08,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 40030:11: Bye Bye [preauth]
2012.01.10 11:39:08,info,10.139.26.2,sshd,Disconnected from invalid user calibre 177.53.247.76 port 40030 [preauth]
2012.01.10 11:39:23,info,10.139.26.2,sshd,Invalid user easy from 103.171.69.67 port 47064
2012.01.10 11:39:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:39:23,info,10.139.26.2,sshd,Failed password for invalid user easy from 103.171.69.67 port 47064 ssh2
2012.01.10 11:39:23,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 47064:11: Bye Bye [preauth]
2012.01.10 11:39:23,info,10.139.26.2,sshd,Disconnected from invalid user easy 103.171.69.67 port 47064 [preauth]
2012.01.10 11:39:34,info,10.139.26.2,sshd,Failed password for root from 37.110.113.113 port 44172 ssh2
2012.01.10 11:39:34,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 44172:11: Bye Bye [preauth]
2012.01.10 11:39:34,info,10.139.26.2,sshd,Disconnected from authenticating user root 37.110.113.113 port 44172 [preauth]
2012.01.10 11:39:59,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57330 ssh2
2012.01.10 11:39:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57330 [preauth]
2012.01.10 11:40:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:40:33,info,10.139.26.2,sshd,Invalid user andrey from 37.110.113.113 port 39736
2012.01.10 11:40:33,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:40:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:40:33,info,10.139.26.2,sshd,Failed password for invalid user andrey from 37.110.113.113 port 39736 ssh2
2012.01.10 11:40:33,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 39736:11: Bye Bye [preauth]
2012.01.10 11:40:33,info,10.139.26.2,sshd,Disconnected from invalid user andrey 37.110.113.113 port 39736 [preauth]
2012.01.10 11:40:55,info,10.139.26.2,sshd,Invalid user hussain from 177.53.247.76 port 52410
2012.01.10 11:40:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:40:55,info,10.139.26.2,sshd,Failed password for invalid user hussain from 177.53.247.76 port 52410 ssh2
2012.01.10 11:40:55,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 52410:11: Bye Bye [preauth]
2012.01.10 11:40:55,info,10.139.26.2,sshd,Disconnected from invalid user hussain 177.53.247.76 port 52410 [preauth]
2012.01.10 11:41:07,info,10.139.26.2,sshd,Failed password for root from 103.171.69.67 port 59522 ssh2
2012.01.10 11:41:07,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 59522:11: Bye Bye [preauth]
2012.01.10 11:41:07,info,10.139.26.2,sshd,Disconnected from authenticating user root 103.171.69.67 port 59522 [preauth]
2012.01.10 11:41:32,info,10.139.26.2,sshd,Invalid user file from 37.110.113.113 port 52918
2012.01.10 11:41:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:41:32,info,10.139.26.2,sshd,Failed password for invalid user file from 37.110.113.113 port 52918 ssh2
2012.01.10 11:41:32,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 52918:11: Bye Bye [preauth]
2012.01.10 11:41:32,info,10.139.26.2,sshd,Disconnected from invalid user file 37.110.113.113 port 52918 [preauth]
2012.01.10 11:41:33,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:42:09,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57387 ssh2
2012.01.10 11:42:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57387 [preauth]
2012.01.10 11:42:22,info,10.139.26.2,sshd,Invalid user easy from 177.53.247.76 port 39706
2012.01.10 11:42:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:42:22,info,10.139.26.2,sshd,Failed password for invalid user easy from 177.53.247.76 port 39706 ssh2
2012.01.10 11:42:22,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 39706:11: Bye Bye [preauth]
2012.01.10 11:42:22,info,10.139.26.2,sshd,Disconnected from invalid user easy 177.53.247.76 port 39706 [preauth]
2012.01.10 11:42:33,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:42:33,info,10.139.26.2,sshd,Failed password for root from 37.110.113.113 port 60236 ssh2
2012.01.10 11:42:34,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 60236:11: Bye Bye [preauth]
2012.01.10 11:42:34,info,10.139.26.2,sshd,Disconnected from authenticating user root 37.110.113.113 port 60236 [preauth]
2012.01.10 11:43:22,info,10.139.26.2,sshd,Invalid user speedtest from 103.171.69.67 port 56306
2012.01.10 11:43:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:43:22,info,10.139.26.2,sshd,Failed password for invalid user speedtest from 103.171.69.67 port 56306 ssh2
2012.01.10 11:43:22,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 56306:11: Bye Bye [preauth]
2012.01.10 11:43:22,info,10.139.26.2,sshd,Disconnected from invalid user speedtest 103.171.69.67 port 56306 [preauth]
2012.01.10 11:43:33,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:43:38,info,10.139.26.2,sshd,Invalid user lily from 37.110.113.113 port 34224
2012.01.10 11:43:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:43:38,info,10.139.26.2,sshd,Failed password for invalid user lily from 37.110.113.113 port 34224 ssh2
2012.01.10 11:43:38,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 34224:11: Bye Bye [preauth]
2012.01.10 11:43:38,info,10.139.26.2,sshd,Disconnected from invalid user lily 37.110.113.113 port 34224 [preauth]
2012.01.10 11:43:51,info,10.139.26.2,sshd,Invalid user rico from 177.53.247.76 port 59890
2012.01.10 11:43:51,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:43:51,info,10.139.26.2,sshd,Failed password for invalid user rico from 177.53.247.76 port 59890 ssh2
2012.01.10 11:43:52,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 59890:11: Bye Bye [preauth]
2012.01.10 11:43:52,info,10.139.26.2,sshd,Disconnected from invalid user rico 177.53.247.76 port 59890 [preauth]
2012.01.10 11:44:25,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62458 ssh2
2012.01.10 11:44:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62458 [preauth]
2012.01.10 11:44:33,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:44:41,info,10.139.26.2,sshd,Invalid user neeraj from 37.110.113.113 port 46936
2012.01.10 11:44:41,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:44:41,info,10.139.26.2,sshd,Failed password for invalid user neeraj from 37.110.113.113 port 46936 ssh2
2012.01.10 11:44:42,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 46936:11: Bye Bye [preauth]
2012.01.10 11:44:42,info,10.139.26.2,sshd,Disconnected from invalid user neeraj 37.110.113.113 port 46936 [preauth]
2012.01.10 11:44:59,info,10.139.26.2,sshd,Invalid user vpnbot from 103.171.69.81 port 52458
2012.01.10 11:44:59,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:44:59,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:44:59,info,10.139.26.2,sshd,Failed password for invalid user vpnbot from 103.171.69.81 port 52458 ssh2
2012.01.10 11:45:00,info,10.139.26.2,sshd,Received disconnect from 103.171.69.81 port 52458:11: Bye Bye [preauth]
2012.01.10 11:45:00,info,10.139.26.2,sshd,Disconnected from invalid user vpnbot 103.171.69.81 port 52458 [preauth]
2012.01.10 11:45:27,info,10.139.26.2,sshd,Invalid user duc from 177.53.247.76 port 60574
2012.01.10 11:45:27,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:27,info,10.139.26.2,sshd,Failed password for invalid user duc from 177.53.247.76 port 60574 ssh2
2012.01.10 11:45:28,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 60574:11: Bye Bye [preauth]
2012.01.10 11:45:28,info,10.139.26.2,sshd,Disconnected from invalid user duc 177.53.247.76 port 60574 [preauth]
2012.01.10 11:45:29,info,10.139.26.2,sshd,Invalid user admin from 176.53.159.197 port 23926
2012.01.10 11:45:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:29,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23926 ssh2
2012.01.10 11:45:29,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23926 ssh2
2012.01.10 11:45:29,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23926 ssh2
2012.01.10 11:45:30,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23926 ssh2
2012.01.10 11:45:30,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23926 ssh2
2012.01.10 11:45:30,info,10.139.26.2,sshd,Connection reset by invalid user admin 176.53.159.197 port 23926 [preauth]
2012.01.10 11:45:31,info,10.139.26.2,sshd,Invalid user admin from 176.53.159.197 port 23928
2012.01.10 11:45:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:31,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23928 ssh2
2012.01.10 11:45:31,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23928 ssh2
2012.01.10 11:45:31,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23928 ssh2
2012.01.10 11:45:31,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23928 ssh2
2012.01.10 11:45:31,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 23928 ssh2
2012.01.10 11:45:31,info,10.139.26.2,sshd,Connection reset by invalid user admin 176.53.159.197 port 23928 [preauth]
2012.01.10 11:45:32,info,10.139.26.2,sshd,Invalid user admin from 176.53.159.197 port 22564
2012.01.10 11:45:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:32,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 22564 ssh2
2012.01.10 11:45:32,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 22564 ssh2
2012.01.10 11:45:32,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 22564 ssh2
2012.01.10 11:45:33,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 22564 ssh2
2012.01.10 11:45:33,info,10.139.26.2,sshd,Failed password for invalid user admin from 176.53.159.197 port 22564 ssh2
2012.01.10 11:45:33,info,10.139.26.2,sshd,Connection reset by invalid user admin 176.53.159.197 port 22564 [preauth]
2012.01.10 11:45:33,info,10.139.26.2,sshd,Invalid user frappe from 176.53.159.197 port 22580
2012.01.10 11:45:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:34,info,10.139.26.2,sshd,Failed password for invalid user frappe from 176.53.159.197 port 22580 ssh2
2012.01.10 11:45:34,info,10.139.26.2,sshd,Failed password for invalid user frappe from 176.53.159.197 port 22580 ssh2
2012.01.10 11:45:34,info,10.139.26.2,sshd,Failed password for invalid user frappe from 176.53.159.197 port 22580 ssh2
2012.01.10 11:45:34,info,10.139.26.2,sshd,Failed password for invalid user frappe from 176.53.159.197 port 22580 ssh2
2012.01.10 11:45:34,info,10.139.26.2,sshd,Failed password for invalid user frappe from 176.53.159.197 port 22580 ssh2
2012.01.10 11:45:34,info,10.139.26.2,sshd,Connection reset by invalid user frappe 176.53.159.197 port 22580 [preauth]
2012.01.10 11:45:35,info,10.139.26.2,sshd,Invalid user free from 176.53.159.197 port 22594
2012.01.10 11:45:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:35,info,10.139.26.2,sshd,Failed password for invalid user free from 176.53.159.197 port 22594 ssh2
2012.01.10 11:45:35,info,10.139.26.2,sshd,Failed password for invalid user free from 176.53.159.197 port 22594 ssh2
2012.01.10 11:45:35,info,10.139.26.2,sshd,Failed password for invalid user free from 176.53.159.197 port 22594 ssh2
2012.01.10 11:45:35,info,10.139.26.2,sshd,Failed password for invalid user free from 176.53.159.197 port 22594 ssh2
2012.01.10 11:45:36,info,10.139.26.2,sshd,Failed password for invalid user free from 176.53.159.197 port 22594 ssh2
2012.01.10 11:45:36,info,10.139.26.2,sshd,Connection reset by invalid user free 176.53.159.197 port 22594 [preauth]
2012.01.10 11:45:42,info,10.139.26.2,sshd,Invalid user ubuntu from 37.110.113.113 port 46106
2012.01.10 11:45:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:45:42,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 37.110.113.113 port 46106 ssh2
2012.01.10 11:45:42,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 46106:11: Bye Bye [preauth]
2012.01.10 11:45:42,info,10.139.26.2,sshd,Disconnected from invalid user ubuntu 37.110.113.113 port 46106 [preauth]
2012.01.10 11:45:59,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:46:02,info,10.139.26.2,sshd,Invalid user fa from 176.53.159.198 port 51364
2012.01.10 11:46:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:03,info,10.139.26.2,sshd,Failed password for invalid user fa from 176.53.159.198 port 51364 ssh2
2012.01.10 11:46:03,info,10.139.26.2,sshd,Failed password for invalid user fa from 176.53.159.198 port 51364 ssh2
2012.01.10 11:46:03,info,10.139.26.2,sshd,Failed password for invalid user fa from 176.53.159.198 port 51364 ssh2
2012.01.10 11:46:03,info,10.139.26.2,sshd,Failed password for invalid user fa from 176.53.159.198 port 51364 ssh2
2012.01.10 11:46:03,info,10.139.26.2,sshd,Failed password for invalid user fa from 176.53.159.198 port 51364 ssh2
2012.01.10 11:46:03,info,10.139.26.2,sshd,Connection reset by invalid user fa 176.53.159.198 port 51364 [preauth]
2012.01.10 11:46:04,info,10.139.26.2,sshd,Invalid user fred from 176.53.159.198 port 51376
2012.01.10 11:46:04,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:04,info,10.139.26.2,sshd,Failed password for invalid user fred from 176.53.159.198 port 51376 ssh2
2012.01.10 11:46:04,info,10.139.26.2,sshd,Failed password for invalid user fred from 176.53.159.198 port 51376 ssh2
2012.01.10 11:46:04,info,10.139.26.2,sshd,Failed password for invalid user fred from 176.53.159.198 port 51376 ssh2
2012.01.10 11:46:04,info,10.139.26.2,sshd,Failed password for invalid user fred from 176.53.159.198 port 51376 ssh2
2012.01.10 11:46:05,info,10.139.26.2,sshd,Failed password for invalid user fred from 176.53.159.198 port 51376 ssh2
2012.01.10 11:46:05,info,10.139.26.2,sshd,Connection reset by invalid user fred 176.53.159.198 port 51376 [preauth]
2012.01.10 11:46:05,info,10.139.26.2,sshd,Invalid user oracle from 176.53.159.198 port 34468
2012.01.10 11:46:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:06,info,10.139.26.2,sshd,Failed password for invalid user oracle from 176.53.159.198 port 34468 ssh2
2012.01.10 11:46:06,info,10.139.26.2,sshd,Failed password for invalid user oracle from 176.53.159.198 port 34468 ssh2
2012.01.10 11:46:06,info,10.139.26.2,sshd,Failed password for invalid user oracle from 176.53.159.198 port 34468 ssh2
2012.01.10 11:46:06,info,10.139.26.2,sshd,Failed password for invalid user oracle from 176.53.159.198 port 34468 ssh2
2012.01.10 11:46:06,info,10.139.26.2,sshd,Failed password for invalid user oracle from 176.53.159.198 port 34468 ssh2
2012.01.10 11:46:06,info,10.139.26.2,sshd,Connection reset by invalid user oracle 176.53.159.198 port 34468 [preauth]
2012.01.10 11:46:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34484 ssh2
2012.01.10 11:46:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34484 ssh2
2012.01.10 11:46:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34484 ssh2
2012.01.10 11:46:08,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34484 ssh2
2012.01.10 11:46:08,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34484 ssh2
2012.01.10 11:46:08,info,10.139.26.2,sshd,Invalid user oracle from 80.94.95.115 port 34156
2012.01.10 11:46:08,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 34484 [preauth]
2012.01.10 11:46:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:08,info,10.139.26.2,sshd,Failed password for invalid user oracle from 80.94.95.115 port 34156 ssh2
2012.01.10 11:46:08,info,10.139.26.2,sshd,Connection closed by invalid user oracle 80.94.95.115 port 34156 [preauth]
2012.01.10 11:46:09,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34498 ssh2
2012.01.10 11:46:09,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34498 ssh2
2012.01.10 11:46:09,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34498 ssh2
2012.01.10 11:46:09,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34498 ssh2
2012.01.10 11:46:09,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 34498 ssh2
2012.01.10 11:46:09,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 34498 [preauth]
2012.01.10 11:46:28,info,10.139.26.2,sshd,Invalid user rico from 103.171.69.85 port 35170
2012.01.10 11:46:28,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:28,info,10.139.26.2,sshd,Failed password for invalid user rico from 103.171.69.85 port 35170 ssh2
2012.01.10 11:46:28,info,10.139.26.2,sshd,Received disconnect from 103.171.69.85 port 35170:11: Bye Bye [preauth]
2012.01.10 11:46:28,info,10.139.26.2,sshd,Disconnected from invalid user rico 103.171.69.85 port 35170 [preauth]
2012.01.10 11:46:38,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59754 ssh2
2012.01.10 11:46:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59754 [preauth]
2012.01.10 11:46:39,info,10.139.26.2,sshd,Invalid user az from 37.110.113.113 port 49312
2012.01.10 11:46:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:39,info,10.139.26.2,sshd,Failed password for invalid user az from 37.110.113.113 port 49312 ssh2
2012.01.10 11:46:39,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 49312:11: Bye Bye [preauth]
2012.01.10 11:46:39,info,10.139.26.2,sshd,Disconnected from invalid user az 37.110.113.113 port 49312 [preauth]
2012.01.10 11:46:53,info,10.139.26.2,sshd,Invalid user finance from 177.53.247.76 port 46796
2012.01.10 11:46:53,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:46:53,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:46:53,info,10.139.26.2,sshd,Failed password for invalid user finance from 177.53.247.76 port 46796 ssh2
2012.01.10 11:46:53,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 46796:11: Bye Bye [preauth]
2012.01.10 11:46:53,info,10.139.26.2,sshd,Disconnected from invalid user finance 177.53.247.76 port 46796 [preauth]
2012.01.10 11:47:36,info,10.139.26.2,sshd,Invalid user ftpuser from 37.110.113.113 port 42184
2012.01.10 11:47:36,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:47:37,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 37.110.113.113 port 42184 ssh2
2012.01.10 11:47:37,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 42184:11: Bye Bye [preauth]
2012.01.10 11:47:37,info,10.139.26.2,sshd,Disconnected from invalid user ftpuser 37.110.113.113 port 42184 [preauth]
2012.01.10 11:47:53,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:47:58,info,10.139.26.2,sshd,Invalid user a from 103.171.69.70 port 44190
2012.01.10 11:47:58,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:47:58,info,10.139.26.2,sshd,Failed password for invalid user a from 103.171.69.70 port 44190 ssh2
2012.01.10 11:47:58,info,10.139.26.2,sshd,Received disconnect from 103.171.69.70 port 44190:11: Bye Bye [preauth]
2012.01.10 11:47:58,info,10.139.26.2,sshd,Disconnected from invalid user a 103.171.69.70 port 44190 [preauth]
2012.01.10 11:48:06,info,10.139.26.2,sshd,Invalid user guest from 47.184.58.103 port 57421
2012.01.10 11:48:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:48:06,info,10.139.26.2,sshd,Failed password for invalid user guest from 47.184.58.103 port 57421 ssh2
2012.01.10 11:48:16,info,10.139.26.2,sshd,Connection closed by invalid user guest 47.184.58.103 port 57421 [preauth]
2012.01.10 11:48:19,info,10.139.26.2,sshd,Invalid user speedtest from 177.53.247.76 port 47094
2012.01.10 11:48:19,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:48:19,info,10.139.26.2,sshd,Failed password for invalid user speedtest from 177.53.247.76 port 47094 ssh2
2012.01.10 11:48:20,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 47094:11: Bye Bye [preauth]
2012.01.10 11:48:20,info,10.139.26.2,sshd,Disconnected from invalid user speedtest 177.53.247.76 port 47094 [preauth]
2012.01.10 11:48:34,info,10.139.26.2,sshd,Invalid user bible from 37.110.113.113 port 43348
2012.01.10 11:48:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:48:34,info,10.139.26.2,sshd,Failed password for invalid user bible from 37.110.113.113 port 43348 ssh2
2012.01.10 11:48:34,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 43348:11: Bye Bye [preauth]
2012.01.10 11:48:34,info,10.139.26.2,sshd,Disconnected from invalid user bible 37.110.113.113 port 43348 [preauth]
2012.01.10 11:48:50,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64895 ssh2
2012.01.10 11:48:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64895 [preauth]
2012.01.10 11:48:53,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:49:10,info,10.139.26.2,sshd,Did not receive identification string from 138.197.180.155 port 38370
2012.01.10 11:49:34,info,10.139.26.2,sshd,Invalid user calibre from 103.171.69.67 port 41786
2012.01.10 11:49:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:49:34,info,10.139.26.2,sshd,Failed password for invalid user calibre from 103.171.69.67 port 41786 ssh2
2012.01.10 11:49:34,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 41786:11: Bye Bye [preauth]
2012.01.10 11:49:34,info,10.139.26.2,sshd,Disconnected from invalid user calibre 103.171.69.67 port 41786 [preauth]
2012.01.10 11:49:38,info,10.139.26.2,sshd,Invalid user jackson from 37.110.113.113 port 50312
2012.01.10 11:49:38,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:49:38,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:49:38,info,10.139.26.2,sshd,Failed password for invalid user jackson from 37.110.113.113 port 50312 ssh2
2012.01.10 11:49:38,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 50312:11: Bye Bye [preauth]
2012.01.10 11:49:38,info,10.139.26.2,sshd,Disconnected from invalid user jackson 37.110.113.113 port 50312 [preauth]
2012.01.10 11:49:53,info,10.139.26.2,sshd,Failed password for root from 177.53.247.76 port 59044 ssh2
2012.01.10 11:49:54,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 59044:11: Bye Bye [preauth]
2012.01.10 11:49:54,info,10.139.26.2,sshd,Disconnected from authenticating user root 177.53.247.76 port 59044 [preauth]
2012.01.10 11:50:38,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:50:41,info,10.139.26.2,sshd,Failed password for root from 37.110.113.113 port 55504 ssh2
2012.01.10 11:50:42,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 55504:11: Bye Bye [preauth]
2012.01.10 11:50:42,info,10.139.26.2,sshd,Disconnected from authenticating user root 37.110.113.113 port 55504 [preauth]
2012.01.10 11:51:06,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55268 ssh2
2012.01.10 11:51:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55268 [preauth]
2012.01.10 11:51:11,info,10.139.26.2,sshd,Invalid user hussain from 103.171.69.67 port 60050
2012.01.10 11:51:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:51:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:51:11,info,10.139.26.2,sshd,Failed password for invalid user hussain from 103.171.69.67 port 60050 ssh2
2012.01.10 11:51:11,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 60050:11: Bye Bye [preauth]
2012.01.10 11:51:11,info,10.139.26.2,sshd,Disconnected from invalid user hussain 103.171.69.67 port 60050 [preauth]
2012.01.10 11:51:44,info,10.139.26.2,sshd,Invalid user desenvolvimento from 37.110.113.113 port 54284
2012.01.10 11:51:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:51:44,info,10.139.26.2,sshd,Failed password for invalid user desenvolvimento from 37.110.113.113 port 54284 ssh2
2012.01.10 11:51:44,info,10.139.26.2,sshd,Received disconnect from 37.110.113.113 port 54284:11: Bye Bye [preauth]
2012.01.10 11:51:44,info,10.139.26.2,sshd,Disconnected from invalid user desenvolvimento 37.110.113.113 port 54284 [preauth]
2012.01.10 11:51:54,info,10.139.26.2,sshd,Invalid user a from 177.53.247.76 port 55166
2012.01.10 11:51:54,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:51:54,info,10.139.26.2,sshd,Failed password for invalid user a from 177.53.247.76 port 55166 ssh2
2012.01.10 11:51:55,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 55166:11: Bye Bye [preauth]
2012.01.10 11:51:55,info,10.139.26.2,sshd,Disconnected from invalid user a 177.53.247.76 port 55166 [preauth]
2012.01.10 11:52:04,info,10.139.26.2,sshd,Bad packet length 201326592. [preauth]
2012.01.10 11:52:04,info,10.139.26.2,sshd,ssh_dispatch_run_fatal: Connection from 58.221.60.25 port 47012: message authentication code incorrect [preauth]
2012.01.10 11:52:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:52:45,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:52:45,info,10.139.26.2,sshd,Invalid user neo from 103.171.69.67 port 57952
2012.01.10 11:52:45,info,10.139.26.2,sshd,Failed password for invalid user neo from 103.171.69.67 port 57952 ssh2
2012.01.10 11:52:45,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 57952:11: Bye Bye [preauth]
2012.01.10 11:52:45,info,10.139.26.2,sshd,Disconnected from invalid user neo 103.171.69.67 port 57952 [preauth]
2012.01.10 11:53:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:53:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 65155 ssh2
2012.01.10 11:53:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 65155 [preauth]
2012.01.10 11:53:26,info,10.139.26.2,sshd,Invalid user neo from 177.53.247.76 port 38512
2012.01.10 11:53:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:53:26,info,10.139.26.2,sshd,Failed password for invalid user neo from 177.53.247.76 port 38512 ssh2
2012.01.10 11:53:27,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 38512:11: Bye Bye [preauth]
2012.01.10 11:53:27,info,10.139.26.2,sshd,Disconnected from invalid user neo 177.53.247.76 port 38512 [preauth]
2012.01.10 11:54:06,info,10.139.26.2,sshd,Invalid user admin from 216.36.112.159 port 48850
2012.01.10 11:54:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:54:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:54:06,info,10.139.26.2,sshd,Failed password for invalid user admin from 216.36.112.159 port 48850 ssh2
2012.01.10 11:54:07,info,10.139.26.2,sshd,Connection closed by invalid user admin 216.36.112.159 port 48850 [preauth]
2012.01.10 11:54:19,info,10.139.26.2,sshd,Failed password for root from 103.171.69.67 port 45588 ssh2
2012.01.10 11:54:20,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 45588:11: Bye Bye [preauth]
2012.01.10 11:54:20,info,10.139.26.2,sshd,Disconnected from authenticating user root 103.171.69.67 port 45588 [preauth]
2012.01.10 11:54:58,info,10.139.26.2,sshd,Failed password for root from 177.53.247.76 port 54068 ssh2
2012.01.10 11:54:59,info,10.139.26.2,sshd,Disconnected from authenticating user root 177.53.247.76 port 54068 [preauth]
2012.01.10 11:54:59,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 54068:11: Bye Bye [preauth]
2012.01.10 11:55:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:55:40,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 56387 ssh2
2012.01.10 11:55:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 56387 [preauth]
2012.01.10 11:55:56,info,10.139.26.2,sshd,Invalid user duc from 103.171.69.65 port 55790
2012.01.10 11:55:56,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:55:56,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:55:56,info,10.139.26.2,sshd,Failed password for invalid user duc from 103.171.69.65 port 55790 ssh2
2012.01.10 11:55:57,info,10.139.26.2,sshd,Received disconnect from 103.171.69.65 port 55790:11: Bye Bye [preauth]
2012.01.10 11:55:57,info,10.139.26.2,sshd,Disconnected from invalid user duc 103.171.69.65 port 55790 [preauth]
2012.01.10 11:56:31,info,10.139.26.2,sshd,Failed password for root from 177.53.247.76 port 38196 ssh2
2012.01.10 11:56:32,info,10.139.26.2,sshd,Disconnected from authenticating user root 177.53.247.76 port 38196 [preauth]
2012.01.10 11:56:32,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 38196:11: Bye Bye [preauth]
2012.01.10 11:56:56,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:57:02,info,10.139.26.2,sshd,Invalid user elan from 2.57.121.112 port 26374
2012.01.10 11:57:03,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:57:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:57:03,info,10.139.26.2,sshd,Failed password for invalid user elan from 2.57.121.112 port 26374 ssh2
2012.01.10 11:57:03,info,10.139.26.2,sshd,Failed password for invalid user elan from 2.57.121.112 port 26374 ssh2
2012.01.10 11:57:03,info,10.139.26.2,sshd,Failed password for invalid user elan from 2.57.121.112 port 26374 ssh2
2012.01.10 11:57:03,info,10.139.26.2,sshd,Failed password for invalid user elan from 2.57.121.112 port 26374 ssh2
2012.01.10 11:57:03,info,10.139.26.2,sshd,Failed password for invalid user elan from 2.57.121.112 port 26374 ssh2
2012.01.10 11:57:03,info,10.139.26.2,sshd,Connection closed by invalid user elan 2.57.121.112 port 26374 [preauth]
2012.01.10 11:57:31,info,10.139.26.2,sshd,Failed password for root from 103.171.69.67 port 51028 ssh2
2012.01.10 11:57:31,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 51028:11: Bye Bye [preauth]
2012.01.10 11:57:31,info,10.139.26.2,sshd,Disconnected from authenticating user root 103.171.69.67 port 51028 [preauth]
2012.01.10 11:57:55,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57771 ssh2
2012.01.10 11:57:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57771 [preauth]
2012.01.10 11:57:59,info,10.139.26.2,sshd,Failed password for root from 177.53.247.76 port 35340 ssh2
2012.01.10 11:57:59,info,10.139.26.2,sshd,Received disconnect from 177.53.247.76 port 35340:11: Bye Bye [preauth]
2012.01.10 11:57:59,info,10.139.26.2,sshd,Disconnected from authenticating user root 177.53.247.76 port 35340 [preauth]
2012.01.10 11:58:03,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:58:28,info,10.139.26.2,sshd,Invalid user ftpuser from 80.94.95.115 port 32112
2012.01.10 11:58:30,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 11:58:30,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:58:30,info,10.139.26.2,sshd,Failed password for invalid user ftpuser from 80.94.95.115 port 32112 ssh2
2012.01.10 11:58:30,info,10.139.26.2,sshd,Connection closed by invalid user ftpuser 80.94.95.115 port 32112 [preauth]
2012.01.10 11:59:01,info,10.139.26.2,sshd,Invalid user support from 103.171.69.67 port 55442
2012.01.10 11:59:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 11:59:01,info,10.139.26.2,sshd,Failed password for invalid user support from 103.171.69.67 port 55442 ssh2
2012.01.10 11:59:02,info,10.139.26.2,sshd,Disconnected from invalid user support 103.171.69.67 port 55442 [preauth]
2012.01.10 11:59:02,info,10.139.26.2,sshd,Received disconnect from 103.171.69.67 port 55442:11: Bye Bye [preauth]
2012.01.10 11:59:30,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:00:11,info,10.139.26.2,sshd,Invalid user admin from 47.184.58.103 port 56325
2012.01.10 12:00:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:00:11,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:00:11,info,10.139.26.2,sshd,Failed password for invalid user admin from 47.184.58.103 port 56325 ssh2
2012.01.10 12:00:11,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 63700 ssh2
2012.01.10 12:00:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 63700 [preauth]
2012.01.10 12:00:27,info,10.139.26.2,sshd,Connection closed by invalid user admin 47.184.58.103 port 56325 [preauth]
2012.01.10 12:01:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:02:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:02:30,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 51278 ssh2
2012.01.10 12:02:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 51278 [preauth]
2012.01.10 12:02:34,info,10.139.26.2,sshd,Did not receive identification string from 176.52.133.171 port 65097
2012.01.10 12:03:11,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:04:07,info,10.139.26.2,sshd,Invalid user admin from 2.57.121.25 port 38812
2012.01.10 12:04:07,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:04:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:04:08,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 38812 ssh2
2012.01.10 12:04:08,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 38812 ssh2
2012.01.10 12:04:08,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 38812 ssh2
2012.01.10 12:04:08,info,10.139.26.2,sshd,Connection closed by invalid user admin 2.57.121.25 port 38812 [preauth]
2012.01.10 12:04:52,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52964 ssh2
2012.01.10 12:04:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52964 [preauth]
2012.01.10 12:05:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:05:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:05:21,info,10.139.26.2,sshd,Did not receive identification string from 91.237.243.84 port 51234
2012.01.10 12:06:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:07:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:07:09,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53369 ssh2
2012.01.10 12:07:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53369 [preauth]
2012.01.10 12:08:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:09:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:09:43,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61691 ssh2
2012.01.10 12:09:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61691 [preauth]
2012.01.10 12:10:10,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:10:10,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:11:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:11:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.678871] ifconfig invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.689943] CPU: 0 PID: 9025 Comm: ifconfig Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.697578] Hardware name: Atmel SAMA5
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.701242] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.707036] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.712739] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.718527] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.724272] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.729994] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.735776] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.741500] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.747279] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.753002] Function entered at [<c010e31c>] from [<c010e714>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.758783] Function entered at [<c010e714>] from [<c0102008>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.764544] Exception stack(0xc3199fb0 to 0xc3199ff8)
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.769492] 9fa0:                                     bed1abd4 bed1abd0 bed1abcf b6f26bcd
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.777601] 9fc0: b6efcea6 b6f1bf00 00000000 bed1ab88 bed1aa68 b6efbef0 bed1aaf0 00000006
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.785665] 9fe0: 01010101 bed1aa60 b6f26d49 b6f1d804 60030010 ffffffff
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.792151] Mem-Info:
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438] active_anon:9896 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438]  active_file:17 inactive_file:17 isolated_file:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438]  slab_reclaimable:375 slab_unreclaimable:1408
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438]  mapped:16 shmem:211 pagetables:173 bounce:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.794438]  free:16544 free_pcp:2 free_cma:16312
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.826229] Node 0 active_anon:39584kB inactive_anon:308kB active_file:68kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.848070] Normal free:66176kB min:928kB low:1160kB high:1392kB active_anon:39584kB inactive_anon:308kB active_file:68kB inactive_file:68kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:536kB pagetables:692kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:65248kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.875101] lowmem_reserve[]: 0 0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.878325] Normal: 0*4kB 10*8kB (U) 3*16kB (U) 2*32kB (UC) 1*64kB (C) 1*128kB (C) 1*256kB (U) 2*512kB (UC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 66176kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.896615] 245 total pagecache pages
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.900185] 32768 pages RAM
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.902931] 0 pages HighMem/MovableOnly
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.906739] 2557 pages reserved
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10948.909799] 16384 pages cma reserved
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.913349] Tasks state (memory values in pages):
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.917956] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.926526] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.934595] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.943175] [    179]    33   179      968      193     8192        0             0 lighttpd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.951468] [    183]     0   183      957       67     8192        0         -1000 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.959493] [    191]     0   191      369       22     6144        0             0 crond
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.967556] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.975797] [    282]     0   282    21843     5367    47104        0             0 center
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.983952] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10948.991991] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.000447] [    309]     0   309     6110      472    18432        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.008850] [    349]     0   349     5444       52    12288        0             0 gsm_handler
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.017435] [    350]     0   350     4156       89    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.026193] [    351]     0   351     4156       91    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.034958] [    352]     0   352     6790      117    18432        0             0 iec104_slave
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.043623] [    353]     0   353     5821     2781    28672        0             0 python3
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.051831] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.059848] [   9025]     0  9025      538       23     8192        0             0 ifconfig
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.068175] [   9026]     0  9026      538       20     8192        0             0 route
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.076246] [   9027]     0  9027      397       24     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.084658] [   9028]     0  9028      595       24     6144        0             0 uptime
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.092782] [   9029]     0  9029      538       21     8192        0             0 free
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.100803] [   9030]     0  9030      595       25     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.109729] [   9031]     0  9031      628       39     8192        0             0 sh
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.117539] [   9032]     0  9032      397       24     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.125956] [   9034]     0  9034      894       28     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.133938] [   9035]     0  9035      624       21     6144        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.141891] [   9036]     0  9036    21843     5367    47104        0             0 center
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10949.150075] Out of memory: Kill process 282 (center) score 178 or sacrifice child
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10949.157494] Killed process 9036 (center) total-vm:87372kB, anon-rss:21456kB, file-rss:12kB, shmem-rss:0kB
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10949.189442] oom_reaper: reaped process 9036 (center), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.144351] crond invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.155146] CPU: 0 PID: 9038 Comm: crond Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.162476] Hardware name: Atmel SAMA5
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.166227] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.171934] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.177722] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.183466] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.189188] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.194970] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.200847] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.206967] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.212756] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.218559] Function entered at [<c010e31c>] from [<c010e714>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.224316] Function entered at [<c010e714>] from [<c0102008>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.230022] Exception stack(0xc0959fb0 to 0xc0959ff8)
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.235058] 9fa0:                                     0002e1e8 fbad0000 b6f2fa48 00000000
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.243123] 9fc0: 0002e1e8 b6f2fa48 b6e2fc78 b6e2fb10 00000001 b6f5ab90 0002e3a8 00013a30
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.251156] 9fe0: b6f31010 beaa0a48 b6e967c5 b6e8d128 60060030 ffffffff
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.257713] Mem-Info:
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929] active_anon:9851 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929]  active_file:3 inactive_file:35 isolated_file:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929]  slab_reclaimable:375 slab_unreclaimable:1413
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929]  mapped:21 shmem:211 pagetables:151 bounce:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.259929]  free:16601 free_pcp:0 free_cma:16312
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.291642] Node 0 active_anon:39404kB inactive_anon:308kB active_file:12kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.313543] Normal free:66404kB min:928kB low:1160kB high:1392kB active_anon:39404kB inactive_anon:308kB active_file:12kB inactive_file:140kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:544kB pagetables:604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:65248kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.340659] lowmem_reserve[]: 0 0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.343924] Normal: 49*4kB (H) 14*8kB (H) 3*16kB (H) 2*32kB (HC) 1*64kB (C) 1*128kB (C) 1*256kB (H) 2*512kB (HC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 66404kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.362649] 249 total pagecache pages
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.366256] 32768 pages RAM
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.368970] 0 pages HighMem/MovableOnly
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.372747] 2557 pages reserved
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.375865] 16384 pages cma reserved
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.379359] Tasks state (memory values in pages):
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.384021] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.392535] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.400613] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.409193] [    179]    33   179      968      196     8192        0             0 lighttpd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.417520] [    183]     0   183      957       68     8192        0         -1000 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.425503] [    191]     0   191      369       23     6144        0             0 crond
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.433573] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.441787] [    282]     0   282    21843     5367    47104        0             0 center
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.449972] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.458043] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.466455] [    309]     0   309     6110      474    18432        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.474868] [    349]     0   349     5444       56    12288        0             0 gsm_handler
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.483456] [    350]     0   350     4156       90    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.492182] [    351]     0   351     4156       91    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.500968] [    352]     0   352     6790      120    18432        0             0 iec104_slave
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.509641] [    353]     0   353     5821     2781    28672        0             0 python3
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.517883] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.525865] [   9025]     0  9025      574       22     8192        0             0 ifconfig
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.534194] [   9026]     0  9026      574       22     8192        0             0 route
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.542236] [   9027]     0  9027      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.550678] [   9028]     0  9028      595       26     6144        0             0 uptime
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.558835] [   9029]     0  9029      574       22     8192        0             0 free
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.566817] [   9030]     0  9030      595       26     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.575757] [   9032]     0  9032      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.584163] [   9034]     0  9034      894       28     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.592115] [   9035]     0  9035      892       26     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.600133] [   9038]     0  9038      369       23     6144        0             0 crond
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10953.608194] Out of memory: Kill process 282 (center) score 178 or sacrifice child
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10953.615626] Killed process 353 (python3) total-vm:23284kB, anon-rss:11124kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.718210] oom_reaper: reaped process 353 (python3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.728314] center invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.739208] CPU: 0 PID: 282 Comm: center Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.746577] Hardware name: Atmel SAMA5
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.750252] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.756022] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.761742] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.767546] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.773281] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.779004] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.784786] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.790510] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.796312] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.802012] Function entered at [<c010e31c>] from [<c010e714>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.807817] Function entered at [<c010e714>] from [<c0102008>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.813592] Exception stack(0xc3a51fb0 to 0xc3a51ff8)
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.818529] 1fa0:                                     00000001 000c2e88 00000000 00000000
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.826662] 1fc0: 00000001 000c2e88 beeb5680 00000000 001514b0 beeb5674 beeb5678 beeb5668
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.834718] 1fe0: b6ebd1f4 beeb5570 b6d856fd b6d6ea2a 600d0030 ffffffff
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.841205] Mem-Info:
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498] active_anon:7070 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498]  active_file:2 inactive_file:2 isolated_file:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498]  slab_reclaimable:375 slab_unreclaimable:1407
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498]  mapped:3 shmem:211 pagetables:151 bounce:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.843498]  free:19406 free_pcp:16 free_cma:16312
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.875287] Node 0 active_anon:28280kB inactive_anon:308kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.897366] Normal free:77624kB min:928kB low:1160kB high:1392kB active_anon:28280kB inactive_anon:308kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:544kB pagetables:604kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:65248kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.924512] lowmem_reserve[]: 0 0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.927767] Normal: 858*4kB (H) 290*8kB (H) 156*16kB (H) 60*32kB (HC) 16*64kB (HC) 5*128kB (HC) 1*256kB (H) 2*512kB (HC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 77624kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.947188] 215 total pagecache pages
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.950749] 32768 pages RAM
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.953527] 0 pages HighMem/MovableOnly
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.957274] 2557 pages reserved
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10953.960364] 16384 pages cma reserved
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.963911] Tasks state (memory values in pages):
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.968520] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.977093] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.985157] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10953.993734] [    179]    33   179      968      193     8192        0             0 lighttpd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.002033] [    183]     0   183      957       67     8192        0         -1000 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.010066] [    191]     0   191      369       22     6144        0             0 crond
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.018128] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.026368] [    282]     0   282    21843     5364    47104        0             0 center
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.034523] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.042564] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.051009] [    309]     0   309     6110      472    18432        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.059420] [    349]     0   349     5444       52    12288        0             0 gsm_handler
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.068021] [    350]     0   350     4156       89    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.076768] [    351]     0   351     4156       91    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.085527] [    352]     0   352     6790      117    18432        0             0 iec104_slave
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.094199] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.102145] [   9025]     0  9025      574       19     8192        0             0 ifconfig
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.110509] [   9026]     0  9026      574       18     8192        0             0 route
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.118582] [   9027]     0  9027      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.126991] [   9028]     0  9028      595       24     6144        0             0 uptime
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.135145] [   9029]     0  9029      574       19     8192        0             0 free
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.143127] [   9030]     0  9030      595       23     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.152027] [   9032]     0  9032      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.160469] [   9034]     0  9034      894       26     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.168455] [   9035]     0  9035      892       24     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.176446] [   9038]     0  9038      369       22     6144        0             0 crond
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10954.184503] Out of memory: Kill process 282 (center) score 177 or sacrifice child
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10954.191915] Killed process 352 (iec104_slave) total-vm:27160kB, anon-rss:468kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.252094] oom_reaper: reaped process 352 (iec104_slave), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.262207] lighttpd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.273274] CPU: 0 PID: 179 Comm: lighttpd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.280780] Hardware name: Atmel SAMA5
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.284533] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.290238] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.296025] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.301741] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.307523] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.313272] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.318998] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.324811] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.330511] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.336298] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.342014] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.347796] Exception stack(0xc0de7fb0 to 0xc0de7ff8)
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.352753] 7fa0:                                     be9daa78 00000020 b6e01cf0 b6e2ed44
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.360868] 7fc0: 00000002 00000000 00047190 be9daa79 b6e2ed44 be9daa70 00000000 be9daa79
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.368995] 7fe0: ffffffff be9da5f8 b6d706d9 b6d706f8 800f0030 ffffffff
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.375505] Mem-Info:
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726] active_anon:6953 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726]  active_file:0 inactive_file:3 isolated_file:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726]  slab_reclaimable:375 slab_unreclaimable:1407
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726]  mapped:2 shmem:211 pagetables:138 bounce:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.377726]  free:19547 free_pcp:16 free_cma:16312
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.409349] Node 0 active_anon:27812kB inactive_anon:308kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.431075] Normal free:78188kB min:928kB low:1160kB high:1392kB active_anon:27812kB inactive_anon:308kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:536kB pagetables:552kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:65248kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.458208] lowmem_reserve[]: 0 0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.461423] Normal: 911*4kB (H) 296*8kB (H) 159*16kB (H) 68*32kB (HC) 16*64kB (HC) 5*128kB (HC) 1*256kB (H) 2*512kB (HC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 78188kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.480829] 214 total pagecache pages
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.484425] 32768 pages RAM
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.487306] 0 pages HighMem/MovableOnly
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.491027] 2557 pages reserved
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.494499] 16384 pages cma reserved
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.498053] Tasks state (memory values in pages):
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.502648] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.511262] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.519341] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.527920] [    179]    33   179      968      193     8192        0             0 lighttpd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.536262] [    183]     0   183      957       67     8192        0         -1000 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.544229] [    191]     0   191      369       22     6144        0             0 crond
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.552268] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.560541] [    282]     0   282    21843     5364    47104        0             0 center
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.568702] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.576770] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.585180] [    309]     0   309     6110      472    18432        0             0 syslog-ng
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.593594] [    349]     0   349     5444       52    12288        0             0 gsm_handler
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.602151] [    350]     0   350     4156       89    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.610938] [    351]     0   351     4156       91    14336        0             0 modbus_master
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.619694] [    376]     0   352     6790        0    18432        0             0 iec104_slave
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.628371] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.636349] [   9025]     0  9025      574       18     8192        0             0 ifconfig
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.644684] [   9026]     0  9026      574       18     8192        0             0 route
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.652718] [   9027]     0  9027      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.661165] [   9028]     0  9028      595       23     6144        0             0 uptime
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.669317] [   9029]     0  9029      574       18     8192        0             0 free
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.677301] [   9030]     0  9030      595       23     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.686228] [   9032]     0  9032      397       20     6144        0             0 logrotate
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.694647] [   9034]     0  9034      894       25     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.702598] [   9035]     0  9035      892       23     8192        0             0 sshd
2012.01.10 12:11:24,info,10.139.26.2,kernel,[10954.710616] [   9038]     0  9038      369       22     6144        0             0 crond
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10954.718677] Out of memory: Kill process 282 (center) score 177 or sacrifice child
2012.01.10 12:11:24,err,10.139.26.2,kernel,[10954.726132] Killed process 351 (modbus_master) total-vm:16624kB, anon-rss:364kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.840848] sshd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.851593] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.858873] Hardware name: Atmel SAMA5
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.862545] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.868327] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.874073] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.879784] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.885592] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.891290] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.897086] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.902796] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.908578] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.914325] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.920050] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.925830] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.930788] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.938892] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.946971] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.953509] Mem-Info:
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.955712] active_anon:6862 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.955712]  active_file:0 inactive_file:1 isolated_file:2
2012.01.10 12:11:24,warning,10.139.26.2,kernel,[10954.955712]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10954.955712]  slab_reclaimable:374 slab_unreclaimable:1406
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10954.955712]  mapped:2 shmem:211 pagetables:132 bounce:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10954.955712]  free:19664 free_pcp:0 free_cma:16312
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10954.987265] Node 0 active_anon:27448kB inactive_anon:308kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:8kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.008906] Normal free:78656kB min:928kB low:1160kB high:1392kB active_anon:27448kB inactive_anon:308kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:528kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:65248kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.035762] lowmem_reserve[]: 0 0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.038987] Normal: 950*4kB (H) 321*8kB (H) 166*16kB (H) 68*32kB (HC) 16*64kB (HC) 5*128kB (HC) 1*256kB (H) 2*512kB (HC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 78656kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.058389] 214 total pagecache pages
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.061962] 32768 pages RAM
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.064736] 0 pages HighMem/MovableOnly
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.068486] 2557 pages reserved
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.071576] 16384 pages cma reserved
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.075123] Tasks state (memory values in pages):
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.079733] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.088313] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.096377] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.104957] [    179]    33   179      968      193     8192        0             0 lighttpd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.113291] [    183]     0   183      957       67     8192        0         -1000 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10955.121237] [    191]     0   191      369       22     6144        0             0 crond
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129430] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129449] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129454] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129473] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129483] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129495] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129503] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129512] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129524] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129537] Function entered at [<c0480424>] from [<c04807a0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129545] Function entered at [<c04807a0>] from [<c048dcc0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129555] Function entered at [<c048dcc0>] from [<c04ae620>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129567] Function entered at [<c04ae620>] from [<c04b05f4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129576] Function entered at [<c04b05f4>] from [<c04b3340>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129584] Function entered at [<c04b3340>] from [<c048d930>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129594] Function entered at [<c048d930>] from [<c0148fe4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129606] Function entered at [<c0148fe4>] from [<c01490e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129614] Function entered at [<c01490e8>] from [<c0149160>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129622] Function entered at [<c0149160>] from [<c014c1e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129633] Function entered at [<c014c1e8>] from [<c01484e0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129642] Function entered at [<c01484e0>] from [<c0148a20>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129650] Function entered at [<c0148a20>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129659] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129682] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 0000005d 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129702] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129711] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129722] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129731] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129740] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129748] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129757] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129767] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129776] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129784] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129792] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129801] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129811] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129820] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129829] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129837] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129845] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129859] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129878] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129894] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129899] Mem-Info:
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929] active_anon:6862 inactive_anon:77 isolated_anon:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929]  active_file:0 inactive_file:1 isolated_file:2
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929]  slab_reclaimable:374 slab_unreclaimable:1406
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929]  mapped:2 shmem:211 pagetables:132 bounce:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129929]  free:19664 free_pcp:0 free_cma:16312
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129951] Node 0 active_anon:27448kB inactive_anon:308kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:8kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129981] Normal free:78656kB min:928kB low:1160kB high:1392kB active_anon:27448kB inactive_anon:308kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:528kB pagetables:528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:65248kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129985] lowmem_reserve[]: 0 0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.129997] Normal: 950*4kB (H) 321*8kB (H) 166*16kB (H) 68*32kB (HC) 16*64kB (HC) 5*128kB (HC) 1*256kB (H) 2*512kB (HC) 1*1024kB (C) 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 78656kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130102] 214 total pagecache pages
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130107] 32768 pages RAM
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130110] 0 pages HighMem/MovableOnly
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130114] 2557 pages reserved
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130118] 16384 pages cma reserved
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130276] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130293] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130298] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130315] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130325] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130335] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130343] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130352] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130362] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130370] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130379] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130387] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130397] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130405] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130414] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130422] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130430] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130451] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 0000005d 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130471] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130480] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130490] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130499] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130507] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130516] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130524] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130533] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130542] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130550] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130559] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130568] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130576] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130584] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130593] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130601] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130608] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130622] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130641] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.130657] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139643] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139664] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139670] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139689] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139701] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139712] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139720] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139728] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139737] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139746] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139754] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139762] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139772] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139781] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139789] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139799] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139807] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139829] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000062 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139848] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139857] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139867] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139876] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139885] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139893] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139902] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139911] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139920] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139929] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139938] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139946] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139955] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139964] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139972] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139981] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.139988] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.140002] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.140021] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.140037] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147517] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147535] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147540] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147557] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147567] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147577] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147585] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147594] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147603] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147612] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147621] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147629] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147638] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147646] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147655] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147664] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147672] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147693] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000054 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147713] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147722] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147731] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147741] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147750] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147758] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147767] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147776] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147785] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147793] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147802] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147811] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147820] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147828] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147837] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147846] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147853] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147868] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147887] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.147902] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151609] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151627] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151632] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151645] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151655] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151665] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151673] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151681] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151689] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151698] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151706] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151714] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151723] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151731] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151740] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151749] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151756] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151776] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 0000002a 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151796] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151805] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151815] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151825] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151833] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151842] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151851] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151860] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151870] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151878] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151887] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151895] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151904] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151913] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151922] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151931] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151938] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151952] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151971] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.151987] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157780] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157794] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157799] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157813] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157822] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157831] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157840] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157848] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157857] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157866] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157874] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157883] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157891] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157901] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157910] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157918] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157925] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157945] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000042 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157965] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157974] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157983] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.157992] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158001] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158010] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158019] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158028] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158036] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158045] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158053] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158062] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158071] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158079] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158089] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158098] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158105] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158119] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158139] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.158155] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163938] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163952] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163958] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163971] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163981] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163991] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.163999] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164008] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164016] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164025] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164034] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164043] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164051] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164059] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164068] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164077] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164084] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164104] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000042 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164123] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164132] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164142] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164151] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164160] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164168] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164177] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164186] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164195] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164204] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164213] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164221] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164230] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164238] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164247] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164256] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164264] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164278] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164297] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.164313] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175841] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175857] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175862] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175876] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175885] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175895] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175903] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175911] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175920] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175928] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175937] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175945] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175953] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175962] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175971] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175979] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.175986] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176006] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000042 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176025] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176034] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176043] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176053] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176061] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176070] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176079] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176087] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176096] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176104] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176112] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176121] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176130] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176139] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176147] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176156] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176163] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176177] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176197] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.176213] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187741] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187757] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187762] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187775] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187784] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187793] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187802] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187810] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187819] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187827] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187836] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187844] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187853] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187861] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187870] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187879] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187886] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187907] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000042 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187926] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187935] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187945] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187953] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187962] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187971] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187980] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187989] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.187998] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188006] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188015] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188023] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188032] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188040] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188049] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188058] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188065] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188078] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188097] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.188113] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193884] sshd: page allocation failure: order:0, mode:0x480020(GFP_ATOMIC), nodemask=(null)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193899] CPU: 0 PID: 9024 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193905] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193918] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193928] Function entered at [<c010ae34>] from [<c0188ac0>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193937] Function entered at [<c0188ac0>] from [<c0189494>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193945] Function entered at [<c0189494>] from [<c01899b4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193953] Function entered at [<c01899b4>] from [<c055b750>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193963] Function entered at [<c055b750>] from [<c0480424>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193971] Function entered at [<c0480424>] from [<c048058c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193980] Function entered at [<c048058c>] from [<c04809a8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193988] Function entered at [<c04809a8>] from [<c011a89c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.193996] Function entered at [<c011a89c>] from [<c01021e8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194005] Function entered at [<c01021e8>] from [<c011ab90>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194014] Function entered at [<c011ab90>] from [<c0148a24>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194022] Function entered at [<c0148a24>] from [<c0101a0c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194030] Exception stack(0xc0983bc0 to 0xc0983c08)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194050] 3bc0: c0a62bcc 60070193 00000000 60070113 00000000 00000042 00000000 c03d718c
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194070] 3be0: c0a44290 c0a44fa0 00000007 c0a44790 00000000 c0983c10 c014637c c0146384
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194079] 3c00: 60070113 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194088] Function entered at [<c0101a0c>] from [<c0146384>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194097] Function entered at [<c0146384>] from [<c0147948>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194106] Function entered at [<c0147948>] from [<c0147bb8>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194115] Function entered at [<c0147bb8>] from [<c0147e88>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194124] Function entered at [<c0147e88>] from [<c0184a2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194133] Function entered at [<c0184a2c>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194141] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194150] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194158] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194167] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194176] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194185] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194193] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194202] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194210] Exception stack(0xc0983fb0 to 0xc0983ff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194223] 3fa0:                                     b6f63240 b6fa0290 b6fa17a0 b6fa17a0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194243] 3fc0: b6fa02b0 b6f63240 00000001 b6fa1630 00000000 0000000a b6fa2cf8 00000004
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10955.194258] 3fe0: b6e5251c beb40a30 b6f86e05 b6f8ccd0 a00f0030 ffffffff
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.561143] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.569428] [    282]     0   282    21843     5364    47104        0             0 center
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.577598] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.585682] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.594123] [    309]     0   309     6110      472    18432        0             0 syslog-ng
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.602496] [    349]     0   349     5444       52    12288        0             0 gsm_handler
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.611144] [    350]     0   350     4156       89    14336        0             0 modbus_master
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.619919] [    376]     0   352     6790        0    18432        0             0 iec104_slave
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.628627] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.636633] [   9025]     0  9025      574       18     8192        0             0 ifconfig
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.644973] [   9026]     0  9026      574       18     8192        0             0 route
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.653005] [   9027]     0  9027      397       20     6144        0             0 logrotate
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.661478] [   9028]     0  9028      595       23     6144        0             0 uptime
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.669648] [   9029]     0  9029      574       18     8192        0             0 free
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.677651] [   9030]     0  9030      595       23     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.686600] [   9032]     0  9032      397       20     6144        0             0 logrotate
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.695040] [   9034]     0  9034      894       25     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.702979] [   9035]     0  9035      892       23     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.711040] [   9038]     0  9038      369       22     6144        0             0 crond
2012.01.10 12:11:25,err,10.139.26.2,kernel,[10957.719122] Out of memory: Kill process 282 (center) score 177 or sacrifice child
2012.01.10 12:11:25,err,10.139.26.2,kernel,[10957.726573] Killed process 350 (modbus_master) total-vm:16624kB, anon-rss:356kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10957.805813] oom_reaper: reaped process 350 (modbus_master), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.815791] sshd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.826547] CPU: 0 PID: 9034 Comm: sshd Not tainted 4.19.78-linux4sam-6.2-icp #1
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.833892] Hardware name: Atmel SAMA5
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.837556] Function entered at [<c010db0c>] from [<c010ae34>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.843367] Function entered at [<c010ae34>] from [<c0184864>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.849071] Function entered at [<c0184864>] from [<c0183f2c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.854887] Function entered at [<c0183f2c>] from [<c0184554>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.860589] Function entered at [<c0184554>] from [<c0189454>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.866412] Function entered at [<c0189454>] from [<c018181c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.872111] Function entered at [<c018181c>] from [<c01a7544>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.877977] Function entered at [<c01a7544>] from [<c01aa9e4>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.883759] Function entered at [<c01aa9e4>] from [<c010e31c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.889462] Function entered at [<c010e31c>] from [<c010e62c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.895290] Function entered at [<c010e62c>] from [<c0101d5c>]
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.900991] Exception stack(0xc098ffb0 to 0xc098fff8)
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.906052] ffa0:                                     00000001 b6cc6690 b6f76414 b6cb7ce4
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.914159] ffc0: b23c806a 00000000 b6f9cc10 beb3caf0 b6cc14d9 beb3cbd4 beb3cb10 beb3cb18
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.922188] ffe0: ffffffff beb3cad0 b6f7ca3f b6f7d2dc a0010030 ffffffff
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.928791] Mem-Info:
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996] active_anon:6769 inactive_anon:77 isolated_anon:4
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996]  active_file:1 inactive_file:2 isolated_file:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996]  unevictable:0 dirty:0 writeback:0 unstable:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996]  slab_reclaimable:367 slab_unreclaimable:1391
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996]  mapped:2 shmem:211 pagetables:132 bounce:0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.930996]  free:19702 free_pcp:15 free_cma:15872
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.962679] Node 0 active_anon:27076kB inactive_anon:308kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):16kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:844kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10957.984456] Normal free:78808kB min:928kB low:1160kB high:1392kB active_anon:27076kB inactive_anon:308kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:131072kB managed:120844kB mlocked:0kB kernel_stack:520kB pagetables:528kB bounce:0kB free_pcp:60kB local_pcp:60kB free_cma:63488kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.011509] lowmem_reserve[]: 0 0
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.014784] Normal: 1002*4kB (H) 378*8kB (H) 196*16kB (H) 79*32kB (H) 19*64kB (H) 5*128kB (H) 1*256kB (H) 1*512kB (H) 0*1024kB 1*2048kB (C) 1*4096kB (C) 1*8192kB (C) 1*16384kB (C) 1*32768kB (C) 0*65536kB = 78808kB
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.033626] 214 total pagecache pages
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.037177] 32768 pages RAM
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.039923] 0 pages HighMem/MovableOnly
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.043760] 2557 pages reserved
2012.01.10 12:11:25,warning,10.139.26.2,kernel,[10958.046792] 16384 pages cma reserved
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.050313] Tasks state (memory values in pages):
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.055004] [  pid  ]   uid  tgid total_vm      rss pgtables_bytes swapents oom_score_adj name
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.063549] [    115]     0   115      638       72     8192        0         -1000 udevd
2012.01.10 12:11:25,info,10.139.26.2,sshd,Connection closed by 80.94.95.115 port 15422 [preauth]
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.071575] [    147]  1000   147      564       39     8192        0             0 dbus-daemon
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.080224] [    179]    33   179      968      193     8192        0             0 lighttpd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.088572] [    183]     0   183      957       67     8192        0         -1000 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.096572] [    191]     0   191      369       22     6144        0             0 crond
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.104659] [    212]     0   212      360       20     8192        0             0 ifplugd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.112861] [    282]     0   282    21843     5364    47104        0             0 center
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.121075] [    285]     0   285      628       30     8192        0             0 getty
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.129162] [    308]     0   308     1271       80    10240        0             0 syslog-ng
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.137593] [    309]     0   309     6110      472    18432        0             0 syslog-ng
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.146034] [    349]     0   349     5444       52    12288        0             0 gsm_handler
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.154638] [    350]     0   350     4156        0    14336        0             0 modbus_master
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.163413] [    376]     0   352     6790        0    18432        0             0 iec104_slave
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.172041] [   9024]     0  9024      894       44     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.180096] [   9025]     0  9025      574       18     8192        0             0 ifconfig
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.188447] [   9026]     0  9026      574       18     8192        0             0 route
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.196535] [   9027]     0  9027      397       20     6144        0             0 logrotate
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.204965] [   9028]     0  9028      595       23     6144        0             0 uptime
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.213136] [   9029]     0  9029      574       18     8192        0             0 free
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.221079] [   9030]     0  9030      595       23     6144        0             0 gsmIpControl.sh
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.230067] [   9032]     0  9032      397       20     6144        0             0 logrotate
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.238495] [   9034]     0  9034      894       25     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.246515] [   9035]     0  9035      892       23     8192        0             0 sshd
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.254520] [   9038]     0  9038      369       22     6144        0             0 crond
2012.01.10 12:11:25,err,10.139.26.2,kernel,[10958.262540] Out of memory: Kill process 282 (center) score 177 or sacrifice child
2012.01.10 12:11:25,err,10.139.26.2,kernel,[10958.270024] Killed process 349 (gsm_handler) total-vm:21776kB, anon-rss:208kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:25,info,10.139.26.2,kernel,[10958.303937] oom_reaper: reaped process 349 (gsm_handler), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
2012.01.10 12:11:26,info,10.139.26.2,sshd,Connection closed by 58.221.60.25 port 57254 [preauth]
2012.01.10 12:11:27,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 57482 ssh2
2012.01.10 12:11:27,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 50011 ssh2
2012.01.10 12:11:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 57482 [preauth]
2012.01.10 12:11:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 50011 [preauth]
2012.01.10 12:11:49,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 50855 ssh2
2012.01.10 12:11:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 50855 [preauth]
2012.01.10 12:12:10,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 59764 ssh2
2012.01.10 12:12:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 59764 [preauth]
2012.01.10 12:12:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:12:34,info,10.139.26.2,sshd,Invalid user user from 216.36.112.159 port 41626
2012.01.10 12:12:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:12:34,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:12:34,info,10.139.26.2,sshd,Failed password for invalid user user from 216.36.112.159 port 41626 ssh2
2012.01.10 12:12:34,info,10.139.26.2,sshd,Connection closed by invalid user user 216.36.112.159 port 41626 [preauth]
2012.01.10 12:12:47,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 57597 ssh2
2012.01.10 12:13:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 47.184.58.103 port 57597 [preauth]
2012.01.10 12:13:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:14:03,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 51945 ssh2
2012.01.10 12:14:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 51945 [preauth]
2012.01.10 12:14:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:15:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:16:28,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 56857 ssh2
2012.01.10 12:16:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 56857 [preauth]
2012.01.10 12:16:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:17:18,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 50899 ssh2
2012.01.10 12:17:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 50899 [preauth]
2012.01.10 12:17:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:18:20,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 63559 ssh2
2012.01.10 12:18:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 63559 [preauth]
2012.01.10 12:18:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:18:49,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55703 ssh2
2012.01.10 12:18:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55703 [preauth]
2012.01.10 12:19:34,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:19:37,info,10.139.26.2,sshd,Invalid user zini from 193.24.211.219 port 4917
2012.01.10 12:19:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:19:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:19:37,info,10.139.26.2,sshd,Failed password for invalid user zini from 193.24.211.219 port 4917 ssh2
2012.01.10 12:19:38,info,10.139.26.2,sshd,Received disconnect from 193.24.211.219 port 4917:11: Client disconnecting normally [preauth]
2012.01.10 12:19:38,info,10.139.26.2,sshd,Disconnected from invalid user zini 193.24.211.219 port 4917 [preauth]
2012.01.10 12:20:24,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56014 ssh2
2012.01.10 12:20:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56014 [preauth]
2012.01.10 12:20:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:21:04,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64422 ssh2
2012.01.10 12:21:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64422 [preauth]
2012.01.10 12:21:25,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 49969 ssh2
2012.01.10 12:21:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 49969 [preauth]
2012.01.10 12:21:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:22:30,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61951 ssh2
2012.01.10 12:22:30,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61951 [preauth]
2012.01.10 12:22:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:23:29,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61033 ssh2
2012.01.10 12:23:29,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61033 [preauth]
2012.01.10 12:23:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:24:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:24:43,info,10.139.26.2,sshd,Bad protocol version identification '\003' from 45.148.10.33 port 63501
2012.01.10 12:25:30,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 57596 ssh2
2012.01.10 12:25:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:25:39,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 59654 ssh2
2012.01.10 12:25:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 59654 [preauth]
2012.01.10 12:25:49,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59812 ssh2
2012.01.10 12:25:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59812 [preauth]
2012.01.10 12:26:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:26:39,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61890 ssh2
2012.01.10 12:26:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61890 [preauth]
2012.01.10 12:27:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:27:43,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 59092 ssh2
2012.01.10 12:27:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 59092 [preauth]
2012.01.10 12:28:14,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 49168 ssh2
2012.01.10 12:28:15,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 49168 [preauth]
2012.01.10 12:28:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:28:47,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64745 ssh2
2012.01.10 12:28:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64745 [preauth]
2012.01.10 12:29:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:29:50,info,10.139.26.2,sshd,Failed password for root from 58.221.60.25 port 51186 ssh2
2012.01.10 12:29:50,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 51186:11: Bye Bye [preauth]
2012.01.10 12:29:50,info,10.139.26.2,sshd,Disconnected from authenticating user root 58.221.60.25 port 51186 [preauth]
2012.01.10 12:30:25,info,10.139.26.2,sshd,Failed password for root from 216.36.112.159 port 47962 ssh2
2012.01.10 12:30:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 216.36.112.159 port 47962 [preauth]
2012.01.10 12:30:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:30:42,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53973 ssh2
2012.01.10 12:30:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53973 [preauth]
2012.01.10 12:30:54,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64720 ssh2
2012.01.10 12:30:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64720 [preauth]
2012.01.10 12:31:37,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:31:54,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 57185 ssh2
2012.01.10 12:31:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 57185 [preauth]
2012.01.10 12:32:11,info,10.139.26.2,sshd,Invalid user admin from 138.226.239.233 port 58578
2012.01.10 12:32:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:32:12,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:32:12,info,10.139.26.2,sshd,Failed password for invalid user admin from 138.226.239.233 port 58578 ssh2
2012.01.10 12:32:12,info,10.139.26.2,sshd,Connection closed by invalid user admin 138.226.239.233 port 58578 [preauth]
2012.01.10 12:32:55,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 58664 ssh2
2012.01.10 12:32:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 58664 [preauth]
2012.01.10 12:33:07,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53840 ssh2
2012.01.10 12:33:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53840 [preauth]
2012.01.10 12:33:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:33:58,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64161 ssh2
2012.01.10 12:33:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64161 [preauth]
2012.01.10 12:34:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:35:00,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56264 ssh2
2012.01.10 12:35:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56264 [preauth]
2012.01.10 12:35:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:35:36,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53090 ssh2
2012.01.10 12:35:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53090 [preauth]
2012.01.10 12:36:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:37:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:37:24,info,10.139.26.2,sshd,Failed password for nobody from 47.184.58.103 port 46864 ssh2
2012.01.10 12:37:31,info,10.139.26.2,sshd,Connection closed by authenticating user nobody 47.184.58.103 port 46864 [preauth]
2012.01.10 12:37:54,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 49804 ssh2
2012.01.10 12:37:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 49804 [preauth]
2012.01.10 12:37:59,info,10.139.26.2,sshd,Connection closed by 185.246.130.20 port 44280 [preauth]
2012.01.10 12:38:05,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53515 ssh2
2012.01.10 12:38:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53515 [preauth]
2012.01.10 12:38:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:39:07,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 52229 ssh2
2012.01.10 12:39:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 52229 [preauth]
2012.01.10 12:39:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:40:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:40:17,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64929 ssh2
2012.01.10 12:40:17,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64929 [preauth]
2012.01.10 12:41:12,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 52347 ssh2
2012.01.10 12:41:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:41:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 52347 [preauth]
2012.01.10 12:42:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:42:33,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61909 ssh2
2012.01.10 12:42:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61909 [preauth]
2012.01.10 12:43:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:44:12,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:44:18,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 50878 ssh2
2012.01.10 12:44:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 50878 [preauth]
2012.01.10 12:44:24,info,10.139.26.2,sshd,Invalid user adm from 138.226.239.234 port 48166
2012.01.10 12:44:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:44:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:44:24,info,10.139.26.2,sshd,Failed password for invalid user adm from 138.226.239.234 port 48166 ssh2
2012.01.10 12:44:24,info,10.139.26.2,sshd,Connection closed by invalid user adm 138.226.239.234 port 48166 [preauth]
2012.01.10 12:44:53,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 49318 ssh2
2012.01.10 12:44:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 49318 [preauth]
2012.01.10 12:45:21,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 60908 ssh2
2012.01.10 12:45:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 60908 [preauth]
2012.01.10 12:45:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:46:19,info,10.139.26.2,sshd,Did not receive identification string from 2.57.122.168 port 44890
2012.01.10 12:46:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:47:19,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62862 ssh2
2012.01.10 12:47:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62862 [preauth]
2012.01.10 12:47:24,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:48:00,info,10.139.26.2,sshd,Bad protocol version identification '-HSS2.0-libssh_0.11.1' from 58.221.60.25 port 52716
2012.01.10 12:48:15,info,10.139.26.2,sshd,Invalid user user from 216.36.112.159 port 54450
2012.01.10 12:48:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:48:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:48:15,info,10.139.26.2,sshd,Failed password for invalid user user from 216.36.112.159 port 54450 ssh2
2012.01.10 12:48:15,info,10.139.26.2,sshd,Connection closed by invalid user user 216.36.112.159 port 54450 [preauth]
2012.01.10 12:48:25,info,10.139.26.2,sshd,Failed password for root from 2.57.122.168 port 46850 ssh2
2012.01.10 12:48:25,info,10.139.26.2,sshd,Connection closed by authenticating user root 2.57.122.168 port 46850 [preauth]
2012.01.10 12:48:30,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 54319 ssh2
2012.01.10 12:48:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 54319 [preauth]
2012.01.10 12:49:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:49:28,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 57461 ssh2
2012.01.10 12:49:34,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 63250 ssh2
2012.01.10 12:49:34,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 63250 [preauth]
2012.01.10 12:49:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 47.184.58.103 port 57461 [preauth]
2012.01.10 12:49:39,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 63012 ssh2
2012.01.10 12:49:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 63012 [preauth]
2012.01.10 12:50:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:51:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:52:03,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 56724 ssh2
2012.01.10 12:52:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 56724 [preauth]
2012.01.10 12:52:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:52:27,info,10.139.26.2,sshd,Bad protocol version identification '-HSS2.0-libssh_0.11.1' from 58.221.60.25 port 51312
2012.01.10 12:52:40,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 65344 ssh2
2012.01.10 12:52:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 65344 [preauth]
2012.01.10 12:53:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:54:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:54:35,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 53495 ssh2
2012.01.10 12:54:36,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 53495 [preauth]
2012.01.10 12:54:45,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 58960 ssh2
2012.01.10 12:54:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 58960 [preauth]
2012.01.10 12:55:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:55:48,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 62364 ssh2
2012.01.10 12:55:48,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 62364 [preauth]
2012.01.10 12:56:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:56:40,info,10.139.26.2,sshd,Invalid user admin from 138.226.239.234 port 20436
2012.01.10 12:56:40,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:56:40,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:56:40,info,10.139.26.2,sshd,Failed password for invalid user admin from 138.226.239.234 port 20436 ssh2
2012.01.10 12:56:41,info,10.139.26.2,sshd,Connection closed by invalid user admin 138.226.239.234 port 20436 [preauth]
2012.01.10 12:56:57,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59229 ssh2
2012.01.10 12:56:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59229 [preauth]
2012.01.10 12:57:40,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:58:00,info,10.139.26.2,sshd,Invalid user pi from 176.53.159.197 port 22502
2012.01.10 12:58:00,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:58:00,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:58:00,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 22502 ssh2
2012.01.10 12:58:01,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 22502 ssh2
2012.01.10 12:58:01,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 22502 ssh2
2012.01.10 12:58:01,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 22502 ssh2
2012.01.10 12:58:01,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 22502 ssh2
2012.01.10 12:58:01,info,10.139.26.2,sshd,Connection reset by invalid user pi 176.53.159.197 port 22502 [preauth]
2012.01.10 12:58:02,info,10.139.26.2,sshd,Invalid user pi from 176.53.159.197 port 7862
2012.01.10 12:58:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 12:58:02,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 7862 ssh2
2012.01.10 12:58:02,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 7862 ssh2
2012.01.10 12:58:02,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 7862 ssh2
2012.01.10 12:58:02,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 7862 ssh2
2012.01.10 12:58:02,info,10.139.26.2,sshd,Failed password for invalid user pi from 176.53.159.197 port 7862 ssh2
2012.01.10 12:58:03,info,10.139.26.2,sshd,Connection reset by invalid user pi 176.53.159.197 port 7862 [preauth]
2012.01.10 12:58:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7876 ssh2
2012.01.10 12:58:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7876 ssh2
2012.01.10 12:58:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7876 ssh2
2012.01.10 12:58:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7876 ssh2
2012.01.10 12:58:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7876 ssh2
2012.01.10 12:58:04,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 7876 [preauth]
2012.01.10 12:58:05,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7890 ssh2
2012.01.10 12:58:05,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7890 ssh2
2012.01.10 12:58:05,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7890 ssh2
2012.01.10 12:58:05,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7890 ssh2
2012.01.10 12:58:05,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7890 ssh2
2012.01.10 12:58:06,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 7890 [preauth]
2012.01.10 12:58:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7902 ssh2
2012.01.10 12:58:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7902 ssh2
2012.01.10 12:58:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7902 ssh2
2012.01.10 12:58:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7902 ssh2
2012.01.10 12:58:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 7902 ssh2
2012.01.10 12:58:07,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 7902 [preauth]
2012.01.10 12:58:54,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 59383 ssh2
2012.01.10 12:58:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 59383 [preauth]
2012.01.10 12:59:00,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 12:59:11,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48090 ssh2
2012.01.10 12:59:11,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48090 ssh2
2012.01.10 12:59:12,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48090 ssh2
2012.01.10 12:59:12,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48090 ssh2
2012.01.10 12:59:12,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48090 ssh2
2012.01.10 12:59:12,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 48090 [preauth]
2012.01.10 12:59:13,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48094 ssh2
2012.01.10 12:59:13,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48094 ssh2
2012.01.10 12:59:13,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48094 ssh2
2012.01.10 12:59:13,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48094 ssh2
2012.01.10 12:59:13,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48094 ssh2
2012.01.10 12:59:13,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 48094 [preauth]
2012.01.10 12:59:14,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48104 ssh2
2012.01.10 12:59:15,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48104 ssh2
2012.01.10 12:59:15,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48104 ssh2
2012.01.10 12:59:15,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48104 ssh2
2012.01.10 12:59:15,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 48104 ssh2
2012.01.10 12:59:15,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 48104 [preauth]
2012.01.10 12:59:16,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24866 ssh2
2012.01.10 12:59:16,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24866 ssh2
2012.01.10 12:59:16,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24866 ssh2
2012.01.10 12:59:16,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24866 ssh2
2012.01.10 12:59:16,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24866 ssh2
2012.01.10 12:59:16,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 24866 [preauth]
2012.01.10 12:59:17,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24878 ssh2
2012.01.10 12:59:17,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24878 ssh2
2012.01.10 12:59:18,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24878 ssh2
2012.01.10 12:59:18,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24878 ssh2
2012.01.10 12:59:18,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 24878 ssh2
2012.01.10 12:59:18,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 24878 [preauth]
2012.01.10 12:59:26,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52668 ssh2
2012.01.10 12:59:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52668 [preauth]
2012.01.10 12:59:56,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 52723 ssh2
2012.01.10 12:59:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 52723 [preauth]
2012.01.10 13:00:00,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:01:00,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:01:15,info,10.139.26.2,sshd,Invalid user consultant from 58.221.60.25 port 34000
2012.01.10 13:01:15,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:01:15,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:01:16,info,10.139.26.2,sshd,Failed password for invalid user consultant from 58.221.60.25 port 34000 ssh2
2012.01.10 13:01:16,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 34000:11: Bye Bye [preauth]
2012.01.10 13:01:16,info,10.139.26.2,sshd,Disconnected from invalid user consultant 58.221.60.25 port 34000 [preauth]
2012.01.10 13:01:48,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 36571 ssh2
2012.01.10 13:01:56,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62244 ssh2
2012.01.10 13:01:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62244 [preauth]
2012.01.10 13:02:02,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 63136 ssh2
2012.01.10 13:02:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 63136 [preauth]
2012.01.10 13:02:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 47.184.58.103 port 36571 [preauth]
2012.01.10 13:02:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:03:03,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 50890 ssh2
2012.01.10 13:03:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 50890 [preauth]
2012.01.10 13:03:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:04:06,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56996 ssh2
2012.01.10 13:04:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56996 [preauth]
2012.01.10 13:04:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:04:25,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 55843 ssh2
2012.01.10 13:04:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 55843 [preauth]
2012.01.10 13:05:08,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53920 ssh2
2012.01.10 13:05:09,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53920 [preauth]
2012.01.10 13:05:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:06:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:06:55,info,10.139.26.2,sshd,Failed password for root from 118.194.251.197 port 57106 ssh2
2012.01.10 13:06:56,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 57106:11: Bye Bye [preauth]
2012.01.10 13:06:56,info,10.139.26.2,sshd,Disconnected from authenticating user root 118.194.251.197 port 57106 [preauth]
2012.01.10 13:06:59,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57821 ssh2
2012.01.10 13:06:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57821 [preauth]
2012.01.10 13:07:10,info,10.139.26.2,sshd,Failed password for root from 216.36.112.159 port 46800 ssh2
2012.01.10 13:07:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 216.36.112.159 port 46800 [preauth]
2012.01.10 13:07:12,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61907 ssh2
2012.01.10 13:07:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61907 [preauth]
2012.01.10 13:07:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:08:12,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 58137 ssh2
2012.01.10 13:08:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 58137 [preauth]
2012.01.10 13:08:16,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:08:42,info,10.139.26.2,sshd,Invalid user admin from 138.226.239.233 port 47716
2012.01.10 13:08:42,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:08:42,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:08:42,info,10.139.26.2,sshd,Failed password for invalid user admin from 138.226.239.233 port 47716 ssh2
2012.01.10 13:08:42,info,10.139.26.2,sshd,Connection closed by invalid user admin 138.226.239.233 port 47716 [preauth]
2012.01.10 13:09:13,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56137 ssh2
2012.01.10 13:09:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56137 [preauth]
2012.01.10 13:09:28,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57657 ssh2
2012.01.10 13:09:28,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57657 [preauth]
2012.01.10 13:09:42,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:10:42,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:11:02,info,10.139.26.2,sshd,Invalid user fivem from 5.202.169.252 port 35830
2012.01.10 13:11:02,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:11:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:11:02,info,10.139.26.2,sshd,Failed password for invalid user fivem from 5.202.169.252 port 35830 ssh2
2012.01.10 13:11:02,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 35830:11: Bye Bye [preauth]
2012.01.10 13:11:02,info,10.139.26.2,sshd,Disconnected from invalid user fivem 5.202.169.252 port 35830 [preauth]
2012.01.10 13:11:58,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62859 ssh2
2012.01.10 13:11:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62859 [preauth]
2012.01.10 13:12:02,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:12:18,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53838 ssh2
2012.01.10 13:12:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53838 [preauth]
2012.01.10 13:13:02,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:13:20,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61621 ssh2
2012.01.10 13:13:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61621 [preauth]
2012.01.10 13:13:46,info,10.139.26.2,sshd,Invalid user admin from 47.184.58.103 port 50504
2012.01.10 13:13:46,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:13:46,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:13:46,info,10.139.26.2,sshd,Failed password for invalid user admin from 47.184.58.103 port 50504 ssh2
2012.01.10 13:13:48,info,10.139.26.2,sshd,Invalid user james from 193.187.110.160 port 10096
2012.01.10 13:13:48,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:13:49,info,10.139.26.2,sshd,Failed password for invalid user james from 193.187.110.160 port 10096 ssh2
2012.01.10 13:13:49,info,10.139.26.2,sshd,Received disconnect from 193.187.110.160 port 10096:11: Client disconnecting normally [preauth]
2012.01.10 13:13:49,info,10.139.26.2,sshd,Disconnected from invalid user james 193.187.110.160 port 10096 [preauth]
2012.01.10 13:14:00,info,10.139.26.2,sshd,Connection closed by invalid user admin 47.184.58.103 port 50504 [preauth]
2012.01.10 13:14:02,info,10.139.26.2,sshd,Invalid user karla from 118.194.251.197 port 53002
2012.01.10 13:14:02,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:14:02,info,10.139.26.2,sshd,Failed password for invalid user karla from 118.194.251.197 port 53002 ssh2
2012.01.10 13:14:02,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 53002:11: Bye Bye [preauth]
2012.01.10 13:14:02,info,10.139.26.2,sshd,Disconnected from invalid user karla 118.194.251.197 port 53002 [preauth]
2012.01.10 13:14:39,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 54880 ssh2
2012.01.10 13:14:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 54880 [preauth]
2012.01.10 13:14:46,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:15:00,info,10.139.26.2,sshd,Failed password for root from 5.202.169.252 port 43696 ssh2
2012.01.10 13:15:00,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 43696:11: Bye Bye [preauth]
2012.01.10 13:15:00,info,10.139.26.2,sshd,Disconnected from authenticating user root 5.202.169.252 port 43696 [preauth]
2012.01.10 13:15:35,info,10.139.26.2,sshd,Invalid user fivem from 118.194.251.197 port 34054
2012.01.10 13:15:35,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:15:35,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:15:35,info,10.139.26.2,sshd,Failed password for invalid user fivem from 118.194.251.197 port 34054 ssh2
2012.01.10 13:15:35,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 34054:11: Bye Bye [preauth]
2012.01.10 13:15:35,info,10.139.26.2,sshd,Disconnected from invalid user fivem 118.194.251.197 port 34054 [preauth]
2012.01.10 13:16:35,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:16:44,info,10.139.26.2,sshd,Invalid user vector from 5.202.169.252 port 35398
2012.01.10 13:16:44,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:16:44,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:16:44,info,10.139.26.2,sshd,Failed password for invalid user vector from 5.202.169.252 port 35398 ssh2
2012.01.10 13:16:44,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 35398:11: Bye Bye [preauth]
2012.01.10 13:16:44,info,10.139.26.2,sshd,Disconnected from invalid user vector 5.202.169.252 port 35398 [preauth]
2012.01.10 13:17:02,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62733 ssh2
2012.01.10 13:17:02,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62733 [preauth]
2012.01.10 13:17:05,info,10.139.26.2,sshd,Invalid user repro from 118.194.251.197 port 60440
2012.01.10 13:17:05,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:17:05,info,10.139.26.2,sshd,Failed password for invalid user repro from 118.194.251.197 port 60440 ssh2
2012.01.10 13:17:05,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 60440:11: Bye Bye [preauth]
2012.01.10 13:17:05,info,10.139.26.2,sshd,Disconnected from invalid user repro 118.194.251.197 port 60440 [preauth]
2012.01.10 13:17:26,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 55924 ssh2
2012.01.10 13:17:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 55924 [preauth]
2012.01.10 13:17:44,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:18:06,info,10.139.26.2,sshd,Invalid user admin from 5.202.169.252 port 36984
2012.01.10 13:18:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:18:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:18:06,info,10.139.26.2,sshd,Failed password for invalid user admin from 5.202.169.252 port 36984 ssh2
2012.01.10 13:18:06,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 36984:11: Bye Bye [preauth]
2012.01.10 13:18:06,info,10.139.26.2,sshd,Disconnected from invalid user admin 5.202.169.252 port 36984 [preauth]
2012.01.10 13:18:31,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 60817 ssh2
2012.01.10 13:18:31,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 60817 [preauth]
2012.01.10 13:18:31,info,10.139.26.2,sshd,Invalid user viktor from 118.194.251.197 port 45360
2012.01.10 13:18:31,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:18:31,info,10.139.26.2,sshd,Failed password for invalid user viktor from 118.194.251.197 port 45360 ssh2
2012.01.10 13:18:32,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 45360:11: Bye Bye [preauth]
2012.01.10 13:18:32,info,10.139.26.2,sshd,Disconnected from invalid user viktor 118.194.251.197 port 45360 [preauth]
2012.01.10 13:19:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:19:22,info,10.139.26.2,sshd,Invalid user admin from 2.57.121.25 port 56446
2012.01.10 13:19:22,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:19:22,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 56446 ssh2
2012.01.10 13:19:22,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 56446 ssh2
2012.01.10 13:19:22,info,10.139.26.2,sshd,Failed password for invalid user admin from 2.57.121.25 port 56446 ssh2
2012.01.10 13:19:23,info,10.139.26.2,sshd,Connection closed by invalid user admin 2.57.121.25 port 56446 [preauth]
2012.01.10 13:19:26,info,10.139.26.2,sshd,Invalid user info1 from 5.202.169.252 port 33950
2012.01.10 13:19:26,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:19:26,info,10.139.26.2,sshd,Failed password for invalid user info1 from 5.202.169.252 port 33950 ssh2
2012.01.10 13:19:26,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 33950:11: Bye Bye [preauth]
2012.01.10 13:19:26,info,10.139.26.2,sshd,Disconnected from invalid user info1 5.202.169.252 port 33950 [preauth]
2012.01.10 13:19:33,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53111 ssh2
2012.01.10 13:19:33,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53111 [preauth]
2012.01.10 13:19:34,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 65081 ssh2
2012.01.10 13:19:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 65081 [preauth]
2012.01.10 13:19:57,info,10.139.26.2,sshd,Failed password for root from 118.194.251.197 port 33612 ssh2
2012.01.10 13:19:58,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 33612:11: Bye Bye [preauth]
2012.01.10 13:19:58,info,10.139.26.2,sshd,Disconnected from authenticating user root 118.194.251.197 port 33612 [preauth]
2012.01.10 13:20:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:20:24,info,10.139.26.2,sshd,Invalid user lab from 138.226.239.233 port 16664
2012.01.10 13:20:24,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:20:24,info,10.139.26.2,sshd,Failed password for invalid user lab from 138.226.239.233 port 16664 ssh2
2012.01.10 13:20:24,info,10.139.26.2,sshd,Connection closed by invalid user lab 138.226.239.233 port 16664 [preauth]
2012.01.10 13:20:35,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 62217 ssh2
2012.01.10 13:20:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 62217 [preauth]
2012.01.10 13:21:06,info,10.139.26.2,sshd,Invalid user viktor from 5.202.169.252 port 52350
2012.01.10 13:21:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:21:06,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:21:06,info,10.139.26.2,sshd,Failed password for invalid user viktor from 5.202.169.252 port 52350 ssh2
2012.01.10 13:21:06,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 52350:11: Bye Bye [preauth]
2012.01.10 13:21:06,info,10.139.26.2,sshd,Disconnected from invalid user viktor 5.202.169.252 port 52350 [preauth]
2012.01.10 13:21:23,info,10.139.26.2,sshd,Failed password for root from 118.194.251.197 port 46034 ssh2
2012.01.10 13:21:23,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 46034:11: Bye Bye [preauth]
2012.01.10 13:21:23,info,10.139.26.2,sshd,Disconnected from authenticating user root 118.194.251.197 port 46034 [preauth]
2012.01.10 13:21:35,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56742 ssh2
2012.01.10 13:21:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56742 [preauth]
2012.01.10 13:21:56,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57251 ssh2
2012.01.10 13:21:57,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57251 [preauth]
2012.01.10 13:22:06,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:22:20,info,10.139.26.2,sshd,Invalid user dmdba from 5.202.169.252 port 57436
2012.01.10 13:22:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:22:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:22:20,info,10.139.26.2,sshd,Failed password for invalid user dmdba from 5.202.169.252 port 57436 ssh2
2012.01.10 13:22:21,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 57436:11: Bye Bye [preauth]
2012.01.10 13:22:21,info,10.139.26.2,sshd,Disconnected from invalid user dmdba 5.202.169.252 port 57436 [preauth]
2012.01.10 13:22:47,info,10.139.26.2,sshd,Invalid user dmdba from 118.194.251.197 port 60192
2012.01.10 13:22:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:22:47,info,10.139.26.2,sshd,Failed password for invalid user dmdba from 118.194.251.197 port 60192 ssh2
2012.01.10 13:22:47,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 60192:11: Bye Bye [preauth]
2012.01.10 13:22:47,info,10.139.26.2,sshd,Disconnected from invalid user dmdba 118.194.251.197 port 60192 [preauth]
2012.01.10 13:23:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:23:38,info,10.139.26.2,sshd,Failed password for root from 5.202.169.252 port 38604 ssh2
2012.01.10 13:23:39,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 38604:11: Bye Bye [preauth]
2012.01.10 13:23:39,info,10.139.26.2,sshd,Disconnected from authenticating user root 5.202.169.252 port 38604 [preauth]
2012.01.10 13:23:40,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 52313 ssh2
2012.01.10 13:23:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 52313 [preauth]
2012.01.10 13:24:13,info,10.139.26.2,sshd,Invalid user ubuntu from 118.194.251.197 port 41368
2012.01.10 13:24:13,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:24:13,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:24:13,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 118.194.251.197 port 41368 ssh2
2012.01.10 13:24:14,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 41368:11: Bye Bye [preauth]
2012.01.10 13:24:14,info,10.139.26.2,sshd,Disconnected from invalid user ubuntu 118.194.251.197 port 41368 [preauth]
2012.01.10 13:24:21,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52989 ssh2
2012.01.10 13:24:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52989 [preauth]
2012.01.10 13:24:43,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 55293 ssh2
2012.01.10 13:24:43,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 55293 [preauth]
2012.01.10 13:24:51,info,10.139.26.2,sshd,Failed password for root from 216.36.112.159 port 59860 ssh2
2012.01.10 13:24:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 216.36.112.159 port 59860 [preauth]
2012.01.10 13:24:57,info,10.139.26.2,sshd,Invalid user karla from 5.202.169.252 port 55288
2012.01.10 13:24:57,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:24:57,info,10.139.26.2,sshd,Failed password for invalid user karla from 5.202.169.252 port 55288 ssh2
2012.01.10 13:24:57,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 55288:11: Bye Bye [preauth]
2012.01.10 13:24:57,info,10.139.26.2,sshd,Disconnected from invalid user karla 5.202.169.252 port 55288 [preauth]
2012.01.10 13:25:03,info,10.139.26.2,sshd,Invalid user kizzy from 58.221.60.25 port 41774
2012.01.10 13:25:03,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:25:03,info,10.139.26.2,sshd,Failed password for invalid user kizzy from 58.221.60.25 port 41774 ssh2
2012.01.10 13:25:03,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 41774:11: Bye Bye [preauth]
2012.01.10 13:25:03,info,10.139.26.2,sshd,Disconnected from invalid user kizzy 58.221.60.25 port 41774 [preauth]
2012.01.10 13:25:13,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:25:39,info,10.139.26.2,sshd,Invalid user test from 118.194.251.197 port 38044
2012.01.10 13:25:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:25:39,info,10.139.26.2,sshd,Failed password for invalid user test from 118.194.251.197 port 38044 ssh2
2012.01.10 13:25:40,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 38044:11: Bye Bye [preauth]
2012.01.10 13:25:40,info,10.139.26.2,sshd,Disconnected from invalid user test 118.194.251.197 port 38044 [preauth]
2012.01.10 13:25:46,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53952 ssh2
2012.01.10 13:25:46,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53952 [preauth]
2012.01.10 13:26:13,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:26:16,info,10.139.26.2,sshd,Failed password for root from 5.202.169.252 port 44086 ssh2
2012.01.10 13:26:16,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 44086:11: Bye Bye [preauth]
2012.01.10 13:26:16,info,10.139.26.2,sshd,Disconnected from authenticating user root 5.202.169.252 port 44086 [preauth]
2012.01.10 13:26:16,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 46577 ssh2
2012.01.10 13:26:32,info,10.139.26.2,sshd,Connection closed by authenticating user root 47.184.58.103 port 46577 [preauth]
2012.01.10 13:26:48,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64336 ssh2
2012.01.10 13:26:48,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64336 [preauth]
2012.01.10 13:27:09,info,10.139.26.2,sshd,Invalid user info1 from 118.194.251.197 port 41706
2012.01.10 13:27:09,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:27:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:27:09,info,10.139.26.2,sshd,Failed password for invalid user info1 from 118.194.251.197 port 41706 ssh2
2012.01.10 13:27:10,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 41706:11: Bye Bye [preauth]
2012.01.10 13:27:10,info,10.139.26.2,sshd,Disconnected from invalid user info1 118.194.251.197 port 41706 [preauth]
2012.01.10 13:27:39,info,10.139.26.2,sshd,Invalid user ubuntu from 5.202.169.252 port 41024
2012.01.10 13:27:39,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:27:39,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 5.202.169.252 port 41024 ssh2
2012.01.10 13:27:39,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 41024:11: Bye Bye [preauth]
2012.01.10 13:27:39,info,10.139.26.2,sshd,Disconnected from invalid user ubuntu 5.202.169.252 port 41024 [preauth]
2012.01.10 13:27:50,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 58965 ssh2
2012.01.10 13:27:50,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 58965 [preauth]
2012.01.10 13:28:09,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:28:32,info,10.139.26.2,sshd,Invalid user lab from 80.94.95.116 port 48538
2012.01.10 13:28:33,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:28:33,info,10.139.26.2,sshd,Failed password for invalid user lab from 80.94.95.116 port 48538 ssh2
2012.01.10 13:28:33,info,10.139.26.2,sshd,Connection closed by invalid user lab 80.94.95.116 port 48538 [preauth]
2012.01.10 13:28:37,info,10.139.26.2,sshd,Invalid user vector from 118.194.251.197 port 38548
2012.01.10 13:28:37,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:28:37,info,10.139.26.2,sshd,Failed password for invalid user vector from 118.194.251.197 port 38548 ssh2
2012.01.10 13:28:38,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 38548:11: Bye Bye [preauth]
2012.01.10 13:28:38,info,10.139.26.2,sshd,Disconnected from invalid user vector 118.194.251.197 port 38548 [preauth]
2012.01.10 13:28:53,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 56540 ssh2
2012.01.10 13:28:54,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 56540 [preauth]
2012.01.10 13:29:01,info,10.139.26.2,sshd,Invalid user repro from 5.202.169.252 port 48688
2012.01.10 13:29:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:29:01,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:29:01,info,10.139.26.2,sshd,Failed password for invalid user repro from 5.202.169.252 port 48688 ssh2
2012.01.10 13:29:02,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 48688:11: Bye Bye [preauth]
2012.01.10 13:29:02,info,10.139.26.2,sshd,Disconnected from invalid user repro 5.202.169.252 port 48688 [preauth]
2012.01.10 13:29:13,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 57660 ssh2
2012.01.10 13:29:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 57660 [preauth]
2012.01.10 13:29:53,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 59244 ssh2
2012.01.10 13:29:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 59244 [preauth]
2012.01.10 13:30:01,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:30:05,info,10.139.26.2,sshd,Failed password for root from 118.194.251.197 port 36444 ssh2
2012.01.10 13:30:05,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 36444:11: Bye Bye [preauth]
2012.01.10 13:30:05,info,10.139.26.2,sshd,Disconnected from authenticating user root 118.194.251.197 port 36444 [preauth]
2012.01.10 13:30:23,info,10.139.26.2,sshd,Invalid user test from 5.202.169.252 port 49886
2012.01.10 13:30:23,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:30:23,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:30:23,info,10.139.26.2,sshd,Failed password for invalid user test from 5.202.169.252 port 49886 ssh2
2012.01.10 13:30:23,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 49886:11: Bye Bye [preauth]
2012.01.10 13:30:23,info,10.139.26.2,sshd,Disconnected from invalid user test 5.202.169.252 port 49886 [preauth]
2012.01.10 13:31:23,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:31:29,info,10.139.26.2,sshd,Invalid user admin from 118.194.251.197 port 51904
2012.01.10 13:31:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:31:29,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:31:29,info,10.139.26.2,sshd,Failed password for invalid user admin from 118.194.251.197 port 51904 ssh2
2012.01.10 13:31:30,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 51904:11: Bye Bye [preauth]
2012.01.10 13:31:30,info,10.139.26.2,sshd,Disconnected from invalid user admin 118.194.251.197 port 51904 [preauth]
2012.01.10 13:31:40,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 56735 ssh2
2012.01.10 13:31:40,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 56735 [preauth]
2012.01.10 13:31:44,info,10.139.26.2,sshd,Failed password for root from 5.202.169.252 port 50342 ssh2
2012.01.10 13:31:45,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 50342:11: Bye Bye [preauth]
2012.01.10 13:31:45,info,10.139.26.2,sshd,Disconnected from authenticating user root 5.202.169.252 port 50342 [preauth]
2012.01.10 13:31:56,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 51281 ssh2
2012.01.10 13:31:56,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 51281 [preauth]
2012.01.10 13:32:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:32:54,info,10.139.26.2,sshd,Failed password for root from 118.194.251.197 port 54012 ssh2
2012.01.10 13:32:54,info,10.139.26.2,sshd,Received disconnect from 118.194.251.197 port 54012:11: Bye Bye [preauth]
2012.01.10 13:32:54,info,10.139.26.2,sshd,Disconnected from authenticating user root 118.194.251.197 port 54012 [preauth]
2012.01.10 13:32:56,info,10.139.26.2,sshd,Did not receive identification string from 193.32.162.84 port 46762
2012.01.10 13:33:05,info,10.139.26.2,sshd,Failed password for root from 5.202.169.252 port 45744 ssh2
2012.01.10 13:33:06,info,10.139.26.2,sshd,Received disconnect from 5.202.169.252 port 45744:11: Bye Bye [preauth]
2012.01.10 13:33:06,info,10.139.26.2,sshd,Disconnected from authenticating user root 5.202.169.252 port 45744 [preauth]
2012.01.10 13:33:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:33:45,info,10.139.26.2,sshd,Connection reset by 193.47.62.69 port 32248 [preauth]
2012.01.10 13:34:03,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64911 ssh2
2012.01.10 13:34:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64911 [preauth]
2012.01.10 13:34:07,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61407 ssh2
2012.01.10 13:34:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61407 [preauth]
2012.01.10 13:34:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:35:02,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 54712 ssh2
2012.01.10 13:35:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 54712 [preauth]
2012.01.10 13:35:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:36:15,info,10.139.26.2,sshd,Did not receive identification string from 181.26.162.57 port 39964
2012.01.10 13:36:28,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 63731 ssh2
2012.01.10 13:36:29,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 63731 [preauth]
2012.01.10 13:36:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:37:10,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 63594 ssh2
2012.01.10 13:37:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 63594 [preauth]
2012.01.10 13:37:29,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:38:08,info,10.139.26.2,sshd,Invalid user ubuntu from 47.184.58.103 port 45902
2012.01.10 13:38:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:38:08,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:38:08,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 47.184.58.103 port 45902 ssh2
2012.01.10 13:38:10,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53238 ssh2
2012.01.10 13:38:10,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53238 [preauth]
2012.01.10 13:38:17,info,10.139.26.2,sshd,Connection closed by invalid user ubuntu 47.184.58.103 port 45902 [preauth]
2012.01.10 13:38:48,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 51606 ssh2
2012.01.10 13:38:49,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 51606 [preauth]
2012.01.10 13:38:58,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 51925 ssh2
2012.01.10 13:38:58,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 51925 [preauth]
2012.01.10 13:39:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:39:14,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 51737 ssh2
2012.01.10 13:39:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 51737 [preauth]
2012.01.10 13:39:23,info,10.139.26.2,sshd,Failed password for root from 138.226.239.233 port 54874 ssh2
2012.01.10 13:39:24,info,10.139.26.2,sshd,Connection closed by authenticating user root 138.226.239.233 port 54874 [preauth]
2012.01.10 13:40:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:41:03,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 54694 ssh2
2012.01.10 13:41:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 54694 [preauth]
2012.01.10 13:41:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:41:18,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 63106 ssh2
2012.01.10 13:41:18,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 63106 [preauth]
2012.01.10 13:41:23,info,10.139.26.2,sshd,Connection reset by 204.48.24.63 port 24569 [preauth]
2012.01.10 13:42:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:43:08,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:43:26,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 57748 ssh2
2012.01.10 13:43:26,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 57748 [preauth]
2012.01.10 13:43:42,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64432 ssh2
2012.01.10 13:43:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64432 [preauth]
2012.01.10 13:43:55,info,10.139.26.2,sshd,Invalid user eriq from 2.57.121.112 port 36728
2012.01.10 13:43:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:43:55,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:43:55,info,10.139.26.2,sshd,Failed password for invalid user eriq from 2.57.121.112 port 36728 ssh2
2012.01.10 13:43:56,info,10.139.26.2,sshd,Failed password for invalid user eriq from 2.57.121.112 port 36728 ssh2
2012.01.10 13:43:56,info,10.139.26.2,sshd,Failed password for invalid user eriq from 2.57.121.112 port 36728 ssh2
2012.01.10 13:43:56,info,10.139.26.2,sshd,Failed password for invalid user eriq from 2.57.121.112 port 36728 ssh2
2012.01.10 13:43:56,info,10.139.26.2,sshd,Failed password for invalid user eriq from 2.57.121.112 port 36728 ssh2
2012.01.10 13:43:56,info,10.139.26.2,sshd,Connection closed by invalid user eriq 2.57.121.112 port 36728 [preauth]
2012.01.10 13:44:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:45:23,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 57073 ssh2
2012.01.10 13:45:23,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 57073 [preauth]
2012.01.10 13:45:52,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 60780 ssh2
2012.01.10 13:45:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 60780 [preauth]
2012.01.10 13:45:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:46:05,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 60603 ssh2
2012.01.10 13:46:05,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 60603 [preauth]
2012.01.10 13:46:18,info,10.139.26.2,sshd,Failed password for root from 58.221.60.25 port 45212 ssh2
2012.01.10 13:46:18,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 45212:11: Bye Bye [preauth]
2012.01.10 13:46:18,info,10.139.26.2,sshd,Disconnected from authenticating user root 58.221.60.25 port 45212 [preauth]
2012.01.10 13:46:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:47:29,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 51931 ssh2
2012.01.10 13:47:29,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 51931 [preauth]
2012.01.10 13:47:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:48:13,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 35558 ssh2
2012.01.10 13:48:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 35558 [preauth]
2012.01.10 13:48:27,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64740 ssh2
2012.01.10 13:48:27,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64740 [preauth]
2012.01.10 13:48:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:49:55,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:50:20,info,10.139.26.2,sshd,Invalid user ftp from 47.184.58.103 port 44005
2012.01.10 13:50:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:50:20,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:50:20,info,10.139.26.2,sshd,Failed password for invalid user ftp from 47.184.58.103 port 44005 ssh2
2012.01.10 13:50:31,info,10.139.26.2,sshd,Connection closed by invalid user ftp 47.184.58.103 port 44005 [preauth]
2012.01.10 13:50:34,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 38560 ssh2
2012.01.10 13:50:35,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 38560 [preauth]
2012.01.10 13:50:36,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 49464 ssh2
2012.01.10 13:50:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 49464 [preauth]
2012.01.10 13:50:52,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 62840 ssh2
2012.01.10 13:50:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 62840 [preauth]
2012.01.10 13:51:07,info,10.139.26.2,sshd,Invalid user user from 80.94.95.116 port 16150
2012.01.10 13:51:07,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 13:51:07,info,10.139.26.2,sshd,Failed password for invalid user user from 80.94.95.116 port 16150 ssh2
2012.01.10 13:51:07,info,10.139.26.2,sshd,Connection closed by invalid user user 80.94.95.116 port 16150 [preauth]
2012.01.10 13:51:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:52:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:52:38,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 50645 ssh2
2012.01.10 13:52:39,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 50645 [preauth]
2012.01.10 13:52:44,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 41546 ssh2
2012.01.10 13:52:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 41546 [preauth]
2012.01.10 13:53:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:53:22,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 52407 ssh2
2012.01.10 13:53:22,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 52407 [preauth]
2012.01.10 13:54:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:54:41,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53566 ssh2
2012.01.10 13:54:42,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53566 [preauth]
2012.01.10 13:54:55,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 44548 ssh2
2012.01.10 13:54:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 44548 [preauth]
2012.01.10 13:55:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:55:45,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59844 ssh2
2012.01.10 13:55:45,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59844 [preauth]
2012.01.10 13:56:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:56:47,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 58199 ssh2
2012.01.10 13:56:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 58199 [preauth]
2012.01.10 13:57:07,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 47532 ssh2
2012.01.10 13:57:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 47532 [preauth]
2012.01.10 13:57:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:57:48,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61501 ssh2
2012.01.10 13:57:48,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61501 [preauth]
2012.01.10 13:58:13,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59410 ssh2
2012.01.10 13:58:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59410 [preauth]
2012.01.10 13:58:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:58:51,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64038 ssh2
2012.01.10 13:58:51,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64038 [preauth]
2012.01.10 13:59:12,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 50558 ssh2
2012.01.10 13:59:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 50558 [preauth]
2012.01.10 13:59:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 13:59:51,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 62770 ssh2
2012.01.10 13:59:52,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 62770 [preauth]
2012.01.10 14:00:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:00:38,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 51542 ssh2
2012.01.10 14:00:38,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 51542 [preauth]
2012.01.10 14:00:55,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 52845 ssh2
2012.01.10 14:00:55,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 52845 [preauth]
2012.01.10 14:01:18,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 53508 ssh2
2012.01.10 14:01:19,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 53508 [preauth]
2012.01.10 14:01:20,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:01:31,info,10.139.26.2,sshd,Invalid user anonymous from 80.94.95.115 port 52740
2012.01.10 14:01:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:01:32,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 14:01:32,info,10.139.26.2,sshd,Failed password for invalid user anonymous from 80.94.95.115 port 52740 ssh2
2012.01.10 14:01:32,info,10.139.26.2,sshd,Connection closed by invalid user anonymous 80.94.95.115 port 52740 [preauth]
2012.01.10 14:02:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:02:59,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 53978 ssh2
2012.01.10 14:02:59,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 53978 [preauth]
2012.01.10 14:03:00,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 45725 ssh2
2012.01.10 14:03:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 47.184.58.103 port 45725 [preauth]
2012.01.10 14:03:11,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64588 ssh2
2012.01.10 14:03:11,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64588 [preauth]
2012.01.10 14:03:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:03:36,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 56500 ssh2
2012.01.10 14:03:37,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 56500 [preauth]
2012.01.10 14:04:01,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64620 ssh2
2012.01.10 14:04:01,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64620 [preauth]
2012.01.10 14:04:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:05:03,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 57280 ssh2
2012.01.10 14:05:03,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 57280 [preauth]
2012.01.10 14:05:22,info,10.139.26.2,sshd,Failed password for root from 58.221.60.25 port 37652 ssh2
2012.01.10 14:05:23,info,10.139.26.2,sshd,Received disconnect from 58.221.60.25 port 37652:11: Bye Bye [preauth]
2012.01.10 14:05:23,info,10.139.26.2,sshd,Disconnected from authenticating user root 58.221.60.25 port 37652 [preauth]
2012.01.10 14:05:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:05:41,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 64504 ssh2
2012.01.10 14:05:41,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 64504 [preauth]
2012.01.10 14:05:44,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 59502 ssh2
2012.01.10 14:05:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 59502 [preauth]
2012.01.10 14:06:06,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 51267 ssh2
2012.01.10 14:06:07,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 51267 [preauth]
2012.01.10 14:06:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:06:40,info,10.139.26.2,sshd,Connection closed by 185.242.226.17 port 38006 [preauth]
2012.01.10 14:07:08,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64059 ssh2
2012.01.10 14:07:08,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64059 [preauth]
2012.01.10 14:07:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:07:53,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 34234 ssh2
2012.01.10 14:07:53,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 34234 [preauth]
2012.01.10 14:08:11,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 54693 ssh2
2012.01.10 14:08:12,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 54693 [preauth]
2012.01.10 14:08:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:09:13,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64370 ssh2
2012.01.10 14:09:13,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64370 [preauth]
2012.01.10 14:09:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:10:00,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 37158 ssh2
2012.01.10 14:10:00,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 37158 [preauth]
2012.01.10 14:10:14,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 64316 ssh2
2012.01.10 14:10:14,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 64316 [preauth]
2012.01.10 14:10:32,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:10:43,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 61802 ssh2
2012.01.10 14:10:44,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 61802 [preauth]
2012.01.10 14:11:02,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2008 ssh2
2012.01.10 14:11:03,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2008 ssh2
2012.01.10 14:11:03,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2008 ssh2
2012.01.10 14:11:03,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2008 ssh2
2012.01.10 14:11:03,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2008 ssh2
2012.01.10 14:11:03,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 2008 [preauth]
2012.01.10 14:11:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2018 ssh2
2012.01.10 14:11:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2018 ssh2
2012.01.10 14:11:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2018 ssh2
2012.01.10 14:11:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2018 ssh2
2012.01.10 14:11:04,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2018 ssh2
2012.01.10 14:11:05,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 2018 [preauth]
2012.01.10 14:11:06,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2032 ssh2
2012.01.10 14:11:06,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2032 ssh2
2012.01.10 14:11:06,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2032 ssh2
2012.01.10 14:11:06,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2032 ssh2
2012.01.10 14:11:06,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2032 ssh2
2012.01.10 14:11:06,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 2032 [preauth]
2012.01.10 14:11:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2042 ssh2
2012.01.10 14:11:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2042 ssh2
2012.01.10 14:11:07,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2042 ssh2
2012.01.10 14:11:08,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2042 ssh2
2012.01.10 14:11:08,info,10.139.26.2,sshd,Failed password for root from 176.53.159.197 port 2042 ssh2
2012.01.10 14:11:08,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.197 port 2042 [preauth]
2012.01.10 14:11:09,info,10.139.26.2,sshd,Invalid user adm from 176.53.159.197 port 2046
2012.01.10 14:11:09,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:11:09,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 14:11:09,info,10.139.26.2,sshd,Failed password for invalid user adm from 176.53.159.197 port 2046 ssh2
2012.01.10 14:11:09,info,10.139.26.2,sshd,Failed password for invalid user adm from 176.53.159.197 port 2046 ssh2
2012.01.10 14:11:09,info,10.139.26.2,sshd,Failed password for invalid user adm from 176.53.159.197 port 2046 ssh2
2012.01.10 14:11:09,info,10.139.26.2,sshd,Failed password for invalid user adm from 176.53.159.197 port 2046 ssh2
2012.01.10 14:11:09,info,10.139.26.2,sshd,Failed password for invalid user adm from 176.53.159.197 port 2046 ssh2
2012.01.10 14:11:09,info,10.139.26.2,sshd,Connection reset by invalid user adm 176.53.159.197 port 2046 [preauth]
2012.01.10 14:11:47,info,10.139.26.2,sshd,Failed password for root from 138.226.239.233 port 47734 ssh2
2012.01.10 14:11:47,info,10.139.26.2,sshd,Connection closed by authenticating user root 138.226.239.233 port 47734 [preauth]
2012.01.10 14:12:03,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 40126 ssh2
2012.01.10 14:12:04,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 40126 [preauth]
2012.01.10 14:12:09,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:12:20,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 61783 ssh2
2012.01.10 14:12:20,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 61783 [preauth]
2012.01.10 14:12:41,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64508 ssh2
2012.01.10 14:12:41,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64508 ssh2
2012.01.10 14:12:41,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64508 ssh2
2012.01.10 14:12:41,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64508 ssh2
2012.01.10 14:12:41,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64508 ssh2
2012.01.10 14:12:42,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 64508 [preauth]
2012.01.10 14:12:43,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64512 ssh2
2012.01.10 14:12:43,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64512 ssh2
2012.01.10 14:12:43,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64512 ssh2
2012.01.10 14:12:43,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64512 ssh2
2012.01.10 14:12:43,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64512 ssh2
2012.01.10 14:12:43,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 64512 [preauth]
2012.01.10 14:12:44,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64524 ssh2
2012.01.10 14:12:44,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64524 ssh2
2012.01.10 14:12:44,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64524 ssh2
2012.01.10 14:12:45,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64524 ssh2
2012.01.10 14:12:45,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 64524 ssh2
2012.01.10 14:12:45,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 64524 [preauth]
2012.01.10 14:12:46,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 25978 ssh2
2012.01.10 14:12:46,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 25978 ssh2
2012.01.10 14:12:46,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 25978 ssh2
2012.01.10 14:12:46,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 25978 ssh2
2012.01.10 14:12:46,info,10.139.26.2,sshd,Failed password for root from 176.53.159.198 port 25978 ssh2
2012.01.10 14:12:46,info,10.139.26.2,sshd,Connection reset by authenticating user root 176.53.159.198 port 25978 [preauth]
2012.01.10 14:12:47,info,10.139.26.2,sshd,Invalid user ubuntu from 176.53.159.198 port 25988
2012.01.10 14:12:47,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:12:47,err,10.139.26.2,sshd,error: Could not get shadow information for NOUSER
2012.01.10 14:12:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 176.53.159.198 port 25988 ssh2
2012.01.10 14:12:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 176.53.159.198 port 25988 ssh2
2012.01.10 14:12:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 176.53.159.198 port 25988 ssh2
2012.01.10 14:12:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 176.53.159.198 port 25988 ssh2
2012.01.10 14:12:48,info,10.139.26.2,sshd,Failed password for invalid user ubuntu from 176.53.159.198 port 25988 ssh2
2012.01.10 14:12:48,info,10.139.26.2,sshd,Connection reset by invalid user ubuntu 176.53.159.198 port 25988 [preauth]
2012.01.10 14:13:15,info,10.139.26.2,sshd,Failed password for root from 27.71.231.8 port 59619 ssh2
2012.01.10 14:13:16,info,10.139.26.2,sshd,Connection closed by authenticating user root 27.71.231.8 port 59619 [preauth]
2012.01.10 14:13:48,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:14:06,info,10.139.26.2,sshd,Failed password for root from 193.32.162.84 port 43116 ssh2
2012.01.10 14:14:06,info,10.139.26.2,sshd,Connection closed by authenticating user root 193.32.162.84 port 43116 [preauth]
2012.01.10 14:14:24,info,10.139.26.2,sshd,Failed password for root from 176.52.133.171 port 54972 ssh2
2012.01.10 14:14:24,info,10.139.26.2,sshd,Connection closed by authenticating user root 176.52.133.171 port 54972 [preauth]
2012.01.10 14:14:48,err,10.139.26.2,syslog-ng,Error opening file for writing; filename='/mnt/sd/syslog/messages.csv', error='Read-only file system (30)'
2012.01.10 14:15:15,info,10.139.26.2,sshd,Failed password for root from 47.184.58.103 port 33602 ssh2