Quote:
Feb 11 01:22:50 mail sshd[5384]: Failed password for test from 80.96.93.222 port 1178
Feb 11 01:22:58 mail sshd[5384]: Failed password for test from 80.96.93.222 port 1178
Feb 11 01:23:03 mail sshd[5384]: Accepted password for test from 80.96.93.222 port 1178
Feb 11 01:23:06 mail sshd(pam_unix)[5391]: session opened for user test by (uid=594)
Oddly enough, this seems to be a port for skk, A japanese translator or something. Didn't look into it too much but it is for encoding japanese characters. Although this seems to suggest that someone did indeed succeed in gaining access, using the account test.
Quote:
Feb 15 11:05:35 mail syslogd: Printing partial message
Feb 15 11:05:35 mail 22>Feb 15 11:05:35 sendmail[2798]: j1F55ZTb002798: mail.w-advertise.com [81.255.114.13] (may be forged) did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Feb 15 11:05:35 mail
Feb 17 10:42:53 mail 22>Feb 17 10:42:53 sendmail[7447]: j1H4grTb007447: mail.w-advertise.com [81.255.114.13] (may be forged) did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
kinda looks like some spam is floating around in there. The mail.w-advertise.com is in french (well