[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Sun Mar 30 06:26:06 CDT 2008


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Sun Mar 30 06:25:26 2008
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dkaufman:
      /bin/date > $HOME/date.txt: 1440 Time(s)
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/local/bin/planetupdate 1>/dev/null 2>&1: 24 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
      wget -O - -q http://evolt.org/cron.php: 72 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

4 messages delivered immediately to 4 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

5.06 MB transfered in 618 responses  (1xx 0, 2xx 221, 3xx 166, 4xx 231, 5xx 0) 
 44 Images (0.01 MB),
 8 Documents (0.00 MB),
 433 Content pages (4.36 MB),
 13 Program source files (0.06 MB),
 120 Other (0.63 MB) 

A total of 73 unidentified 'other' records logged
  GET /dshadovi/traffic.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?r2=1.20&r1=1.18&sortdir=down HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating05.gif?sortby=log&view=graph HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/cubes-2.png?rev=1.1&sortby=log&view=auto HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?annotate=1.11 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=date&r2=1.30&r1=1.15 HTTP/1.0 with response code(s) 1 200 responses
  GET /jesteruk HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/CHANGELOG?annotate=1.1 HTTP/1.0 with response code(s) 1 200 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=rev&r2=1.25&r1=1.30 HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/code/rank_select.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?annotate=1.7&sortby=date HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?r1=1.8&r2=1.9&sortby=date HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?only_with_tag=MAIN HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/*checkout*/grabbag/status/eo.avail.png?rev=1.1 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/rss20.gif?rev=1.1&hideattic=1&view=auto HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=dat&r2=1.7&r1=1.28 HTTP/1.0 with response code(s) 1 200 responses
  GET /dshadovi/traffic.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?view=log&sortby=date&r1=1.7 HTTP/1.0 with response code(s) 1 200 responses
  GET /simonc/php/bookmarklet.phps HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=author&r2=1.18&r1=1.14 HTTP/1.0 with response code(s) 1 200 responses
  GET /jswiders HTTP/1.0 with response code(s) 2 404 responses
  GET /help/email.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=log&r2=1.11&r1=1.26 HTTP/1.0 with response code(s) 1 200 responses
  GET /mantruc/blog HTTP/1.0 with response code(s) 2 404 responses
  GET /jeff/code/preload_n_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=rev&r2=1.10&r1=1.23 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mkarchivesize?rev=1.12 HTTP/1.1 with response code(s) 1 200 responses
  - with response code(s) 24 408 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 2 404 responses
  GET /nmk HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=author&r2=1.10&r1=1.11 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/beodl/Attic/mirrors.csv?only_with_tag=MAIN HTTP/1.0 with response code(s) 1 200 responses
  GET /search?hl=en&rls=com.microsoft%3Aen-us&q=spam+just+human HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?annotate=1.9&sortby=file HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/code/user_defined_colors.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?annotate=1.5&only_with_tag=MAIN HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/webcam.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/chkarchivemirror?sortby=rev&r2=1.4&r1=1.2 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=date&r2=1.28&r1=1.25 HTTP/1.0 with response code(s) 1 200 responses
  GET /elfur HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/bluecube.gif?rev=1.5&sortby=log&view=log HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=date&r2=1.21&r1=1.24 HTTP/1.0 with response code(s) 1 200 responses
  GET /turkif HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/rss092.gif?rev=1.1&hideattic=1&view=auto HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/noc/favicon.ico?hideattic=1&view=graph HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?hideattic=1&r1=1.1&r2=1.18 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/greencube.gif?annotate=1.2&hideattic=1 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=author&r2=1.25&r1=1.1 HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/code/character_converting_textarea.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?r2=1.8&r1=1.18&sortdir=down HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=log&r2=1.12&r1=1.18 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=rev&r2=1.25&r1=1.15 HTTP/1.0 with response code(s) 1 200 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=date&r2=1.12&r1=1.15 HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/grabbag/steeringcheck/.cvsignore?r1=1.1&r2=1.2 HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/yahoo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mkarchivesize?r1=1.7&r2=1.12 HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/wip/photoshop/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 18 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=author&r2=1.3&r1=1.1 HTTP/1.0 with response code(s) 1 200 responses
  GET /winddancer HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/rank_select.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /desflynn/thinlizzy HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=rev&r2=1.3&r1=1.26 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolters?r1=1.2&r2=1.3&sortby=log HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?sortby=log&r2=1.20&r1=1.18 HTTP/1.0 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating11.gif?r1=1.1&r2=1.2 HTTP/1.0 with response code(s) 1 200 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 4 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?view=log&sortby=log&r1=1.14 HTTP/1.0 with response code(s) 1 200 responses

A total of 10 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 7 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      CCBot/1.0 (+http://www.commoncrawl.org/bot.html) 1 time(s) 
      Nokia6682/2.0 (3.01.1) SymbianOS/8.0 Series60/2.6 Profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0 (compatible;YahooSeeker/M1A1-R2D2; http://help.yahoo.com/help/us/ysearch/crawling/crawling-01.html) 1 time(s) 
      Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html) 1 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) VoilaBot BETA 1.2 (http://www.voila.com/) 3 time(s) 
      msnbot-media/1.0 (+http://search.msn.com/msnbot.htm) 6 time(s) 
      Speedy Spider (http://www.entireweb.com/about/search_tech/speedy_spider/) 2 time(s) 
      Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 1 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 4 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): UDP: bad checksum. From 12.96.160.115:53 to 67.19.100.194:2381 ulen 51
1 Time(s): UDP: short packet: 12.96.160.115:53 126/110 to 67.19.100.194:48139
1 Time(s): UDP: short packet: 12.96.160.115:53 145/129 to 67.19.100.194:64715
1 Time(s): UDP: short packet: 12.96.160.115:53 147/131 to 67.19.100.194:42662
1 Time(s): UDP: short packet: 12.96.160.115:53 150/134 to 67.19.100.194:59091
1 Time(s): UDP: short packet: 12.96.160.115:53 179/163 to 67.19.100.194:36256
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:36383
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:42801
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:49643
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:49847
1 Time(s): UDP: short packet: 12.96.160.115:53 315/299 to 67.19.100.194:52583
1 Time(s): UDP: short packet: 12.96.160.115:53 530/514 to 67.19.100.194:36923
1 Time(s): UDP: short packet: 12.96.160.115:53 530/514 to 67.19.100.194:43177
1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode
3 Time(s): sending pkt_too_big (len[1500] pmtu[1460]) to self
10 Time(s): sending pkt_too_big (len[1500] pmtu[1496]) to self

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      dkaufman: 1440 Time(s)
      root: 462 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)

sshd:
   Sessions Opened:
      dmah: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)
      dmah(uid=0) -> root: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Didn't receive an ident from these IPs:
   196.30.161.35: 5 Time(s)
   210.180.115.164: 10 Time(s)
   62.73.186.188: 5 Time(s)

Failed logins from these:
   admin/password from 196.30.161.35: 2 Time(s)
   admin/password from 60.19.30.195: 8 Time(s)
   alex/password from 196.30.161.35: 4 Time(s)
   amanda/password from 196.30.161.35: 2 Time(s)
   apache/password from 196.30.161.35: 3 Time(s)
   backuppc/password from 196.30.161.35: 1 Time(s)
   blog/password from 196.30.161.35: 1 Time(s)
   core/password from 196.30.161.35: 1 Time(s)
   cvsuser/password from 196.30.161.35: 3 Time(s)
   dank/password from 196.30.161.35: 1 Time(s)
   diane/password from 196.30.161.35: 1 Time(s)
   eaguilar/password from 196.30.161.35: 4 Time(s)
   estudiante/password from 196.30.161.35: 4 Time(s)
   farrell/password from 196.30.161.35: 1 Time(s)
   festival/password from 196.30.161.35: 1 Time(s)
   files/password from 196.30.161.35: 1 Time(s)
   first/password from 196.30.161.35: 1 Time(s)
   fred/password from 196.30.161.35: 1 Time(s)
   frei/password from 196.30.161.35: 1 Time(s)
   gast/password from 196.30.161.35: 2 Time(s)
   genoveva/password from 196.30.161.35: 1 Time(s)
   grupo2/password from 196.30.161.35: 4 Time(s)
   guest/password from 196.30.161.35: 3 Time(s)
   guest/password from 60.19.30.195: 4 Time(s)
   gvera/password from 196.30.161.35: 3 Time(s)
   hans/password from 196.30.161.35: 1 Time(s)
   housingp/password from 196.30.161.35: 1 Time(s)
   iraf/password from 196.30.161.35: 1 Time(s)
   javi/password from 196.30.161.35: 1 Time(s)
   je/password from 196.30.161.35: 1 Time(s)
   jean/password from 196.30.161.35: 1 Time(s)
   juan/password from 196.30.161.35: 1 Time(s)
   kor/password from 196.30.161.35: 1 Time(s)
   lab/password from 196.30.161.35: 3 Time(s)
   mama/password from 196.30.161.35: 1 Time(s)
   martin/password from 196.30.161.35: 2 Time(s)
   mom/password from 196.30.161.35: 2 Time(s)
   nagios/password from 196.30.161.35: 4 Time(s)
   nickelan/password from 196.30.161.35: 2 Time(s)
   oliver/password from 196.30.161.35: 1 Time(s)
   oracle/password from 196.30.161.35: 1 Time(s)
   payala/password from 196.30.161.35: 4 Time(s)
   production/password from 196.30.161.35: 1 Time(s)
   root/password from 196.30.161.35: 69 Time(s)
   root/password from 60.19.30.195: 10 Time(s)
   root/password from 62.73.186.188: 10 Time(s)
   sirsi/password from 196.30.161.35: 1 Time(s)
   stats/password from 196.30.161.35: 1 Time(s)
   student/password from 196.30.161.35: 2 Time(s)
   svn/password from 196.30.161.35: 1 Time(s)
   swsoft/password from 196.30.161.35: 1 Time(s)
   test/password from 196.30.161.35: 2 Time(s)
   test/password from 60.19.30.195: 8 Time(s)
   ubuntu/password from 196.30.161.35: 1 Time(s)
   user/password from 196.30.161.35: 2 Time(s)
   user/password from 60.19.30.195: 4 Time(s)
   vacaciones/password from 196.30.161.35: 2 Time(s)
   video/password from 196.30.161.35: 2 Time(s)
   vmware/password from 196.30.161.35: 1 Time(s)
   web1/password from 210.180.115.164: 5 Time(s)
   web10/password from 210.180.115.164: 3 Time(s)
   web11/password from 210.180.115.164: 1 Time(s)
   web2/password from 210.180.115.164: 5 Time(s)
   web3/password from 210.180.115.164: 5 Time(s)
   web4/password from 210.180.115.164: 5 Time(s)
   web5/password from 210.180.115.164: 5 Time(s)
   web6/password from 210.180.115.164: 5 Time(s)
   web7/password from 210.180.115.164: 5 Time(s)
   web8/password from 210.180.115.164: 5 Time(s)
   web9/password from 210.180.115.164: 5 Time(s)
   wei/password from 196.30.161.35: 1 Time(s)
   wolfgang/password from 196.30.161.35: 1 Time(s)

Illegal users from these:
   admin/none from 196.30.161.35: 2 Time(s)
   admin/none from 60.19.30.195: 8 Time(s)
   admin/password from 196.30.161.35: 2 Time(s)
   admin/password from 60.19.30.195: 8 Time(s)
   alex/none from 196.30.161.35: 4 Time(s)
   alex/password from 196.30.161.35: 4 Time(s)
   amanda/none from 196.30.161.35: 2 Time(s)
   amanda/password from 196.30.161.35: 2 Time(s)
   apache/none from 196.30.161.35: 3 Time(s)
   apache/password from 196.30.161.35: 3 Time(s)
   backuppc/none from 196.30.161.35: 1 Time(s)
   backuppc/password from 196.30.161.35: 1 Time(s)
   blog/none from 196.30.161.35: 1 Time(s)
   blog/password from 196.30.161.35: 1 Time(s)
   core/none from 196.30.161.35: 1 Time(s)
   core/password from 196.30.161.35: 1 Time(s)
   cvsuser/none from 196.30.161.35: 3 Time(s)
   cvsuser/password from 196.30.161.35: 3 Time(s)
   dank/none from 196.30.161.35: 1 Time(s)
   dank/password from 196.30.161.35: 1 Time(s)
   diane/none from 196.30.161.35: 1 Time(s)
   diane/password from 196.30.161.35: 1 Time(s)
   eaguilar/none from 196.30.161.35: 4 Time(s)
   eaguilar/password from 196.30.161.35: 4 Time(s)
   estudiante/none from 196.30.161.35: 4 Time(s)
   estudiante/password from 196.30.161.35: 4 Time(s)
   farrell/none from 196.30.161.35: 1 Time(s)
   farrell/password from 196.30.161.35: 1 Time(s)
   festival/none from 196.30.161.35: 1 Time(s)
   festival/password from 196.30.161.35: 1 Time(s)
   files/none from 196.30.161.35: 1 Time(s)
   files/password from 196.30.161.35: 1 Time(s)
   first/none from 196.30.161.35: 1 Time(s)
   first/password from 196.30.161.35: 1 Time(s)
   fred/none from 196.30.161.35: 1 Time(s)
   fred/password from 196.30.161.35: 1 Time(s)
   frei/none from 196.30.161.35: 1 Time(s)
   frei/password from 196.30.161.35: 1 Time(s)
   gast/none from 196.30.161.35: 2 Time(s)
   gast/password from 196.30.161.35: 2 Time(s)
   genoveva/none from 196.30.161.35: 1 Time(s)
   genoveva/password from 196.30.161.35: 1 Time(s)
   grupo2/none from 196.30.161.35: 4 Time(s)
   grupo2/password from 196.30.161.35: 4 Time(s)
   guest/none from 196.30.161.35: 3 Time(s)
   guest/none from 60.19.30.195: 4 Time(s)
   guest/password from 196.30.161.35: 3 Time(s)
   guest/password from 60.19.30.195: 4 Time(s)
   gvera/none from 196.30.161.35: 3 Time(s)
   gvera/password from 196.30.161.35: 3 Time(s)
   hans/none from 196.30.161.35: 1 Time(s)
   hans/password from 196.30.161.35: 1 Time(s)
   housingp/none from 196.30.161.35: 1 Time(s)
   housingp/password from 196.30.161.35: 1 Time(s)
   iraf/none from 196.30.161.35: 1 Time(s)
   iraf/password from 196.30.161.35: 1 Time(s)
   javi/none from 196.30.161.35: 1 Time(s)
   javi/password from 196.30.161.35: 1 Time(s)
   je/none from 196.30.161.35: 1 Time(s)
   je/password from 196.30.161.35: 1 Time(s)
   jean/none from 196.30.161.35: 1 Time(s)
   jean/password from 196.30.161.35: 1 Time(s)
   juan/none from 196.30.161.35: 1 Time(s)
   juan/password from 196.30.161.35: 1 Time(s)
   kor/none from 196.30.161.35: 1 Time(s)
   kor/password from 196.30.161.35: 1 Time(s)
   lab/none from 196.30.161.35: 3 Time(s)
   lab/password from 196.30.161.35: 3 Time(s)
   mama/none from 196.30.161.35: 1 Time(s)
   mama/password from 196.30.161.35: 1 Time(s)
   mom/none from 196.30.161.35: 2 Time(s)
   mom/password from 196.30.161.35: 2 Time(s)
   nagios/none from 196.30.161.35: 4 Time(s)
   nagios/password from 196.30.161.35: 4 Time(s)
   nickelan/none from 196.30.161.35: 2 Time(s)
   nickelan/password from 196.30.161.35: 2 Time(s)
   oliver/none from 196.30.161.35: 1 Time(s)
   oliver/password from 196.30.161.35: 1 Time(s)
   oracle/none from 196.30.161.35: 1 Time(s)
   oracle/password from 196.30.161.35: 1 Time(s)
   payala/none from 196.30.161.35: 4 Time(s)
   payala/password from 196.30.161.35: 4 Time(s)
   production/none from 196.30.161.35: 1 Time(s)
   production/password from 196.30.161.35: 1 Time(s)
   sirsi/none from 196.30.161.35: 1 Time(s)
   sirsi/password from 196.30.161.35: 1 Time(s)
   stats/none from 196.30.161.35: 1 Time(s)
   stats/password from 196.30.161.35: 1 Time(s)
   student/none from 196.30.161.35: 2 Time(s)
   student/password from 196.30.161.35: 2 Time(s)
   svn/none from 196.30.161.35: 1 Time(s)
   svn/password from 196.30.161.35: 1 Time(s)
   swsoft/none from 196.30.161.35: 1 Time(s)
   swsoft/password from 196.30.161.35: 1 Time(s)
   test/none from 196.30.161.35: 2 Time(s)
   test/none from 60.19.30.195: 8 Time(s)
   test/password from 196.30.161.35: 2 Time(s)
   test/password from 60.19.30.195: 8 Time(s)
   ubuntu/none from 196.30.161.35: 1 Time(s)
   ubuntu/password from 196.30.161.35: 1 Time(s)
   user/none from 196.30.161.35: 2 Time(s)
   user/none from 60.19.30.195: 4 Time(s)
   user/password from 196.30.161.35: 2 Time(s)
   user/password from 60.19.30.195: 4 Time(s)
   vacaciones/none from 196.30.161.35: 2 Time(s)
   vacaciones/password from 196.30.161.35: 2 Time(s)
   video/none from 196.30.161.35: 2 Time(s)
   video/password from 196.30.161.35: 2 Time(s)
   vmware/none from 196.30.161.35: 1 Time(s)
   vmware/password from 196.30.161.35: 1 Time(s)
   web1/none from 210.180.115.164: 5 Time(s)
   web1/password from 210.180.115.164: 5 Time(s)
   web10/none from 210.180.115.164: 3 Time(s)
   web10/password from 210.180.115.164: 3 Time(s)
   web11/none from 210.180.115.164: 1 Time(s)
   web11/password from 210.180.115.164: 1 Time(s)
   web2/none from 210.180.115.164: 5 Time(s)
   web2/password from 210.180.115.164: 5 Time(s)
   web3/none from 210.180.115.164: 5 Time(s)
   web3/password from 210.180.115.164: 5 Time(s)
   web4/none from 210.180.115.164: 5 Time(s)
   web4/password from 210.180.115.164: 5 Time(s)
   web5/none from 210.180.115.164: 5 Time(s)
   web5/password from 210.180.115.164: 5 Time(s)
   web6/none from 210.180.115.164: 5 Time(s)
   web6/password from 210.180.115.164: 5 Time(s)
   web7/none from 210.180.115.164: 5 Time(s)
   web7/password from 210.180.115.164: 5 Time(s)
   web8/none from 210.180.115.164: 5 Time(s)
   web8/password from 210.180.115.164: 5 Time(s)
   web9/none from 210.180.115.164: 5 Time(s)
   web9/password from 210.180.115.164: 5 Time(s)
   wei/none from 196.30.161.35: 1 Time(s)
   wei/password from 196.30.161.35: 1 Time(s)
   wolfgang/none from 196.30.161.35: 1 Time(s)
   wolfgang/password from 196.30.161.35: 1 Time(s)

Users logging in through sshd:
   dmah:
      S010600c049d9e99b.cg.shawcable.net (70.73.105.151): 1 time

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
dmah => root
------------------------------------------------------------------------------
/bin/su -

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   27G   41G  40% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list