[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Fri Feb 27 06:25:39 CST 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Fri Feb 27 06:25:18 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

-MsgID: 1LcKj5-00069W-00: 
	2009-02-26 02:01:54 => root at lists.evolt.org <root at tempest.evolt.org> R=passToQmail T=local_smtp H=lists.evolt.org [67.19.100.195]*
	2009-02-26 02:01:54 Completed
-MsgID: 1LchEP-00035z-00: 
	2009-02-26 08:33:29 <= root at tempest.evolt.org U=root P=local S=906
	2009-02-26 08:38:32 SMTP timeout while connected to lists.evolt.org [67.19.100.195] after initial connection: Connection timed out
	2009-02-26 08:38:32 == root at lists.evolt.org <root at tempest.evolt.org> T=local_smtp defer (110): Connection timed out: SMTP timeout while connected to lists.evolt.org [67.19.100.195] after initial connection
	2009-02-26 08:38:32 failed to open DB file /var/spool/exim/db/retry: File exists
3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.23 MB transfered in 1150 responses  (1xx 0, 2xx 0, 3xx 301, 4xx 849, 5xx 0) 
 120 Images (0.04 MB),
 8 Documents (0.00 MB),
 2 Archives (0.00 MB),
 823 Content pages (0.16 MB),
 2 Program source files (0.00 MB),
 195 Other (0.04 MB) 

Attempts to use 1 known hacks were logged 3 time(s)
  /../../../   by 
          77.221.130.21 3 time(s) 

A total of 1 sites probed the server 
  77.221.130.21  

A total of 87 unidentified 'other' records logged
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/mirrorservice.org/description?rev=1.2&sortby=log&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/0941cd519d91728b866f52dd10c3530e?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://a.collective-media.net/adj/idgt.linuxopensource/;sz=336x280;ord=[timestamp]? HTTP/1.1 with response code(s) 1 404 responses
  GET http://ad.doubleclick.net/adj/ostg.freshmeat/main_p16_services;pg=projects;logged_in=0;tile=3;tpc=phpSecurePages;tpc=Environment;tpc=Web_Environment;tpc=Intended_Audience;tpc=Developers;tpc=License;tpc=Free_for_non_commercial_use;tpc=Operating_System;tpc=OS_Independent;tpc=Programming_Language;tpc=PHP;tpc=Topic;tpc=Internet;tpc=WWW_HTTP;tpc=Dynamic_Content;tpc=HTTP_Servers;tpc=Site_Management;tpc=Office_Business;tpc=Security;tpc=Software_Development;tpc=Development_Status;tpc=4___Beta;tpc=End_Users_Desktop;ord=855994722621383.7? HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/6f9d84f663cd4d1ecf248531cea6c034?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_html/evolt-logo.ai?view=markup HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/f70c4bd411985237db78966be0dc27de?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 6 404 responses
  GET /xmlrpc.php. HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/2b3e38b550f8d225a589567e97eccc74?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/square-bullet.psd?rev=1.2&hideattic=0&only_with_tag=HEAD&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/rank_select.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /seb HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/traffic.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/mm_resources.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET http://www.google.co.in/csi?v=3&s=GWS&action=search&tran=undefined&ei=ZjSmSf3aG9jZkAWfodTbDQ&e=14823&rt=prt.281,ol.390,xjs.500 HTTP/1.1 with response code(s) 1 404 responses
  GET /rss/articles.rss HTTP/1.0 with response code(s) 1 404 responses
  GET HTTP/1.1 HTTP/1.1 with response code(s) 3 400 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/.cvsignore?sortby=log&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/34bcbddb5640d5fa9d1e7456e7289f6a?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/5dffdf03953182764cd761071bdd45c4?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  - with response code(s) 76 408 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/beodl/Attic/mirrors-withdeouk.csv?rev=1.2&sortby=log&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.google-analytics.com/__utm.gif?utmwv=4.3&utmn=136450132&utmhn=freshmeat.net&utmcs=iso-8859-1&utmsr=1024x768&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=10.0%20r12&utmcn=1&utmdt=freshmeat.net%3A%20Project%20details%20for%20phpSecurePages&utmhid=1054780922&utmr=http://www.google.co.in/search?hl=en&q=change+password+using+session+in+php&meta=&utmp=/projects/phpsecurepages/&utmac=UA-32013-4&utmcc=__utma%3D148580960.2458653282273474600.1235677699.1235677699.1235677699.1%3B%2B__utmz%3D148580960.1235677699.1.1.utmcsr%3Dgoogle%7Cutmccn%3D(organic)%7Cutmcmd%3Dorganic%7Cutmctr%3Dchange%2520password%2520using%2520session%2520in%2520php%3B HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/4bfffa6d7fb528d5f715bab8afb8dbcd?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /roundcube/bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  HEAD /signup.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/0f9d83b11fc7b3472cb1a43b42afc960?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /matthewo HTTP/1.1 with response code(s) 1 404 responses
  GET http://ad.doubleclick.net/adj/ostg.freshmeat/main_p2_sky;pg=projects;logged_in=0;tile=2;tpc=phpSecurePages;tpc=Environment;tpc=Web_Environment;tpc=Intended_Audience;tpc=Developers;tpc=License;tpc=Free_for_non_commercial_use;tpc=Operating_System;tpc=OS_Independent;tpc=Programming_Language;tpc=PHP;tpc=Topic;tpc=Internet;tpc=WWW_HTTP;tpc=Dynamic_Content;tpc=HTTP_Servers;tpc=Site_Management;tpc=Office_Business;tpc=Security;tpc=Software_Development;tpc=Development_Status;tpc=4___Beta;tpc=End_Users_Desktop;ord=855994722621383.7? HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm%C2%A0 HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/7dacdf09c6a35757df07463ccfa3b203?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /arijit HTTP/1.1 with response code(s) 1 404 responses
  GET http://c.fsdn.com/fm/screenshots/8035_thumb.jpg?981342517 HTTP/1.1 with response code(s) 1 404 responses
  GET /bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/mirror.ac.uk/description?sortby=log&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/eb7fdccc3ad9d6103674e7e7e9993b2e?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/a13fc001c424004fdd9f5f61428ba9bc?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/6ab2aa7dd2f2140e0a5f1d1e02062e67?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/112b8197d44a51eed416918daa7024a7?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/cf_venn/demo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/0f268bb9494b8252ab84517c63b13458?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/26826f78a37e5f98911566b315b14863?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://a.collective-media.net/adj/idgt.linuxopensource/;sz=728x90;ord=[timestamp]? HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/*checkout*/weo_theme/print.module?rev=1.23 HTTP/1.1 with response code(s) 1 404 responses
  GET /tweak HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/ef79c225653f246425bef6a311e004fc?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/311b849713e8ae14c2db15435b75bf07?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET http://feeds.feedburner.com/~fc/chz?bg=000033&fg=FFFFFF&anim=0 HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/fb4840450c78883a142d95e9c3f68894?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/rollover_n_click/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/29a37f0063cbbbef27f0b194a5937318?s=32&d=&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /webshot/aa HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 4 400 responses
  GET http://www.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=50 HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/0b9be815a0d812774d0c1f9ded3e25af?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?sortby=log&r2=1.23&r1=1.20 HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/727dbf26f351b0cba7236e9be3ff4520?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?rev=1.25&sortby=log&view=log HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.0 with response code(s) 1 404 responses
  GET /webmail/bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  GET http://www.gravatar.com/avatar/97d14a2fc2d820e3bb242fa879672150?s=32&d=&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/c5f3a13fdada18466910b9f0ac0ce67f?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/flirble.org/description?sortby=log&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/form_to_window/index.cfm HTTP/1.1 with response code(s) 4 404 responses
  GET /mail/bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 4 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/mirrorservice.org/description?sortby=log&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features\r=%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E HTTP/1.1 with response code(s) 2 400 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/beodl/Attic/mirrors-withdeouk.csv?rev=1.1&content-type=text/vnd.viewcvs-markup&sortby=log HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET http://www.gravatar.com/avatar/b2f6643c88f6d25a212b60c6d5b339dd?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/e7192564b52fdc5922765cef05945bdd?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.google.com/coop/cse/brand?form=cse-search-box&lang=en HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/s HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 4 404 responses
  GET http://www.gravatar.com/avatar/f2eb504d2b92869966a3d7ebea487b26?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/82317e429ba803a78389d4659dd59251?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET http://www.gravatar.com/avatar/f165ab678a5397c595c57dd6956e3d50?s=50&d=http%3A%2F%2Fwww.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D50&r=G HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/flirble.org/ftp?sortby=log&view=graph HTTP/1.1 with response code(s) 1 404 responses

A total of 10 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 8 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 4 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) VoilaBot BETA 1.2 (support.voilabot at orange-ftgroup.com) 1 time(s) 
      hitcrawler_0.1 (ringken at gmail.com) 1 time(s) 
      org_viewer (larbin2.6.3 at unspecified.mail) 5 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 9 time(s) 
      NetSeer/Nutch-0.9 (NetSeer Crawler; http://www.netseer.com; crawler at netseer.com) 1 time(s) 
      Mozilla/5.0 (compatible; ScoutJet; +http://www.scoutjet.com/) 1 time(s) 
      SimilarPages/Nutch-1.0-dev (SimilarPages Nutch Crawler; http://www.similarpages.com; info at similarpages dot com) 2 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 2 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:28045/80 shrinks window 1244724925:1244726373. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:38655/80 shrinks window 843659502:843660950. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:43889/80 shrinks window 900629205:900632101. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:47396/80 shrinks window 1401918949:1401920397. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:55907/80 shrinks window 1523997709:1523999157. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:65121/80 shrinks window 1034819964:1034821412. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:11486/80 shrinks window 2329151020:2329153916. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:11486/80 shrinks window 2329177084:2329178532. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:11486/80 shrinks window 2329207492:2329210388. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:11486/80 shrinks window 2329235004:2329236452. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:11486/80 shrinks window 2329269756:2329274100. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:12090/80 shrinks window 120473488:120477832. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:12127/80 shrinks window 3520919293:3520920741. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:12536/80 shrinks window 140825609:140827057. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:15715/80 shrinks window 2837044252:2837045700. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:16608/80 shrinks window 1000645864:1000647312. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:16841/80 shrinks window 792894220:792895504. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:17258/80 shrinks window 1655911490:1655912300. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:18411/80 shrinks window 158862039:158864935. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:19226/80 shrinks window 662700248:662701696. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:21621/80 shrinks window 3487160052:3487160308. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:23070/80 shrinks window 1048614406:1048615854. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:25287/80 shrinks window 2289541935:2289543383. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:25575/80 shrinks window 2118103783:2118104534. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:27389/80 shrinks window 2728927483:2728930379. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:27684/80 shrinks window 3903530005:3903531453. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:28014/80 shrinks window 4269716834:4269718282. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:28079/80 shrinks window 4099484627:4099486075. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:29329/80 shrinks window 613251785:613253233. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:29401/80 shrinks window 3038742766:3038744214. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:29590/80 shrinks window 2650434672:2650437568. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:29590/80 shrinks window 2650460736:2650464213. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:31217/80 shrinks window 2544405522:2544408418. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:32026/80 shrinks window 4004100141:4004101120. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:32753/80 shrinks window 2890981941:2890982243. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:32900/80 shrinks window 352131024:352132472. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:33267/80 shrinks window 2253550802:2253553698. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:33267/80 shrinks window 2253576866:2253578314. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:34010/80 shrinks window 2105492625:2105494073. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:34329/80 shrinks window 4041174352:4041174382. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:34972/80 shrinks window 2517887603:2517890499. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:38205/80 shrinks window 3109081557:3109083005. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:39750/80 shrinks window 482461407:482462855. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:40325/80 shrinks window 677510310:677514654. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:40325/80 shrinks window 677536374:677537370. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:41329/80 shrinks window 2505657584:2505659032. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:41429/80 shrinks window 4086947494:4086951838. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:43139/80 shrinks window 442445855:442450199. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:43139/80 shrinks window 442471919:442473367. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:43480/80 shrinks window 2406143475:2406144923. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:44422/80 shrinks window 2681621333:2681622234. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:44858/80 shrinks window 3341475939:3341477387. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:48501/80 shrinks window 2934310021:2934312917. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:48982/80 shrinks window 2248973314:2248973944. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:50174/80 shrinks window 518881356:518882804. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:50377/80 shrinks window 3180291952:3180292034. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:51481/80 shrinks window 1985294266:1985295714. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:51706/80 shrinks window 1762824733:1762827629. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:54125/80 shrinks window 3419637:3421085. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:54958/80 shrinks window 2390579573:2390582469. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:55085/80 shrinks window 2706564305:2706565753. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:55379/80 shrinks window 3920754494:3920755011. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:57528/80 shrinks window 1331909549:1331910123. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:59338/80 shrinks window 3971610585:3971612033. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:59849/80 shrinks window 3878530239:3878536031. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:60827/80 shrinks window 1177105771:1177106441. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:61118/80 shrinks window 2440646989:2440648437. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:62214/80 shrinks window 2659339749:2659341197. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:62786/80 shrinks window 4190584711:4190586159. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:64333/80 shrinks window 1226660834:1226660968. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:64606/80 shrinks window 78628549:78629997. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:65192/80 shrinks window 900593954:900595402. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:65192/80 shrinks window 900637394:900640290. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:65192/80 shrinks window 900664906:900666354. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:65483/80 shrinks window 3217807101:3217808549. Repaired.
1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 366 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   82-76-35-78.rdsnet.ro: 60 Time(s)
   unknown.caratnetworks.com: 36 Time(s)

Didn't receive an ident from these IPs:
   200.30.136.146: 5 Time(s)
   203.129.255.188: 1 Time(s)
   218.248.24.20: 4 Time(s)
   61.164.147.5: 3 Time(s)
   82-76-35-78.rdsnet.ro (82.76.35.78): 4 Time(s)
   mailx.nigeriafirst.org (216.226.227.5): 5 Time(s)
   sd-16643.dedibox.fr (88.191.97.219): 3 Time(s)
   unknown.caratnetworks.com (174.137.52.170): 3 Time(s)

Failed logins from these:
   admin/password from 200.30.136.146: 5 Time(s)
   admin/password from 61.164.147.5: 1 Time(s)
   admin1/password from 82.76.35.78: 4 Time(s)
   admin2/password from 82.76.35.78: 4 Time(s)
   admin3/password from 82.76.35.78: 4 Time(s)
   admin4/password from 82.76.35.78: 4 Time(s)
   administrator/password from 200.30.136.146: 3 Time(s)
   ale/password from 203.129.255.188: 1 Time(s)
   alias/password from 200.30.136.146: 5 Time(s)
   apache/password from 200.30.136.146: 5 Time(s)
   ashwini/password from 88.191.97.219: 4 Time(s)
   cnasftp/password from 88.191.97.219: 2 Time(s)
   condor/password from 216.226.227.5: 3 Time(s)
   contribute/password from 88.191.97.219: 2 Time(s)
   core/password from 200.30.136.146: 5 Time(s)
   cyrus/password from 200.30.136.146: 5 Time(s)
   d13943/password from 88.191.97.219: 2 Time(s)
   david/password from 200.30.136.146: 5 Time(s)
   dilli/password from 203.129.255.188: 1 Time(s)
   dilli/password from 218.248.24.20: 3 Time(s)
   etienk/password from 88.191.97.219: 4 Time(s)
   ftp/password from 200.30.136.146: 5 Time(s)
   ftpuser/password from 200.30.136.146: 4 Time(s)
   globus/password from 216.226.227.5: 5 Time(s)
   guest/password from 200.30.136.146: 5 Time(s)
   harrisi/password from 88.191.97.219: 6 Time(s)
   info/password from 200.30.136.146: 5 Time(s)
   janus/password from 88.191.97.219: 6 Time(s)
   jirka/password from 88.191.97.219: 4 Time(s)
   library/password from 200.30.136.146: 1 Time(s)
   linux/password from 200.30.136.146: 5 Time(s)
   mantis/password from 88.191.97.219: 6 Time(s)
   mayomo/password from 88.191.97.219: 4 Time(s)
   michael/password from 200.30.136.146: 5 Time(s)
   monster/password from 88.191.97.219: 2 Time(s)
   mysql/password from 200.30.136.146: 5 Time(s)
   named/password from 200.30.136.146: 5 Time(s)
   newsletter/password from 200.30.136.146: 5 Time(s)
   office/password from 200.30.136.146: 5 Time(s)
   oracle/password from 123.233.245.226: 3 Time(s)
   oracle/password from 200.30.136.146: 5 Time(s)
   paul/password from 200.30.136.146: 5 Time(s)
   pgsql/password from 200.30.136.146: 5 Time(s)
   postfix/password from 200.30.136.146: 5 Time(s)
   postgres/password from 200.30.136.146: 5 Time(s)
   postmaster/password from 200.30.136.146: 5 Time(s)
   rajjw/password from 88.191.97.219: 2 Time(s)
   recruit/password from 200.30.136.146: 5 Time(s)
   robust/password from 88.191.97.219: 3 Time(s)
   root/password from 123.233.245.226: 39 Time(s)
   root/password from 174.137.52.170: 36 Time(s)
   root/password from 200.30.136.146: 5 Time(s)
   root/password from 203.129.255.188: 2 Time(s)
   root/password from 218.248.24.20: 3 Time(s)
   root/password from 60.198.212.6: 33 Time(s)
   root/password from 61.164.147.5: 1 Time(s)
   root/password from 88.191.97.219: 60 Time(s)
   sales/password from 200.30.136.146: 5 Time(s)
   samba/password from 200.30.136.146: 5 Time(s)
   simoni/password from 203.129.255.188: 1 Time(s)
   simoni/password from 218.248.24.20: 3 Time(s)
   smbtest/password from 88.191.97.219: 4 Time(s)
   spam/password from 200.30.136.146: 5 Time(s)
   staff/password from 200.30.136.146: 5 Time(s)
   test/password from 123.233.245.226: 3 Time(s)
   test/password from 200.30.136.146: 6 Time(s)
   test/password from 82.76.35.78: 4 Time(s)
   test1/password from 82.76.35.78: 4 Time(s)
   test10/password from 82.76.35.78: 4 Time(s)
   test2/password from 82.76.35.78: 4 Time(s)
   test3/password from 82.76.35.78: 4 Time(s)
   test4/password from 82.76.35.78: 4 Time(s)
   test5/password from 82.76.35.78: 4 Time(s)
   test6/password from 82.76.35.78: 4 Time(s)
   test7/password from 82.76.35.78: 4 Time(s)
   test8/password from 82.76.35.78: 4 Time(s)
   test9/password from 82.76.35.78: 4 Time(s)
   tomcat/password from 200.30.136.146: 5 Time(s)
   tomcat/password from 216.226.227.5: 2 Time(s)
   tony/password from 200.30.136.146: 5 Time(s)
   user/password from 200.30.136.146: 5 Time(s)
   username/password from 200.30.136.146: 4 Time(s)
   virus/password from 200.30.136.146: 5 Time(s)
   visitor/password from 200.30.136.146: 4 Time(s)
   web/password from 200.30.136.146: 5 Time(s)
   webadmin/password from 200.30.136.146: 5 Time(s)
   webmaster/password from 200.30.136.146: 5 Time(s)

Illegal users from these:
   admin/none from 200.30.136.146: 5 Time(s)
   admin/none from 61.164.147.5: 1 Time(s)
   admin/password from 200.30.136.146: 5 Time(s)
   admin/password from 61.164.147.5: 1 Time(s)
   admin1/none from 82.76.35.78: 4 Time(s)
   admin1/password from 82.76.35.78: 4 Time(s)
   admin2/none from 82.76.35.78: 4 Time(s)
   admin2/password from 82.76.35.78: 4 Time(s)
   admin3/none from 82.76.35.78: 4 Time(s)
   admin3/password from 82.76.35.78: 4 Time(s)
   admin4/none from 82.76.35.78: 4 Time(s)
   admin4/password from 82.76.35.78: 4 Time(s)
   administrator/none from 200.30.136.146: 3 Time(s)
   administrator/password from 200.30.136.146: 3 Time(s)
   ale/none from 203.129.255.188: 1 Time(s)
   ale/password from 203.129.255.188: 1 Time(s)
   alias/password from 200.30.136.146: 5 Time(s)
   apache/none from 200.30.136.146: 5 Time(s)
   apache/password from 200.30.136.146: 5 Time(s)
   ashwini/none from 88.191.97.219: 4 Time(s)
   ashwini/password from 88.191.97.219: 4 Time(s)
   cnasftp/none from 88.191.97.219: 2 Time(s)
   cnasftp/password from 88.191.97.219: 2 Time(s)
   condor/none from 216.226.227.5: 3 Time(s)
   condor/password from 216.226.227.5: 3 Time(s)
   contribute/none from 88.191.97.219: 2 Time(s)
   contribute/password from 88.191.97.219: 2 Time(s)
   core/none from 200.30.136.146: 5 Time(s)
   core/password from 200.30.136.146: 5 Time(s)
   cyrus/none from 200.30.136.146: 5 Time(s)
   cyrus/password from 200.30.136.146: 5 Time(s)
   d13943/none from 88.191.97.219: 2 Time(s)
   d13943/password from 88.191.97.219: 2 Time(s)
   david/none from 200.30.136.146: 5 Time(s)
   david/password from 200.30.136.146: 5 Time(s)
   dilli/none from 203.129.255.188: 1 Time(s)
   dilli/none from 218.248.24.20: 3 Time(s)
   dilli/password from 203.129.255.188: 1 Time(s)
   dilli/password from 218.248.24.20: 3 Time(s)
   etienk/none from 88.191.97.219: 4 Time(s)
   etienk/password from 88.191.97.219: 4 Time(s)
   ftpuser/none from 200.30.136.146: 4 Time(s)
   ftpuser/password from 200.30.136.146: 4 Time(s)
   globus/none from 216.226.227.5: 5 Time(s)
   globus/password from 216.226.227.5: 5 Time(s)
   guest/none from 200.30.136.146: 5 Time(s)
   guest/password from 200.30.136.146: 5 Time(s)
   harrisi/none from 88.191.97.219: 6 Time(s)
   harrisi/password from 88.191.97.219: 6 Time(s)
   info/none from 200.30.136.146: 5 Time(s)
   info/password from 200.30.136.146: 5 Time(s)
   janus/none from 88.191.97.219: 6 Time(s)
   janus/password from 88.191.97.219: 6 Time(s)
   jirka/none from 88.191.97.219: 4 Time(s)
   jirka/password from 88.191.97.219: 4 Time(s)
   library/none from 200.30.136.146: 1 Time(s)
   library/password from 200.30.136.146: 1 Time(s)
   linux/none from 200.30.136.146: 5 Time(s)
   linux/password from 200.30.136.146: 5 Time(s)
   mantis/none from 88.191.97.219: 6 Time(s)
   mantis/password from 88.191.97.219: 6 Time(s)
   mayomo/none from 88.191.97.219: 4 Time(s)
   mayomo/password from 88.191.97.219: 4 Time(s)
   michael/none from 200.30.136.146: 5 Time(s)
   michael/password from 200.30.136.146: 5 Time(s)
   monster/none from 88.191.97.219: 2 Time(s)
   monster/password from 88.191.97.219: 2 Time(s)
   named/none from 200.30.136.146: 5 Time(s)
   named/password from 200.30.136.146: 5 Time(s)
   newsletter/none from 200.30.136.146: 5 Time(s)
   newsletter/password from 200.30.136.146: 5 Time(s)
   office/none from 200.30.136.146: 5 Time(s)
   office/password from 200.30.136.146: 5 Time(s)
   oracle/none from 123.233.245.226: 3 Time(s)
   oracle/none from 200.30.136.146: 5 Time(s)
   oracle/password from 123.233.245.226: 3 Time(s)
   oracle/password from 200.30.136.146: 5 Time(s)
   paul/none from 200.30.136.146: 5 Time(s)
   paul/password from 200.30.136.146: 5 Time(s)
   pgsql/none from 200.30.136.146: 5 Time(s)
   pgsql/password from 200.30.136.146: 5 Time(s)
   postfix/none from 200.30.136.146: 5 Time(s)
   postfix/password from 200.30.136.146: 5 Time(s)
   postmaster/none from 200.30.136.146: 5 Time(s)
   postmaster/password from 200.30.136.146: 5 Time(s)
   rajjw/none from 88.191.97.219: 2 Time(s)
   rajjw/password from 88.191.97.219: 2 Time(s)
   recruit/none from 200.30.136.146: 5 Time(s)
   recruit/password from 200.30.136.146: 5 Time(s)
   robust/none from 88.191.97.219: 3 Time(s)
   robust/password from 88.191.97.219: 3 Time(s)
   sales/none from 200.30.136.146: 5 Time(s)
   sales/password from 200.30.136.146: 5 Time(s)
   samba/none from 200.30.136.146: 5 Time(s)
   samba/password from 200.30.136.146: 5 Time(s)
   simoni/none from 203.129.255.188: 1 Time(s)
   simoni/none from 218.248.24.20: 3 Time(s)
   simoni/password from 203.129.255.188: 1 Time(s)
   simoni/password from 218.248.24.20: 3 Time(s)
   smbtest/none from 88.191.97.219: 4 Time(s)
   smbtest/password from 88.191.97.219: 4 Time(s)
   spam/none from 200.30.136.146: 5 Time(s)
   spam/password from 200.30.136.146: 5 Time(s)
   staff/none from 200.30.136.146: 5 Time(s)
   staff/password from 200.30.136.146: 5 Time(s)
   test/none from 123.233.245.226: 3 Time(s)
   test/none from 200.30.136.146: 6 Time(s)
   test/none from 82.76.35.78: 4 Time(s)
   test/password from 123.233.245.226: 3 Time(s)
   test/password from 200.30.136.146: 6 Time(s)
   test/password from 82.76.35.78: 4 Time(s)
   test1/none from 82.76.35.78: 4 Time(s)
   test1/password from 82.76.35.78: 4 Time(s)
   test10/none from 82.76.35.78: 4 Time(s)
   test10/password from 82.76.35.78: 4 Time(s)
   test2/none from 82.76.35.78: 4 Time(s)
   test2/password from 82.76.35.78: 4 Time(s)
   test3/none from 82.76.35.78: 4 Time(s)
   test3/password from 82.76.35.78: 4 Time(s)
   test4/none from 82.76.35.78: 4 Time(s)
   test4/password from 82.76.35.78: 4 Time(s)
   test5/none from 82.76.35.78: 4 Time(s)
   test5/password from 82.76.35.78: 4 Time(s)
   test6/none from 82.76.35.78: 4 Time(s)
   test6/password from 82.76.35.78: 4 Time(s)
   test7/none from 82.76.35.78: 4 Time(s)
   test7/password from 82.76.35.78: 4 Time(s)
   test8/none from 82.76.35.78: 4 Time(s)
   test8/password from 82.76.35.78: 4 Time(s)
   test9/none from 82.76.35.78: 4 Time(s)
   test9/password from 82.76.35.78: 4 Time(s)
   tomcat/none from 200.30.136.146: 5 Time(s)
   tomcat/none from 216.226.227.5: 2 Time(s)
   tomcat/password from 200.30.136.146: 5 Time(s)
   tomcat/password from 216.226.227.5: 2 Time(s)
   tony/none from 200.30.136.146: 5 Time(s)
   tony/password from 200.30.136.146: 5 Time(s)
   user/none from 200.30.136.146: 5 Time(s)
   user/password from 200.30.136.146: 5 Time(s)
   username/none from 200.30.136.146: 4 Time(s)
   username/password from 200.30.136.146: 4 Time(s)
   virus/none from 200.30.136.146: 5 Time(s)
   virus/password from 200.30.136.146: 5 Time(s)
   visitor/none from 200.30.136.146: 4 Time(s)
   visitor/password from 200.30.136.146: 4 Time(s)
   web/none from 200.30.136.146: 5 Time(s)
   web/password from 200.30.136.146: 5 Time(s)
   webadmin/none from 200.30.136.146: 5 Time(s)
   webadmin/password from 200.30.136.146: 5 Time(s)
   webmaster/none from 200.30.136.146: 5 Time(s)
   webmaster/password from 200.30.136.146: 5 Time(s)

User login attempt failed because:
   shell /sbin/nologin does not exist:
      alias : 5 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   53G   16G  78% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list