[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Fri Jan 23 06:25:28 CST 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Fri Jan 23 06:25:16 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

1.93 MB transfered in 832 responses  (1xx 0, 2xx 2, 3xx 46, 4xx 784, 5xx 0) 
 28 Images (0.01 MB),
 8 Documents (0.00 MB),
 2 Archives (0.00 MB),
 1 Movies files (0.00 MB),
 680 Content pages (1.89 MB),
 10 Program source files (0.00 MB),
 103 Other (0.03 MB) 

Attempts to use 2 known hacks were logged 19 time(s)
  /../../../   by 
          200.207.167.50 1 time(s) 
  phpmyadmin   by 
          216.144.235.254 9 time(s) 
          64.22.75.170 9 time(s) 

A total of 3 sites probed the server 
  216.144.235.254  
  200.207.167.50  
  64.22.75.170  

A total of 58 unidentified 'other' records logged
  GET /roundcubemail-0.2/bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  GET /shaggy HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/modified_pre_blocks.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /marceloslg HTTP/1.1 with response code(s) 1 404 responses
  GET /tweak HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?view=graph&sortby=author&only_with_tag=MAIN HTTP/1.1 with response code(s) 1 404 responses
  GET /luminosity? HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?rev=1.1&content-type=text/vnd.viewcvs-markup&hideattic=0&only_with_tag=HEAD HTTP/1.1 with response code(s) 1 404 responses
  GET /tuxhedoh/cgi-bin/mt/import/mt-export HTTP/1.1 with response code(s) 1 404 responses
  GET /jesteruk HTTP/1.1 with response code(s) 1 404 responses
  GET /bumblelee HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /roundcubemail-0.1/bin/msgimport HTTP/1.1 with response code(s) 2 404 responses
  GET http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9825598862931734&dt=1232674596280&lmt=1232674332&format=120x600_as&output=html&correlator=1232674596280&channel=1040041585&url=http%3A%2F%2Fbrowsers.evolt.org%2F%3Fopera%2Fwin&color_bg=C6C8CF&color_text=000000&color_link=000000&color_url=869AA4&color_border=869AA4&ea=0&ref=http%3A%2F%2Fbrowsers.evolt.org%2F%3Fopera%2F&frm=0&ga_vid=1810253585.1232674596&ga_sid=1232674596&ga_hid=682540&flash=0&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=24&u_tz=540&u_his=7&u_java=true&u_nplug=4&u_nmime=8&dtd=110 HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /DarthGreg HTTP/1.1 with response code(s) 1 404 responses
  GET /nonexistenshit HTTP/1.1 with response code(s) 2 404 responses
  GET /roundcubemail/bin/msgimport HTTP/1.1 with response code(s) 2 404 responses
  GET /quick_calendar_using_ajax_and_php/version), it would be nice if Bernard would post quick_calendar2.txt for the HTTP/1.1 with response code(s) 2 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /rc/bin/msgimport HTTP/1.1 with response code(s) 5 404 responses
  GET /mwarden HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 5 400 responses
  GET http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9825598862931734&dt=1232674570080&lmt=1232674305&format=120x600_as&output=html&correlator=1232674570080&channel=1040041585&url=http%3A%2F%2Fbrowsers.evolt.org%2F&color_bg=C6C8CF&color_text=000000&color_link=000000&color_url=869AA4&color_border=869AA4&ea=0&ref=http%3A%2F%2Fmelanges.duck.nu%2F2006%2F09%2F17_190729.php&frm=0&ga_vid=332464678.1232674570&ga_sid=1232674570&ga_hid=1541750384&flash=0&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=24&u_tz=540&u_his=5&u_java=true&u_nplug=4&u_nmime=8&dtd=330 HTTP/1.1 with response code(s) 1 404 responses
  GET /burhankhalid/index.rdf HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/rank_select.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /mail/roundcube//bin/msgimport HTTP/1.1 with response code(s) 2 404 responses
  GET /some url HTTP/1.1 with response code(s) 1 400 responses
  GET /roundcube-0.1/bin/msgimport HTTP/1.1 with response code(s) 2 404 responses
  GET /desflynn HTTP/1.1 with response code(s) 1 404 responses
  GET /email/index.cfm?action=detail&cid=15576 HTTP/1.0 with response code(s) 1 404 responses
  GET HTTP/1.1 HTTP/1.1 with response code(s) 2 400 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&r1=1.13&r2=1.22 HTTP/1.1 with response code(s) 1 404 responses
  GET /webmail/bin/msgimport HTTP/1.1 with response code(s) 4 404 responses
  GET /mantruc/blog HTTP/1.0 with response code(s) 3 404 responses
  GET http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9825598862931734&dt=1232674587220&lmt=1232674323&format=120x600_as&output=html&correlator=1232674587220&channel=1040041585&url=http%3A%2F%2Fbrowsers.evolt.org%2F%3Fopera%2F&color_bg=C6C8CF&color_text=000000&color_link=000000&color_url=869AA4&color_border=869AA4&ea=0&ref=http%3A%2F%2Fbrowsers.evolt.org%2F&frm=0&ga_vid=877615482.1232674587&ga_sid=1232674587&ga_hid=920452087&flash=0&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=24&u_tz=540&u_his=6&u_java=true&u_nplug=4&u_nmime=8&dtd=50 HTTP/1.1 with response code(s) 1 404 responses
  GET /kroet HTTP/1.1 with response code(s) 1 404 responses
  - with response code(s) 9 408 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mkarchivesize?hideattic=0&sortdir=down&rev=1.12&only_with_tag=MAIN&sortby=author&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/square-bullet.psd?sortby=log&sortdir=down&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET /some url here HTTP/1.1 with response code(s) 1 400 responses
  GET /mail/bin/msgimport HTTP/1.1 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&r1=1.13&r2=1.4 HTTP/1.1 with response code(s) 1 404 responses
  GET /roundcube/bin/msgimport HTTP/1.1 with response code(s) 4 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 2 404 responses
  GET /shaggy/windows/user, HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&r1=1.13&r2=1.23 HTTP/1.1 with response code(s) 1 404 responses
  GET /deadL0ck HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/chkarchivemirror?hideattic=0&sortdir=down&rev=1.9&only_with_tag=MAIN&sortby=date&view=log HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&r1=1.13&r2=1.2 HTTP/1.1 with response code(s) 1 404 responses
  GET /bin/msgimport HTTP/1.1 with response code(s) 4 404 responses
  GET /djc HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 1 404 responses
  GET /0.4/query?id=4bc899b3ff1c5b0848a9cd57171f00aee993d53a&nonce=5c90ed5a2d73d39803982034e961a29983e495ca&target=cQNR%2Bf%2FIBAD%2F%2Bcet&lang=de-DE&version=firefox-20081111&auth=4c512a2923413710fab1b84a4c34c811283c2677 HTTP/1.1 with response code(s) 1 404 responses
  GET /turkif HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60180 with response code(s) 4 404 responses

A total of 9 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 5 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 17 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 1 time(s) 
      Mozilla/5.0 (compatible; Charlotte/1.1; http://www.searchme.com/support/) 1 time(s) 
      Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705) 1 time(s) 
      Sosospider+(+http://help.soso.com/webspider.htm) 1 time(s) 
      Gigabot/3.0 (http://www.gigablast.com/spider.html) 1 time(s) 
      <a href='http://db2-sql.blogspot.com'> DB DB2 ODBC</a>  (support at runnk.com) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 366 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Sessions Opened:
      dmah: 2 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)
      dmah(uid=0) -> root: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   s1.verygoodserver.com: 2 Time(s)

Didn't receive an ident from these IPs:
   62.160.244.213: 5 Time(s)
   91.151.106.54: 5 Time(s)
   bzq-219-24-31.static.bezeqint.net (62.219.24.31): 5 Time(s)
   ip-67-205-71-181.static.privatedns.com (67.205.71.181): 5 Time(s)

Failed logins from these:
   admin/password from 61.250.92.94: 5 Time(s)
   admin/password from 62.160.244.213: 10 Time(s)
   admin/password from 67.205.71.181: 29 Time(s)
   administrator/password from 67.205.71.181: 5 Time(s)
   alex/password from 67.205.71.181: 2 Time(s)
   alias/password from 67.205.71.181: 5 Time(s)
   apache/password from 67.205.71.181: 5 Time(s)
   brett/password from 67.205.71.181: 2 Time(s)
   core/password from 67.205.71.181: 5 Time(s)
   cyrus/password from 67.205.71.181: 5 Time(s)
   danny/password from 67.205.71.181: 2 Time(s)
   david/password from 67.205.71.181: 5 Time(s)
   fluffy/password from 61.250.92.94: 5 Time(s)
   ftp/password from 67.205.71.181: 5 Time(s)
   ftpuser/password from 67.205.71.181: 5 Time(s)
   guest/password from 61.250.92.94: 5 Time(s)
   guest/password from 67.205.71.181: 10 Time(s)
   info/password from 61.250.92.94: 5 Time(s)
   info/password from 67.205.71.181: 5 Time(s)
   library/password from 61.250.92.94: 5 Time(s)
   library/password from 67.205.71.181: 5 Time(s)
   linux/password from 61.250.92.94: 1 Time(s)
   linux/password from 67.205.71.181: 5 Time(s)
   master/password from 67.205.71.181: 5 Time(s)
   michael/password from 67.205.71.181: 5 Time(s)
   mysql/password from 61.250.92.94: 5 Time(s)
   mysql/password from 67.205.71.181: 5 Time(s)
   named/password from 67.205.71.181: 5 Time(s)
   newsletter/password from 67.205.71.181: 5 Time(s)
   office/password from 67.205.71.181: 5 Time(s)
   oracle/password from 61.250.92.94: 5 Time(s)
   oracle/password from 67.205.71.181: 5 Time(s)
   paul/password from 67.205.71.181: 5 Time(s)
   pgsql/password from 67.205.71.181: 5 Time(s)
   postfix/password from 67.205.71.181: 5 Time(s)
   postgres/password from 67.205.71.181: 5 Time(s)
   postmaster/password from 67.205.71.181: 5 Time(s)
   recruit/password from 67.205.71.181: 5 Time(s)
   root/password from 60.199.206.253: 122 Time(s)
   root/password from 61.250.92.94: 5 Time(s)
   root/password from 62.160.244.213: 10 Time(s)
   root/password from 62.219.24.31: 130 Time(s)
   root/password from 67.205.71.181: 55 Time(s)
   root/password from 72.37.245.130: 2 Time(s)
   sales/password from 67.205.71.181: 5 Time(s)
   samba/password from 67.205.71.181: 5 Time(s)
   shell/password from 61.250.92.94: 5 Time(s)
   spam/password from 67.205.71.181: 5 Time(s)
   staff/password from 67.205.71.181: 5 Time(s)
   test/password from 61.250.92.94: 5 Time(s)
   test/password from 62.160.244.213: 10 Time(s)
   test/password from 67.205.71.181: 19 Time(s)
   tomcat/password from 67.205.71.181: 5 Time(s)
   tony/password from 67.205.71.181: 5 Time(s)
   user/password from 62.160.244.213: 9 Time(s)
   user/password from 67.205.71.181: 8 Time(s)
   user1/password from 62.160.244.213: 3 Time(s)
   username/password from 67.205.71.181: 8 Time(s)
   virus/password from 67.205.71.181: 5 Time(s)
   visitor/password from 67.205.71.181: 5 Time(s)
   web/password from 67.205.71.181: 5 Time(s)
   webadmin/password from 67.205.71.181: 5 Time(s)
   webmaster/password from 61.250.92.94: 5 Time(s)
   webmaster/password from 67.205.71.181: 8 Time(s)

Illegal users from these:
   admin/none from 61.250.92.94: 5 Time(s)
   admin/none from 62.160.244.213: 10 Time(s)
   admin/none from 67.205.71.181: 29 Time(s)
   admin/password from 61.250.92.94: 5 Time(s)
   admin/password from 62.160.244.213: 10 Time(s)
   admin/password from 67.205.71.181: 29 Time(s)
   administrator/none from 67.205.71.181: 5 Time(s)
   administrator/password from 67.205.71.181: 5 Time(s)
   alex/none from 67.205.71.181: 2 Time(s)
   alex/password from 67.205.71.181: 2 Time(s)
   alias/password from 67.205.71.181: 5 Time(s)
   apache/none from 67.205.71.181: 5 Time(s)
   apache/password from 67.205.71.181: 5 Time(s)
   brett/none from 67.205.71.181: 2 Time(s)
   brett/password from 67.205.71.181: 2 Time(s)
   core/none from 67.205.71.181: 5 Time(s)
   core/password from 67.205.71.181: 5 Time(s)
   cyrus/none from 67.205.71.181: 5 Time(s)
   cyrus/password from 67.205.71.181: 5 Time(s)
   danny/none from 67.205.71.181: 2 Time(s)
   danny/password from 67.205.71.181: 2 Time(s)
   david/none from 67.205.71.181: 5 Time(s)
   david/password from 67.205.71.181: 5 Time(s)
   fluffy/none from 61.250.92.94: 5 Time(s)
   fluffy/password from 61.250.92.94: 5 Time(s)
   ftpuser/none from 67.205.71.181: 5 Time(s)
   ftpuser/password from 67.205.71.181: 5 Time(s)
   guest/none from 61.250.92.94: 5 Time(s)
   guest/none from 67.205.71.181: 10 Time(s)
   guest/password from 61.250.92.94: 5 Time(s)
   guest/password from 67.205.71.181: 10 Time(s)
   info/none from 61.250.92.94: 5 Time(s)
   info/none from 67.205.71.181: 5 Time(s)
   info/password from 61.250.92.94: 5 Time(s)
   info/password from 67.205.71.181: 5 Time(s)
   library/none from 61.250.92.94: 5 Time(s)
   library/none from 67.205.71.181: 5 Time(s)
   library/password from 61.250.92.94: 5 Time(s)
   library/password from 67.205.71.181: 5 Time(s)
   linux/none from 61.250.92.94: 1 Time(s)
   linux/none from 67.205.71.181: 5 Time(s)
   linux/password from 61.250.92.94: 1 Time(s)
   linux/password from 67.205.71.181: 5 Time(s)
   master/none from 67.205.71.181: 5 Time(s)
   master/password from 67.205.71.181: 5 Time(s)
   michael/none from 67.205.71.181: 5 Time(s)
   michael/password from 67.205.71.181: 5 Time(s)
   named/none from 67.205.71.181: 5 Time(s)
   named/password from 67.205.71.181: 5 Time(s)
   newsletter/none from 67.205.71.181: 5 Time(s)
   newsletter/password from 67.205.71.181: 5 Time(s)
   office/none from 67.205.71.181: 5 Time(s)
   office/password from 67.205.71.181: 5 Time(s)
   oracle/none from 61.250.92.94: 5 Time(s)
   oracle/none from 67.205.71.181: 5 Time(s)
   oracle/password from 61.250.92.94: 5 Time(s)
   oracle/password from 67.205.71.181: 5 Time(s)
   paul/none from 67.205.71.181: 5 Time(s)
   paul/password from 67.205.71.181: 5 Time(s)
   pgsql/none from 67.205.71.181: 5 Time(s)
   pgsql/password from 67.205.71.181: 5 Time(s)
   postfix/none from 67.205.71.181: 5 Time(s)
   postfix/password from 67.205.71.181: 5 Time(s)
   postmaster/none from 67.205.71.181: 5 Time(s)
   postmaster/password from 67.205.71.181: 5 Time(s)
   recruit/none from 67.205.71.181: 5 Time(s)
   recruit/password from 67.205.71.181: 5 Time(s)
   sales/none from 67.205.71.181: 5 Time(s)
   sales/password from 67.205.71.181: 5 Time(s)
   samba/none from 67.205.71.181: 5 Time(s)
   samba/password from 67.205.71.181: 5 Time(s)
   shell/none from 61.250.92.94: 5 Time(s)
   shell/password from 61.250.92.94: 5 Time(s)
   spam/none from 67.205.71.181: 5 Time(s)
   spam/password from 67.205.71.181: 5 Time(s)
   staff/none from 67.205.71.181: 5 Time(s)
   staff/password from 67.205.71.181: 5 Time(s)
   test/none from 61.250.92.94: 5 Time(s)
   test/none from 62.160.244.213: 10 Time(s)
   test/none from 67.205.71.181: 19 Time(s)
   test/password from 61.250.92.94: 5 Time(s)
   test/password from 62.160.244.213: 10 Time(s)
   test/password from 67.205.71.181: 19 Time(s)
   tomcat/none from 67.205.71.181: 5 Time(s)
   tomcat/password from 67.205.71.181: 5 Time(s)
   tony/none from 67.205.71.181: 5 Time(s)
   tony/password from 67.205.71.181: 5 Time(s)
   user/none from 62.160.244.213: 9 Time(s)
   user/none from 67.205.71.181: 8 Time(s)
   user/password from 62.160.244.213: 9 Time(s)
   user/password from 67.205.71.181: 8 Time(s)
   user1/none from 62.160.244.213: 3 Time(s)
   user1/password from 62.160.244.213: 3 Time(s)
   username/none from 67.205.71.181: 8 Time(s)
   username/password from 67.205.71.181: 8 Time(s)
   virus/none from 67.205.71.181: 5 Time(s)
   virus/password from 67.205.71.181: 5 Time(s)
   visitor/none from 67.205.71.181: 5 Time(s)
   visitor/password from 67.205.71.181: 5 Time(s)
   web/none from 67.205.71.181: 5 Time(s)
   web/password from 67.205.71.181: 5 Time(s)
   webadmin/none from 67.205.71.181: 5 Time(s)
   webadmin/password from 67.205.71.181: 5 Time(s)
   webmaster/none from 61.250.92.94: 5 Time(s)
   webmaster/none from 67.205.71.181: 8 Time(s)
   webmaster/password from 61.250.92.94: 5 Time(s)
   webmaster/password from 67.205.71.181: 8 Time(s)

User login attempt failed because:
   shell /sbin/nologin does not exist:
      alias : 5 Time(s)

Users logging in through sshd:
   dmah:
      S01060014d15c5152.cg.shawcable.net (70.72.12.124): 2 times

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
dmah => root
------------------------------------------------------------------------------
/bin/su -

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   44G   24G  65% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list