[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Sun Mar 1 06:25:47 CST 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Sun Mar  1 06:25:30 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.17 MB transfered in 638 responses  (1xx 0, 2xx 0, 3xx 49, 4xx 589, 5xx 0) 
 77 Images (0.02 MB),
 9 Documents (0.00 MB),
 2 Archives (0.00 MB),
 469 Content pages (0.13 MB),
 2 Program source files (0.00 MB),
 79 Other (0.02 MB) 

A total of 38 unidentified 'other' records logged
  GET /jeff/code/modified_pre_blocks.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /webdad/testing/day_scheduler.html, HTTP/1.1 with response code(s) 1 404 responses
  GET /arijit/dw_ext HTTP/1.1 with response code(s) 1 404 responses
  GET /doofs/... HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/ll tell you. If you look in constants.php you HTTP/1.1 with response code(s) 2 400 responses
  GET /tos.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/49 HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/, make sure your database name and password information is specified correctly in constants.php. If you still can HTTP/1.1 with response code(s) 2 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 9 400 responses
  GET /StOne HTTP/1.0 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.test0:) HTTP/1.1 with response code(s) 3 400 responses
  GET /burhankhalid/index.rdf HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/js_cgi_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /seb HTTP/1.1 with response code(s) 1 404 responses
  GET /article/comment/17/60265/index.html\" class=http://niltonka.sites.uol.com.br/envio01.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/35 HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=71 HTTP/1.0 with response code(s) 1 404 responses
  GET /djc/stdio HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  - with response code(s) 21 408 responses
  GET /burhankhalid HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 2 404 responses
  GET /jeff/wip/photoshop/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mwarden/weblog HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=71 HTTP/1.1 with response code(s) 1 404 responses
  GET /article/incoming_mail_and_php/18/27914/index.html\" class=http://niltonka.sites.uol.com.br/envio01.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /php-login-system-with-admin-features\" class=http://niltonka.sites.uol.com.br/envio01.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 5 404 responses
  GET /php_login_script_with_remember_me_feature\" class=http://niltonka.sites.uol.com.br/envio01.txt? HTTP/1.1 with response code(s) 3 400 responses
  GET /isaac/photos/index.cfm?currentnum=20 HTTP/1.1 with response code(s) 1 404 responses
  GET /node/55650\" class=http://niltonka.sites.uol.com.br/envio01.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/CHANGELOG?hideattic=0&only_with_tag=v2_0_0 HTTP/1.1 with response code(s) 1 404 responses

A total of 12 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 6 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      Sosospider+(+http://help.soso.com/webspider.htm) 1 time(s) 
      larbin_2.6.3 (larbin2.6.3 at unspecified.mail) 1 time(s) 
      Mail.Ru/1.0 1 time(s) 
      msnbot-media/1.1 (+http://search.msn.com/msnbot.htm) 2 time(s) 
      org_viewer (larbin2.6.3 at unspecified.mail) 2 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 1 time(s) 
      TurnitinBot/2.1 (http://www.turnitin.com/robot/crawlerinfo.html) 1 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 16 time(s) 
      Mozilla/5.0 (compatible; ScoutJet; +http://www.scoutjet.com/) 1 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 3 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:13989/80 shrinks window 2009693015:2009697359. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:22128/80 shrinks window 1675050756:1675052204. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:24468/80 shrinks window 1613332394:1613335290. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:24468/80 shrinks window 1613410586:1613414930. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:33126/80 shrinks window 1921648744:1921650192. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:33126/80 shrinks window 1921676256:1921677704. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:56443/80 shrinks window 1801606685:1801608133. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:56840/80 shrinks window 1896215289:1896216737. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:56840/80 shrinks window 1896273209:1896276105. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.112:64455/80 shrinks window 1695701580:1695703028. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:22498/80 shrinks window 687087002:687091346. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:24405/80 shrinks window 2823882778:2823884226. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:26865/80 shrinks window 798328324:798329772. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:27750/80 shrinks window 636778676:636781572. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:31448/80 shrinks window 109600327:109601775. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:33584/80 shrinks window 2889255766:2889257214. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:34092/80 shrinks window 1521840158:1521844502. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:35761/80 shrinks window 713402552:713406896. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:40127/80 shrinks window 2848133852:2848135300. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:41239/80 shrinks window 4128307423:4128310319. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:41239/80 shrinks window 4128333487:4128334935. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:41825/80 shrinks window 78283750:78285198. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:46913/80 shrinks window 1224126915:1224128363. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:56729/80 shrinks window 1554379044:1554380492. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:59660/80 shrinks window 3849513881:3849517186. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:59791/80 shrinks window 1330954354:1330955802. Repaired.
1 Time(s): TCP: Treason uncloaked! Peer 38.108.180.43:64419/80 shrinks window 2587123935:2587125383. Repaired.
2 Time(s): TCP: Treason uncloaked! Peer 38.108.180.73:47105/80 shrinks window 2576234699:2576237595. Repaired.
1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 366 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      unknown (s01060014d15c5152.cg.shawcable.net): 1 Time(s)
   Invalid Users:
      Unknown Account: 1 Time(s)
   Sessions Opened:
      dmah: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)
      dmah(uid=0) -> root: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Didn't receive an ident from these IPs:
   58.62.125.162: 5 Time(s)
   62.81.178.61.dail.lz.gs.dynamic.163data.com.cn (61.178.81.62): 3 Time(s)
   74-212-202-181.static-ip.telepacific.net (74.212.202.181): 14 Time(s)
   83.216.14.172: 5 Time(s)
   85-125-129-115.neutorgasse.xdsl-line.inode.at (85.125.129.115): 4 Time(s)

Failed logins from these:
   accept/password from 74.212.202.181: 1 Time(s)
   addicted/password from 74.212.202.181: 2 Time(s)
   admin/password from 58.62.125.162: 2 Time(s)
   admin/password from 85.125.129.115: 16 Time(s)
   apple/password from 85.125.129.115: 3 Time(s)
   ashwini/password from 88.191.97.219: 6 Time(s)
   b1ablo/password from 74.212.202.181: 5 Time(s)
   baggio/password from 74.212.202.181: 4 Time(s)
   blue/password from 74.212.202.181: 2 Time(s)
   boootz/password from 74.212.202.181: 1 Time(s)
   boot/password from 74.212.202.181: 1 Time(s)
   bot/password from 74.212.202.181: 1 Time(s)
   bots/password from 74.212.202.181: 1 Time(s)
   cnasftp/password from 88.191.97.219: 3 Time(s)
   contribute/password from 88.191.97.219: 3 Time(s)
   d13943/password from 88.191.97.219: 3 Time(s)
   deanm/keyboard-interactive/pam from 70.72.12.124: 1 Time(s)
   deanm/none from 70.72.12.124: 1 Time(s)
   diablo/password from 74.212.202.181: 5 Time(s)
   etienk/password from 88.191.97.219: 6 Time(s)
   fast/password from 74.212.202.181: 1 Time(s)
   file/password from 74.212.202.181: 1 Time(s)
   fluffy/password from 58.62.125.162: 2 Time(s)
   globe/password from 74.212.202.181: 3 Time(s)
   guest/password from 58.62.125.162: 2 Time(s)
   hacker/password from 74.212.202.181: 1 Time(s)
   harrisi/password from 88.191.97.219: 6 Time(s)
   info/password from 58.62.125.162: 1 Time(s)
   itschool/password from 74.212.202.181: 5 Time(s)
   janus/password from 88.191.97.219: 6 Time(s)
   jirka/password from 88.191.97.219: 6 Time(s)
   kim/password from 74.212.202.181: 3 Time(s)
   left/password from 74.212.202.181: 1 Time(s)
   leo/password from 74.212.202.181: 1 Time(s)
   library/password from 58.62.125.162: 1 Time(s)
   linux/password from 58.62.125.162: 1 Time(s)
   logic/password from 74.212.202.181: 5 Time(s)
   mail/password from 85.125.129.115: 17 Time(s)
   mantis/password from 88.191.97.219: 9 Time(s)
   mayomo/password from 88.191.97.219: 6 Time(s)
   monster/password from 88.191.97.219: 3 Time(s)
   mysql/password from 58.62.125.162: 1 Time(s)
   natasha/password from 74.212.202.181: 4 Time(s)
   nina/password from 74.212.202.181: 1 Time(s)
   olga/password from 74.212.202.181: 1 Time(s)
   oracle/password from 209.234.173.9: 5 Time(s)
   oracle/password from 58.62.125.162: 1 Time(s)
   oscar/password from 74.212.202.181: 3 Time(s)
   paradise/password from 74.212.202.181: 5 Time(s)
   paradisse/password from 74.212.202.181: 5 Time(s)
   pink/password from 74.212.202.181: 2 Time(s)
   postgres/password from 74.212.202.181: 2 Time(s)
   rajjw/password from 88.191.97.219: 3 Time(s)
   red/password from 74.212.202.181: 2 Time(s)
   right/password from 74.212.202.181: 1 Time(s)
   roberto/password from 74.212.202.181: 3 Time(s)
   robust/password from 88.191.97.219: 3 Time(s)
   root/password from 209.234.173.9: 65 Time(s)
   root/password from 58.62.125.162: 3 Time(s)
   root/password from 74.212.202.181: 21 Time(s)
   root/password from 85.125.129.115: 26 Time(s)
   root/password from 88.191.97.219: 82 Time(s)
   root/password from 92.241.176.8: 50 Time(s)
   serve/password from 74.212.202.181: 1 Time(s)
   shell/password from 58.62.125.162: 1 Time(s)
   simbol/password from 74.212.202.181: 3 Time(s)
   smbtest/password from 88.191.97.219: 6 Time(s)
   space/password from 74.212.202.181: 3 Time(s)
   t1na/password from 74.212.202.181: 10 Time(s)
   test/password from 209.234.173.9: 5 Time(s)
   test/password from 58.62.125.162: 2 Time(s)
   test/password from 74.212.202.181: 7 Time(s)
   test/password from 85.125.129.115: 16 Time(s)
   user/password from 85.125.129.115: 24 Time(s)
   user1/password from 85.125.129.115: 32 Time(s)
   vanheeren/password from 88.191.97.219: 1 Time(s)
   vic/password from 74.212.202.181: 2 Time(s)
   vicky/password from 74.212.202.181: 1 Time(s)
   walter/password from 74.212.202.181: 1 Time(s)
   webmaster/password from 58.62.125.162: 2 Time(s)
   zeppelin/password from 74.212.202.181: 1 Time(s)

Illegal users from these:
   accept/none from 74.212.202.181: 1 Time(s)
   accept/password from 74.212.202.181: 1 Time(s)
   addicted/none from 74.212.202.181: 2 Time(s)
   addicted/password from 74.212.202.181: 2 Time(s)
   admin/none from 58.62.125.162: 2 Time(s)
   admin/none from 85.125.129.115: 16 Time(s)
   admin/password from 58.62.125.162: 2 Time(s)
   admin/password from 85.125.129.115: 16 Time(s)
   apple/none from 85.125.129.115: 3 Time(s)
   apple/password from 85.125.129.115: 3 Time(s)
   ashwini/none from 88.191.97.219: 6 Time(s)
   ashwini/password from 88.191.97.219: 6 Time(s)
   b1ablo/none from 74.212.202.181: 5 Time(s)
   b1ablo/password from 74.212.202.181: 5 Time(s)
   baggio/none from 74.212.202.181: 4 Time(s)
   baggio/password from 74.212.202.181: 4 Time(s)
   blue/none from 74.212.202.181: 2 Time(s)
   blue/password from 74.212.202.181: 2 Time(s)
   boootz/none from 74.212.202.181: 1 Time(s)
   boootz/password from 74.212.202.181: 1 Time(s)
   boot/none from 74.212.202.181: 1 Time(s)
   boot/password from 74.212.202.181: 1 Time(s)
   bot/none from 74.212.202.181: 1 Time(s)
   bot/password from 74.212.202.181: 1 Time(s)
   bots/none from 74.212.202.181: 1 Time(s)
   bots/password from 74.212.202.181: 1 Time(s)
   cnasftp/none from 88.191.97.219: 3 Time(s)
   cnasftp/password from 88.191.97.219: 3 Time(s)
   contribute/none from 88.191.97.219: 3 Time(s)
   contribute/password from 88.191.97.219: 3 Time(s)
   d13943/none from 88.191.97.219: 3 Time(s)
   d13943/password from 88.191.97.219: 3 Time(s)
   deanm/keyboard-interactive/pam from 70.72.12.124: 1 Time(s)
   deanm/none from 70.72.12.124: 2 Time(s)
   diablo/none from 74.212.202.181: 5 Time(s)
   diablo/password from 74.212.202.181: 5 Time(s)
   etienk/none from 88.191.97.219: 6 Time(s)
   etienk/password from 88.191.97.219: 6 Time(s)
   fast/none from 74.212.202.181: 1 Time(s)
   fast/password from 74.212.202.181: 1 Time(s)
   file/none from 74.212.202.181: 1 Time(s)
   file/password from 74.212.202.181: 1 Time(s)
   fluffy/none from 58.62.125.162: 2 Time(s)
   fluffy/password from 58.62.125.162: 2 Time(s)
   globe/none from 74.212.202.181: 3 Time(s)
   globe/password from 74.212.202.181: 3 Time(s)
   guest/none from 58.62.125.162: 2 Time(s)
   guest/password from 58.62.125.162: 2 Time(s)
   hacker/none from 74.212.202.181: 1 Time(s)
   hacker/password from 74.212.202.181: 1 Time(s)
   harrisi/none from 88.191.97.219: 6 Time(s)
   harrisi/password from 88.191.97.219: 6 Time(s)
   info/none from 58.62.125.162: 1 Time(s)
   info/password from 58.62.125.162: 1 Time(s)
   itschool/none from 74.212.202.181: 5 Time(s)
   itschool/password from 74.212.202.181: 5 Time(s)
   janus/none from 88.191.97.219: 6 Time(s)
   janus/password from 88.191.97.219: 6 Time(s)
   jirka/none from 88.191.97.219: 6 Time(s)
   jirka/password from 88.191.97.219: 6 Time(s)
   kim/none from 74.212.202.181: 3 Time(s)
   kim/password from 74.212.202.181: 3 Time(s)
   left/none from 74.212.202.181: 1 Time(s)
   left/password from 74.212.202.181: 1 Time(s)
   leo/none from 74.212.202.181: 1 Time(s)
   leo/password from 74.212.202.181: 1 Time(s)
   library/none from 58.62.125.162: 1 Time(s)
   library/password from 58.62.125.162: 1 Time(s)
   linux/none from 58.62.125.162: 1 Time(s)
   linux/password from 58.62.125.162: 1 Time(s)
   logic/none from 74.212.202.181: 5 Time(s)
   logic/password from 74.212.202.181: 5 Time(s)
   mantis/none from 88.191.97.219: 9 Time(s)
   mantis/password from 88.191.97.219: 9 Time(s)
   mayomo/none from 88.191.97.219: 6 Time(s)
   mayomo/password from 88.191.97.219: 6 Time(s)
   monster/none from 88.191.97.219: 3 Time(s)
   monster/password from 88.191.97.219: 3 Time(s)
   natasha/none from 74.212.202.181: 4 Time(s)
   natasha/password from 74.212.202.181: 4 Time(s)
   nina/none from 74.212.202.181: 1 Time(s)
   nina/password from 74.212.202.181: 1 Time(s)
   olga/none from 74.212.202.181: 1 Time(s)
   olga/password from 74.212.202.181: 1 Time(s)
   oracle/none from 209.234.173.9: 5 Time(s)
   oracle/none from 58.62.125.162: 1 Time(s)
   oracle/password from 209.234.173.9: 5 Time(s)
   oracle/password from 58.62.125.162: 1 Time(s)
   oscar/none from 74.212.202.181: 3 Time(s)
   oscar/password from 74.212.202.181: 3 Time(s)
   paradise/none from 74.212.202.181: 5 Time(s)
   paradise/password from 74.212.202.181: 5 Time(s)
   paradisse/none from 74.212.202.181: 5 Time(s)
   paradisse/password from 74.212.202.181: 5 Time(s)
   pink/none from 74.212.202.181: 2 Time(s)
   pink/password from 74.212.202.181: 2 Time(s)
   rajjw/none from 88.191.97.219: 3 Time(s)
   rajjw/password from 88.191.97.219: 3 Time(s)
   red/none from 74.212.202.181: 2 Time(s)
   red/password from 74.212.202.181: 2 Time(s)
   right/none from 74.212.202.181: 1 Time(s)
   right/password from 74.212.202.181: 1 Time(s)
   roberto/none from 74.212.202.181: 3 Time(s)
   roberto/password from 74.212.202.181: 3 Time(s)
   robust/none from 88.191.97.219: 3 Time(s)
   robust/password from 88.191.97.219: 3 Time(s)
   serve/none from 74.212.202.181: 1 Time(s)
   serve/password from 74.212.202.181: 1 Time(s)
   shell/none from 58.62.125.162: 1 Time(s)
   shell/password from 58.62.125.162: 1 Time(s)
   simbol/none from 74.212.202.181: 3 Time(s)
   simbol/password from 74.212.202.181: 3 Time(s)
   smbtest/none from 88.191.97.219: 6 Time(s)
   smbtest/password from 88.191.97.219: 6 Time(s)
   space/none from 74.212.202.181: 3 Time(s)
   space/password from 74.212.202.181: 3 Time(s)
   t1na/none from 74.212.202.181: 10 Time(s)
   t1na/password from 74.212.202.181: 10 Time(s)
   test/none from 209.234.173.9: 5 Time(s)
   test/none from 58.62.125.162: 2 Time(s)
   test/none from 74.212.202.181: 7 Time(s)
   test/none from 85.125.129.115: 16 Time(s)
   test/password from 209.234.173.9: 5 Time(s)
   test/password from 58.62.125.162: 2 Time(s)
   test/password from 74.212.202.181: 7 Time(s)
   test/password from 85.125.129.115: 16 Time(s)
   user/none from 85.125.129.115: 24 Time(s)
   user/password from 85.125.129.115: 24 Time(s)
   user1/none from 85.125.129.115: 32 Time(s)
   user1/password from 85.125.129.115: 32 Time(s)
   vanheeren/none from 88.191.97.219: 1 Time(s)
   vanheeren/password from 88.191.97.219: 1 Time(s)
   vic/none from 74.212.202.181: 2 Time(s)
   vic/password from 74.212.202.181: 2 Time(s)
   vicky/none from 74.212.202.181: 1 Time(s)
   vicky/password from 74.212.202.181: 1 Time(s)
   walter/none from 74.212.202.181: 1 Time(s)
   walter/password from 74.212.202.181: 1 Time(s)
   webmaster/none from 58.62.125.162: 2 Time(s)
   webmaster/password from 58.62.125.162: 2 Time(s)
   zeppelin/none from 74.212.202.181: 1 Time(s)
   zeppelin/password from 74.212.202.181: 1 Time(s)

Users logging in through sshd:
   dmah:
      S01060014d15c5152.cg.shawcable.net (70.72.12.124): 1 time

Error in PAM authentication:
   User not known to the underlying authentication module for illegal user deanm from s01060014d15c5152.cg.shawcable.net : 1 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
dmah => root
------------------------------------------------------------------------------
/bin/su -

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   53G   16G  78% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list