[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Thu Oct 8 06:25:32 CDT 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Thu Oct  8 06:25:15 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

-MsgID: 1MvUeB-0002M9-00: 
	2009-10-07 06:25:37 <= root at tempest.evolt.org U=root P=local S=189607
	2009-10-07 06:28:46 lists.evolt.org [67.19.100.195]: Connection timed out
	2009-10-07 06:28:46 == root at lists.evolt.org <root at tempest.evolt.org> T=local_smtp defer (110): Connection timed out
	2009-10-07 06:28:46 failed to open DB file /var/spool/exim/db/retry: File exists
	2009-10-07 08:09:11 => root at lists.evolt.org <root at tempest.evolt.org> R=passToQmail T=local_smtp H=lists.evolt.org [67.19.100.195]*
	2009-10-07 08:09:11 Completed
-MsgID: 1Mv9ht-0001am-00: 
	2009-10-07 06:28:03 => root at lists.evolt.org <root at tempest.evolt.org> R=passToQmail T=local_smtp H=lists.evolt.org [67.19.100.195]*
	2009-10-07 06:28:03 Completed
2 messages delivered immediately to 2 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

4.33 MB transfered in 478 responses  (1xx 0, 2xx 2, 3xx 41, 4xx 435, 5xx 0) 
 53 Images (0.02 MB),
 8 Documents (0.00 MB),
 2 Archives (0.00 MB),
 265 Content pages (4.27 MB),
 1 Program source files (0.00 MB),
 149 Other (0.04 MB) 

Attempts to use 1 known hacks were logged 12 time(s)
  phpmyadmin   by 
          217.79.182.245 4 time(s) 
          190.146.244.155 8 time(s) 

A total of 2 sites probed the server 
  217.79.182.245  
  190.146.244.155  

A total of 70 unidentified 'other' records logged
  GET /djc/stdio/index.cfm/daddy/show/mommy/94 HTTP/1.1 with response code(s) 2 404 responses
  GET /shaggy/javascript/create_slideshow HTTP/1.1 with response code(s) 1 404 responses
  HEAD /garrett/site/books/factual HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?action=viewpro&uid=207752?authorid=207752?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\" HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\"?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET /webdad/testing/day_scheduler.html, HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67615 HTTP/1.1 with response code(s) 3 404 responses
  GET /mccreath/potatosalad/archives/~amnsnow.mpe HTTP/1.1 with response code(s) 1 404 responses
  GET /doofs/... HTTP/1.1 with response code(s) 1 404 responses
  GET /tags/art+teacher HTTP/1.1 with response code(s) 1 404 responses
  GET /doofs/home.php... HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\"?authorid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\"?club=3&groupid=111:10024&messageid=347106\")\"?club=3&groupid=111:10024&messageid=347106\")\" HTTP/1.0 with response code(s) 3 404 responses
  GET /jeff/code/toggle_tablerows.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /yournamehere HTTP/1.1 with response code(s) 1 404 responses
  GET /php_login_script_with_remember_me_feature#comment-67601 HTTP/1.1 with response code(s) 3 404 responses
  GET /signup.cfm;\" HTTP/1.0 with response code(s) 3 404 responses
  GET /djc/stdio HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/link_accessibility_usability.cfm HTTP/1.0 with response code(s) 1 404 responses
  - with response code(s) 8 408 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders/]. HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/square-bullet-default.gif?rev=1.1&sortby=date&sortdir=down&view=auto HTTP/1.0 with response code(s) 1 404 responses
  GET /arijit HTTP/1.1 with response code(s) 2 404 responses
  GET /luminosity HTTP/1.0 with response code(s) 1 404 responses
  GET /signup.cfm;\"?authorid=207752?authorid=207752?authorid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /dshadovi/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?authorid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /kristyfrey HTTP/1.1 with response code(s) 1 404 responses
  GET /php_login_script_with_remember_me_feature#comment-67600 HTTP/1.1 with response code(s) 3 404 responses
  GET /tempterus HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?action=viewpro&uid=207752?authorid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/evoltorg.psd?rev=1.4&sortby=rev&sortdir=down&view=auto HTTP/1.0 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?action=viewpro&uid=207752?op=NewMedia HTTP/1.0 with response code(s) 2 404 responses
  GET /help/email.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET //node/28241 HTTP/1.1 with response code(s) 3 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 13 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/usericon.png?rev=1.1&view=log&hideattic=0&sortby=author&only_with_tag=HEAD HTTP/1.0 with response code(s) 1 404 responses
  GET /signup.cfm;\"?action=viewpro&uid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/66 HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?authorid=207752?action=viewpro&uid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?authorid=207752?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET /rudy HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=18 HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\"?club=3&groupid=111:10024&messageid=347106\")\" HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?authorid=207752?authorid=207752?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?authorid=207752?op=NewMedia?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET //node/60261 HTTP/1.1 with response code(s) 3 404 responses
  GET /signup.cfm;\"?action=viewpro&uid=207752?action=viewpro&uid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?club=3&groupid=111:10024&messageid=347106\")\"?op=NewMedia?op=NewMedia HTTP/1.0 with response code(s) 3 404 responses
  GET /signup.cfm;\"?authorid=207752?authorid=207752 HTTP/1.0 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/2dhosting.com/description?annotate=1.1&sortby=rev HTTP/1.0 with response code(s) 1 404 responses
  GET /burhankhalid HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 2 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67611 HTTP/1.1 with response code(s) 3 404 responses
  GET //node/60265 HTTP/1.1 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mkarchivesize?r1=1.2&sortby=author&r2=1.12&only_with_tag=MAIN HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/wiki.png?hideattic=0&only_with_tag=MAIN&sortdir=down&view=graph HTTP/1.0 with response code(s) 1 404 responses
  GET /simonc/php/bookmarklet.phps HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60180 with response code(s) 3 404 responses

A total of 13 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 2 time(s) 
      wwwster/1.4 (Beta, mailto:gue at cis.uni-muenchen.de) 1 time(s) 
      Yandex/1.01.001 (compatible; Win16; H) 3 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 3 time(s) 
      Mozilla/5.0 (compatible; DotBot/1.1; http://www.dotnetdotcom.org/, crawler at dotnetdotcom.org) 10 time(s) 
      Mozilla/4.0 1 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 56 time(s) 
      Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) 1 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 4 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 1 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 4 time(s) 
      MLBot (www.metadatalabs.com/mlbot) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): UDP: bad checksum. From 195.149.52.226:4265 to 67.19.100.194:137 ulen 58
1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 366 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      root (bcl02861.empresas.ya.com): 26 Time(s)
      root (211.154.254.120): 21 Time(s)
      root (static-71-242-245-111.phlapa.east.verizon.net): 20 Time(s)
      root (www.pbs-hosting.net): 20 Time(s)
      root (61.131.208.44): 18 Time(s)
      root (200.187.175.38): 16 Time(s)
      root (218.248.69.185): 16 Time(s)
      root (218.248.79.251): 16 Time(s)
      root (59.40.185.208): 16 Time(s)
      root (www.ropsa.com.mx): 16 Time(s)
      root (218.30.57.219): 14 Time(s)
      root (akq2.internetdsl.tpnet.pl): 14 Time(s)
      root (190.146.69.104): 12 Time(s)
      root (218.248.66.185): 12 Time(s)
      root (218.65.103.253): 12 Time(s)
      root (219.134.65.39): 12 Time(s)
      root (100.191.195-77.rev.gaoland.net): 10 Time(s)
      root (116.10.195.5): 10 Time(s)
      root (12.152.56.50): 10 Time(s)
      root (190.146.68.247): 10 Time(s)
      root (195.242.89.99): 10 Time(s)
      root (202.109.10.204): 10 Time(s)
      root (203.141.150.153.static.zoot.jp): 10 Time(s)
      root (213.215.191.170): 10 Time(s)
      root (220.165.9.233): 10 Time(s)
      root (222.210.17.151): 10 Time(s)
      root (ipe-iptva02.man.newskies.net): 10 Time(s)
      root (200.49.168.86): 8 Time(s)
      root (59.53.51.178): 8 Time(s)
      root (80.188.72-86.rev.gaoland.net): 8 Time(s)
      root (bul138.internetdsl.tpnet.pl): 8 Time(s)
      root (mail.tidestar.net): 8 Time(s)
      root (rl80.1blu.de): 8 Time(s)
      root (cbl212-235-9-35.bb.netvision.net.il): 7 Time(s)
      root (ipe-iptva03.man.newskies.net): 7 Time(s)
      root (190.210.29.149): 6 Time(s)
      root (201-26-172-213.dial-up.telesp.net.br): 6 Time(s)
      root (203.141.159.25.static.zoot.jp): 6 Time(s)
      root (219.143.161.64): 6 Time(s)
      root (220.194.48.231): 6 Time(s)
      root (222.128.48.222): 6 Time(s)
      root (61.172.200.198): 6 Time(s)
      root (61.235.143.134): 6 Time(s)
      root (80.51.31.84): 6 Time(s)
      root (82.207.106.77): 6 Time(s)
      root (adsl-99-63-133-121.dsl.lsan03.sbcglobal.net): 6 Time(s)
      root (dzu194.internetdsl.tpnet.pl): 6 Time(s)
      root (host190-58-static.54-88-b.business.telecomitalia.it): 6 Time(s)
      root (p4fda1392.dip0.t-ipconnect.de): 6 Time(s)
      root (202.100.98.13): 5 Time(s)
      root (122.224.128.197): 4 Time(s)
      root (124.232.131.156): 4 Time(s)
      root (190.188.233.225): 4 Time(s)
      root (200.102.77.173): 4 Time(s)
      root (200.162.9.91): 4 Time(s)
      root (200.21.104.66): 4 Time(s)
      root (201.red-80-32-236.staticip.rima-tde.net): 4 Time(s)
      root (202.78.239.203): 4 Time(s)
      root (218.249.195.165): 4 Time(s)
      root (222.73.231.88): 4 Time(s)
      root (70.54.247.51): 4 Time(s)
      root (80.244.113.11): 4 Time(s)
      root (88.red-80-34-55.staticip.rima-tde.net): 4 Time(s)
      root (host-85-27-58-128.brutele.be): 4 Time(s)
      root (host186-20-static.5-79-b.business.telecomitalia.it): 4 Time(s)
      root (ip-213-135-245-254.static.luxdsl.pt.lu): 4 Time(s)
      root (lacteos.freskaleche.com.co): 4 Time(s)
      root (mail.copycat.co.tz): 4 Time(s)
      root (242.red-80-24-81.staticip.rima-tde.net): 3 Time(s)
      root (58.254.200.60): 3 Time(s)
      root (aya202.internetdsl.tpnet.pl): 3 Time(s)
      root (p54a70938.dip0.t-ipconnect.de): 3 Time(s)
      root (154.red-217-125-104.staticip.rima-tde.net): 2 Time(s)
      root (189-112-076-005.static.ctbctelecom.com.br): 2 Time(s)
      root (190.12.86.132): 2 Time(s)
      root (196.218.47.219): 2 Time(s)
      root (201-26-144-186.dial-up.telesp.net.br): 2 Time(s)
      root (202.100.241.61): 2 Time(s)
      root (217.147.21.166): 2 Time(s)
      root (222.252.28.112): 2 Time(s)
      root (41.222.209.65): 2 Time(s)
      root (41.250.251.67): 2 Time(s)
      root (58.233.219.99): 2 Time(s)
      root (60-249-92-252.hinet-ip.hinet.net): 2 Time(s)
      root (61.80.42.149): 2 Time(s)
      root (72.54.20.41): 2 Time(s)
      root (83-65-166-74.work.xdsl-line.inode.at): 2 Time(s)
      root (83.229.48.146): 2 Time(s)
      root (87-194-180-28.bethere.co.uk): 2 Time(s)
      root (adsl-99-97.globonet.hu): 2 Time(s)
      root (fnttkyo001003.tkyo.fnt.ngn.ppp.infoweb.ne.jp): 2 Time(s)
      root (gve82.internetdsl.tpnet.pl): 2 Time(s)
      root (p54a71ad2.dip0.t-ipconnect.de): 2 Time(s)
      root (89.129.246.135): 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   11.113.244.80.in-addr.arpa: 4 Time(s)
   200-102-77-173.paemt706.e.brasiltelecom.net.br: 4 Time(s)
   225-233-188-190.cab.prima.net.ar: 4 Time(s)
   41-222-209-65.galaxybackbone.com: 2 Time(s)
   adsl-mi4-170.it.colt.net: 10 Time(s)
   c-68-41-206-156.hsd1.mi.comcast.net: 12 Time(s)
   customer-static-210-29-149.iplannetworks.net: 6 Time(s)
   host-196.218.47.219-static.tedata.net: 2 Time(s)
   mail.iesmos.ru: 2 Time(s)
   mail.sankyuvn.com(222.252.28.112): 2 Time(s)
   map86.network49.168.tigo.net.gt: 8 Time(s)
   static-ip-cr19014668247.cable.net.co: 10 Time(s)
   static-ip-cr19014669104.cable.net.co: 12 Time(s)
   static41-67-251-250-251.static41-16.iam.net.ma: 2 Time(s)

Didn't receive an ident from these IPs:
   121.15.226.230: 5 Time(s)
   190.255.72.250: 1 Time(s)
   202.57.41.60: 2 Time(s)
   60-249-92-252.HINET-IP.hinet.net (60.249.92.252): 1 Time(s)
   c-68-41-206-156.hsd1.mi.comcast.net (68.41.206.156): 1 Time(s)

Failed logins from these:
   admin/password from 121.15.226.230: 6 Time(s)
   apple/password from 190.255.72.250: 1 Time(s)
   cobalt/password from 190.255.72.250: 1 Time(s)
   corel/password from 190.255.72.250: 1 Time(s)
   redhat/password from 190.255.72.250: 1 Time(s)
   root/password from 121.15.226.230: 6 Time(s)
   root/password from 190.255.72.250: 6 Time(s)
   root/password from 68.41.206.156: 12 Time(s)
   suse/password from 190.255.72.250: 1 Time(s)
   test/password from 121.15.226.230: 6 Time(s)
   user/password from 121.15.226.230: 6 Time(s)
   user1/password from 121.15.226.230: 3 Time(s)

Illegal users from these:
   admin/none from 121.15.226.230: 6 Time(s)
   admin/password from 121.15.226.230: 6 Time(s)
   apple/none from 190.255.72.250: 1 Time(s)
   apple/password from 190.255.72.250: 1 Time(s)
   cobalt/none from 190.255.72.250: 1 Time(s)
   cobalt/password from 190.255.72.250: 1 Time(s)
   corel/none from 190.255.72.250: 1 Time(s)
   corel/password from 190.255.72.250: 1 Time(s)
   redhat/none from 190.255.72.250: 1 Time(s)
   redhat/password from 190.255.72.250: 1 Time(s)
   suse/none from 190.255.72.250: 1 Time(s)
   suse/password from 190.255.72.250: 1 Time(s)
   test/none from 121.15.226.230: 6 Time(s)
   test/password from 121.15.226.230: 6 Time(s)
   user/none from 121.15.226.230: 6 Time(s)
   user/password from 121.15.226.230: 6 Time(s)
   user1/none from 121.15.226.230: 3 Time(s)
   user1/password from 121.15.226.230: 3 Time(s)

Error in PAM authentication:
   Authentication failure for root from 100.191.195-77.rev.gaoland.net : 10 Time(s)
   Authentication failure for root from 116.10.195.5 : 10 Time(s)
   Authentication failure for root from 12.152.56.50 : 10 Time(s)
   Authentication failure for root from 122.224.128.197 : 4 Time(s)
   Authentication failure for root from 124.232.131.156 : 4 Time(s)
   Authentication failure for root from 154.red-217-125-104.staticip.rima-tde.net : 2 Time(s)
   Authentication failure for root from 189-112-076-005.static.ctbctelecom.com.br : 2 Time(s)
   Authentication failure for root from 190.12.86.132 : 2 Time(s)
   Authentication failure for root from 190.146.68.247 : 10 Time(s)
   Authentication failure for root from 190.146.69.104 : 12 Time(s)
   Authentication failure for root from 190.188.233.225 : 4 Time(s)
   Authentication failure for root from 190.210.29.149 : 6 Time(s)
   Authentication failure for root from 195.242.89.99 : 10 Time(s)
   Authentication failure for root from 196.218.47.219 : 2 Time(s)
   Authentication failure for root from 200.102.77.173 : 4 Time(s)
   Authentication failure for root from 200.162.9.91 : 4 Time(s)
   Authentication failure for root from 200.187.175.38 : 16 Time(s)
   Authentication failure for root from 200.21.104.66 : 4 Time(s)
   Authentication failure for root from 200.49.168.86 : 8 Time(s)
   Authentication failure for root from 201-26-144-186.dial-up.telesp.net.br : 2 Time(s)
   Authentication failure for root from 201-26-172-213.dial-up.telesp.net.br : 6 Time(s)
   Authentication failure for root from 201.red-80-32-236.staticip.rima-tde.net : 4 Time(s)
   Authentication failure for root from 202.100.241.61 : 2 Time(s)
   Authentication failure for root from 202.100.98.13 : 5 Time(s)
   Authentication failure for root from 202.109.10.204 : 10 Time(s)
   Authentication failure for root from 202.78.239.203 : 4 Time(s)
   Authentication failure for root from 203.141.150.153.static.zoot.jp : 10 Time(s)
   Authentication failure for root from 203.141.159.25.static.zoot.jp : 6 Time(s)
   Authentication failure for root from 211.154.254.120 : 21 Time(s)
   Authentication failure for root from 213.215.191.170 : 10 Time(s)
   Authentication failure for root from 217.147.21.166 : 2 Time(s)
   Authentication failure for root from 218.248.66.185 : 12 Time(s)
   Authentication failure for root from 218.248.69.185 : 16 Time(s)
   Authentication failure for root from 218.248.79.251 : 16 Time(s)
   Authentication failure for root from 218.249.195.165 : 4 Time(s)
   Authentication failure for root from 218.30.57.219 : 14 Time(s)
   Authentication failure for root from 218.65.103.253 : 12 Time(s)
   Authentication failure for root from 219.134.65.39 : 12 Time(s)
   Authentication failure for root from 219.143.161.64 : 6 Time(s)
   Authentication failure for root from 220.165.9.233 : 10 Time(s)
   Authentication failure for root from 220.194.48.231 : 6 Time(s)
   Authentication failure for root from 222.128.48.222 : 6 Time(s)
   Authentication failure for root from 222.210.17.151 : 10 Time(s)
   Authentication failure for root from 222.252.28.112 : 2 Time(s)
   Authentication failure for root from 222.73.231.88 : 4 Time(s)
   Authentication failure for root from 242.red-80-24-81.staticip.rima-tde.net : 3 Time(s)
   Authentication failure for root from 41.222.209.65 : 2 Time(s)
   Authentication failure for root from 41.250.251.67 : 2 Time(s)
   Authentication failure for root from 58.233.219.99 : 2 Time(s)
   Authentication failure for root from 58.254.200.60 : 3 Time(s)
   Authentication failure for root from 59.40.185.208 : 16 Time(s)
   Authentication failure for root from 59.53.51.178 : 8 Time(s)
   Authentication failure for root from 60-249-92-252.hinet-ip.hinet.net : 2 Time(s)
   Authentication failure for root from 61.131.208.44 : 18 Time(s)
   Authentication failure for root from 61.172.200.198 : 6 Time(s)
   Authentication failure for root from 61.235.143.134 : 6 Time(s)
   Authentication failure for root from 61.80.42.149 : 2 Time(s)
   Authentication failure for root from 70.54.247.51 : 4 Time(s)
   Authentication failure for root from 72.54.20.41 : 2 Time(s)
   Authentication failure for root from 80.188.72-86.rev.gaoland.net : 8 Time(s)
   Authentication failure for root from 80.244.113.11 : 4 Time(s)
   Authentication failure for root from 80.51.31.84 : 6 Time(s)
   Authentication failure for root from 82.207.106.77 : 6 Time(s)
   Authentication failure for root from 83-65-166-74.work.xdsl-line.inode.at : 2 Time(s)
   Authentication failure for root from 83.229.48.146 : 2 Time(s)
   Authentication failure for root from 87-194-180-28.bethere.co.uk : 2 Time(s)
   Authentication failure for root from 88.red-80-34-55.staticip.rima-tde.net : 4 Time(s)
   Authentication failure for root from 89.129.246.135 : 1 Time(s)
   Authentication failure for root from adsl-99-63-133-121.dsl.lsan03.sbcglobal.net : 6 Time(s)
   Authentication failure for root from adsl-99-97.globonet.hu : 2 Time(s)
   Authentication failure for root from akq2.internetdsl.tpnet.pl : 14 Time(s)
   Authentication failure for root from aya202.internetdsl.tpnet.pl : 3 Time(s)
   Authentication failure for root from bcl02861.empresas.ya.com : 26 Time(s)
   Authentication failure for root from bul138.internetdsl.tpnet.pl : 8 Time(s)
   Authentication failure for root from cbl212-235-9-35.bb.netvision.net.il : 7 Time(s)
   Authentication failure for root from dzu194.internetdsl.tpnet.pl : 6 Time(s)
   Authentication failure for root from fnttkyo001003.tkyo.fnt.ngn.ppp.infoweb.ne.jp : 2 Time(s)
   Authentication failure for root from gve82.internetdsl.tpnet.pl : 2 Time(s)
   Authentication failure for root from host-85-27-58-128.brutele.be : 4 Time(s)
   Authentication failure for root from host186-20-static.5-79-b.business.telecomitalia.it : 4 Time(s)
   Authentication failure for root from host190-58-static.54-88-b.business.telecomitalia.it : 6 Time(s)
   Authentication failure for root from ip-213-135-245-254.static.luxdsl.pt.lu : 4 Time(s)
   Authentication failure for root from ipe-iptva02.man.newskies.net : 10 Time(s)
   Authentication failure for root from ipe-iptva03.man.newskies.net : 7 Time(s)
   Authentication failure for root from lacteos.freskaleche.com.co : 4 Time(s)
   Authentication failure for root from mail.copycat.co.tz : 4 Time(s)
   Authentication failure for root from mail.tidestar.net : 8 Time(s)
   Authentication failure for root from p4fda1392.dip0.t-ipconnect.de : 6 Time(s)
   Authentication failure for root from p54a70938.dip0.t-ipconnect.de : 3 Time(s)
   Authentication failure for root from p54a71ad2.dip0.t-ipconnect.de : 2 Time(s)
   Authentication failure for root from rl80.1blu.de : 8 Time(s)
   Authentication failure for root from static-71-242-245-111.phlapa.east.verizon.net : 20 Time(s)
   Authentication failure for root from www.pbs-hosting.net : 20 Time(s)
   Authentication failure for root from www.ropsa.com.mx : 16 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   56G   13G  82% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list