[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Fri Sep 11 06:25:32 CDT 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Fri Sep 11 06:25:18 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

-MsgID: 1MlhmM-0000SQ-00: 
	2009-09-10 06:25:32 <= root at tempest.evolt.org U=root P=local S=13257
	2009-09-10 06:28:43 lists.evolt.org [67.19.100.195]: Connection timed out
	2009-09-10 06:28:43 == sysadmin at lists.evolt.org T=local_smtp defer (110): Connection timed out
	2009-09-10 06:28:43 failed to open DB file /var/spool/exim/db/retry: File exists
-MsgID: 1MljGb-0005WA-00: 
	2009-09-10 08:05:56 <= root at tempest.evolt.org U=root P=local S=877
	2009-09-10 08:09:05 lists.evolt.org [67.19.100.195]: Connection timed out
	2009-09-10 08:09:05 == root at lists.evolt.org <root at tempest.evolt.org> T=local_smtp defer (110): Connection timed out
	2009-09-10 08:09:05 failed to open DB file /var/spool/exim/db/retry: File exists
1 messages delivered immediately to 1 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

2.07 MB transfered in 492 responses  (1xx 0, 2xx 1, 3xx 21, 4xx 470, 5xx 0) 
 31 Images (0.01 MB),
 9 Documents (0.00 MB),
 2 Archives (0.00 MB),
 2 Movies files (0.00 MB),
 226 Content pages (2.00 MB),
 222 Other (0.06 MB) 

Attempts to use 1 known hacks were logged 2 time(s)
  phpmyadmin   by 
          96.2.86.6 1 time(s) 
          66.249.71.77 1 time(s) 

A total of 2 sites probed the server 
  96.2.86.6  
  66.249.71.77  

A total of 153 unidentified 'other' records logged
  GET /mail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /tuxhedoh HTTP/1.1 with response code(s) 1 404 responses
  GET /stone HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/40 HTTP/1.1 with response code(s) 1 404 responses
  GET /rudy HTTP/1.0 with response code(s) 1 404 responses
  GET /rcmail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /tos.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/114 HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/chmod.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /mccreath/potatosalad/archives/~amnsnow.mpe HTTP/1.0 with response code(s) 1 404 responses
  GET /mwarden HTTP/1.1 with response code(s) 1 404 responses
  GET /components/com_roundcube/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /Webmail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi HTTP/1.1 with response code(s) 1 404 responses
  - with response code(s) 27 408 responses
  GET /foop/blog/archives/000151.shtml#000151 HTTP/1.0 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /isaac/photos/index.cfm?currentnum=46 HTTP/1.0 with response code(s) 1 404 responses
  GET /tuxhedoh/archives HTTP/1.1 with response code(s) 1 404 responses
  GET /help/email.php%22 HTTP/1.1 with response code(s) 1 404 responses
  GET /bobd HTTP/1.1 with response code(s) 1 404 responses
  GET /deadL0ck HTTP/1.1 with response code(s) 1 404 responses
  GET /arijit HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60384\" class=http://www.italiageorgia.it/photonews/lopes.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /jeff/code/checkbox_check_all.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /marlene/macfonts HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/evolt/backgrounds HTTP/1.1 with response code(s) 1 404 responses
  GET /milk HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/cf_venn/demo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /luminosity HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/modified_pre_blocks.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /roundcube/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67517 HTTP/1.1 with response code(s) 3 404 responses
  GET /tweak HTTP/1.1 with response code(s) 1 404 responses
  GET /arijit/dw_ext HTTP/1.1 with response code(s) 2 404 responses
  GET /PHP-Login-System-with-Admin-Features/ll tell you. If you look in constants.php you HTTP/1.1 with response code(s) 2 400 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/49 HTTP/1.1 with response code(s) 1 404 responses
  GET /help HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /liorean HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/137 HTTP/1.1 with response code(s) 1 404 responses
  GET /quick_calendar_using_ajax_and_php/version), it would be nice if Bernard would post quick_calendar2.txt for the HTTP/1.1 with response code(s) 1 400 responses
  GET /winddancer HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /jesteruk/index/contact HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/116 HTTP/1.1 with response code(s) 1 404 responses
  GET /roundcubemail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/35 HTTP/1.1 with response code(s) 2 404 responses
  GET /isaac/photos/index.cfm?currentnum=18 HTTP/1.1 with response code(s) 1 404 responses
  GET /millej21/weblog HTTP/1.1 with response code(s) 1 404 responses
  GET /webmail2/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /winddancer HTTP/1.0 with response code(s) 1 404 responses
  GET /rc/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /marlene HTTP/1.1 with response code(s) 1 404 responses
  GET /mnickel HTTP/1.1 with response code(s) 1 404 responses
  GET /contact HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders/mt HTTP/1.1 with response code(s) 1 404 responses
  GET /burhankhalid HTTP/1.1 with response code(s) 1 404 responses
  GET /foop/blog/archives/000151.shtml#000151 HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=71 HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc HTTP/1.1 with response code(s) 2 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67515 HTTP/1.1 with response code(s) 3 404 responses
  GET /shaggy/php/portable HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /johnk HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 3 404 responses
  GET /round/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /turkif HTTP/1.1 with response code(s) 1 404 responses
  GET /jesteruk/index/scripts/1 HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/94 HTTP/1.1 with response code(s) 1 404 responses
  GET /mnickel/weblog HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67509 HTTP/1.1 with response code(s) 3 404 responses
  GET /signup.cfm( HTTP/1.1 with response code(s) 1 404 responses
  GET /mccreath/potatosalad/archives/~amnsnow.mpe HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67516 HTTP/1.1 with response code(s) 3 404 responses
  GET /dwarfsoft HTTP/1.1 with response code(s) 1 404 responses
  GET /anarion HTTP/1.1 with response code(s) 1 404 responses
  GET /jesteruk HTTP/1.1 with response code(s) 1 404 responses
  GET /adolph HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/, make sure your database name and password information is specified correctly in constants.php. If you still can HTTP/1.1 with response code(s) 2 400 responses
  GET /webmail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /ashcraft/gallery HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/input_value.cfm?sub=1 HTTP/1.1 with response code(s) 1 404 responses
  GET /seb HTTP/1.1 with response code(s) 1 404 responses
  GET /spyrral/urbanfolk.net HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67510 HTTP/1.1 with response code(s) 3 404 responses
  GET /dshadovi/traffic.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /rss/articles.rss HTTP/1.0 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.0 with response code(s) 1 404 responses
  GET /squirrelmail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/link_accessibility_usability.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /anthony HTTP/1.1 with response code(s) 1 404 responses
  GET /waggener/TOVBlog HTTP/1.1 with response code(s) 1 404 responses
  GET /veritas HTTP/1.1 with response code(s) 1 404 responses
  GET /mihai/vlad HTTP/1.1 with response code(s) 1 404 responses
  GET /mail2/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /mwarden/weblog HTTP/1.1 with response code(s) 2 404 responses
  GET /arijit HTTP/1.0 with response code(s) 1 404 responses
  GET /artlung/date-example HTTP/1.1 with response code(s) 1 404 responses
  GET /matthewo HTTP/1.1 with response code(s) 1 404 responses
  GET /dbo/legends HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=46 HTTP/1.1 with response code(s) 1 404 responses
  GET /bheerssen HTTP/1.1 with response code(s) 1 404 responses
  GET /StOne HTTP/1.1 with response code(s) 1 404 responses
  GET /astevens HTTP/1.1 with response code(s) 1 404 responses
  GET /soichih HTTP/1.1 with response code(s) 2 404 responses
  GET /isaac/photos/index.cfm?currentnum=20 HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/framed_rollovers HTTP/1.1 with response code(s) 1 404 responses
  GET /Tweak HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67518 HTTP/1.1 with response code(s) 3 404 responses
  GET /shaggy HTTP/1.1 with response code(s) 1 404 responses
  GET /dbo HTTP/1.1 with response code(s) 1 404 responses
  GET /tempterus HTTP/1.1 with response code(s) 1 404 responses
  GET /cbird HTTP/1.1 with response code(s) 1 404 responses
  GET /nmk/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /simonc HTTP/1.1 with response code(s) 1 404 responses
  GET /matthewo/styles/cssUploader.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /twitch HTTP/1.1 with response code(s) 1 404 responses
  GET /frymaster HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 13 400 responses
  GET /artlung/comparative-anatomy HTTP/1.1 with response code(s) 1 404 responses
  GET /dbo/rumours HTTP/1.1 with response code(s) 1 404 responses
  GET /rudy HTTP/1.1 with response code(s) 1 404 responses
  GET /mailweb/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /matthewo HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/navigator_object/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /robster HTTP/1.0 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features#comment-67513 HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/input_value.cfm?sub=1 HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 2 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /user/soapCaller.bs HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/re having, it works when you register but just not on the first time you load the page? It gives you that error. Look at register() function in session.php, that HTTP/1.1 with response code(s) 1 400 responses
  GET /vhcs2/tools/webmail/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /thewrapper HTTP/1.1 with response code(s) 1 404 responses
  GET /dmah HTTP/1.1 with response code(s) 1 404 responses
  GET /joomla/components/com_roundcube/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/output/z3 HTTP/1.1 with response code(s) 1 404 responses
  GET /mwarden/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc HTTP/1.1 with response code(s) 1 404 responses
  GET /email/CHANGELOG HTTP/1.1 with response code(s) 1 404 responses
  GET /foop HTTP/1.1 with response code(s) 1 404 responses
  GET /ronl HTTP/1.1 with response code(s) 1 404 responses

A total of 14 ROBOTS were logged 
      Mozilla/5.0 (compatible; MJ12bot/v1.3.0; http://www.majestic12.co.uk/bot.php?+) 1 time(s) 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 4 time(s) 
      Yandex/1.01.001 (compatible; Win16; H) 3 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      Mozilla/5.0 (compatible; Tagoobot/3.0; +http://www.tagoo.ru) 1 time(s) 
      Mozilla/5.0 (compatible; discobot/1.1; +http://discoveryengine.com/discobot.html) 1 time(s) 
      Mozilla/4.0 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 35 time(s) 
      T-Mobile Dash Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone; 320x240; MSNBOT-MOBILE/1.1; +http://search.msn.com/msnbot.htm) 2 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 1 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 5 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 1 time(s) 
      Mozilla/5.0 (compatible; Dolphin/1.0; +http://telehouse.ru/crawler.html) 3 time(s) 
      MLBot (www.metadatalabs.com/mlbot) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 366 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   64-95-223-71.ipdatatel.com: 138 Time(s)

Didn't receive an ident from these IPs:
   alk42.internetdsl.tpnet.pl (83.17.40.42): 5 Time(s)

Failed logins from these:
   aaron/password from 64.95.223.71: 5 Time(s)
   admin/password from 60.190.240.70: 3 Time(s)
   admin/password from 64.95.223.71: 5 Time(s)
   apache/password from 64.95.223.71: 1 Time(s)
   backup/password from 60.190.240.70: 4 Time(s)
   ftpguest/password from 60.190.240.70: 3 Time(s)
   games/password from 60.190.240.70: 4 Time(s)
   gary/password from 64.95.223.71: 5 Time(s)
   gt05/password from 64.95.223.71: 5 Time(s)
   guest/password from 60.190.240.70: 7 Time(s)
   guest/password from 64.95.223.71: 5 Time(s)
   kernel/password from 60.190.240.70: 4 Time(s)
   lab/password from 64.95.223.71: 1 Time(s)
   nina/password from 60.190.240.70: 4 Time(s)
   oracle/password from 125.210.208.45: 4 Time(s)
   oracle/password from 60.190.240.70: 10 Time(s)
   oracle/password from 64.95.223.71: 4 Time(s)
   root/password from 125.210.208.45: 52 Time(s)
   root/password from 208.101.2.20: 6 Time(s)
   root/password from 60.190.240.70: 36 Time(s)
   root/password from 64.95.223.71: 83 Time(s)
   stephanie/password from 64.95.223.71: 5 Time(s)
   stud/password from 64.95.223.71: 5 Time(s)
   test/password from 125.210.208.45: 4 Time(s)
   test/password from 60.190.240.70: 5 Time(s)
   test/password from 64.95.223.71: 4 Time(s)
   test1/password from 60.190.240.70: 4 Time(s)
   test3/password from 60.190.240.70: 4 Time(s)
   trash/password from 64.95.223.71: 5 Time(s)
   user/password from 60.190.240.70: 12 Time(s)
   william/password from 64.95.223.71: 5 Time(s)

Illegal users from these:
   aaron/none from 64.95.223.71: 5 Time(s)
   aaron/password from 64.95.223.71: 5 Time(s)
   admin/none from 60.190.240.70: 3 Time(s)
   admin/none from 64.95.223.71: 5 Time(s)
   admin/password from 60.190.240.70: 3 Time(s)
   admin/password from 64.95.223.71: 5 Time(s)
   apache/none from 64.95.223.71: 1 Time(s)
   apache/password from 64.95.223.71: 1 Time(s)
   ftpguest/none from 60.190.240.70: 3 Time(s)
   ftpguest/password from 60.190.240.70: 3 Time(s)
   gary/none from 64.95.223.71: 5 Time(s)
   gary/password from 64.95.223.71: 5 Time(s)
   gt05/none from 64.95.223.71: 5 Time(s)
   gt05/password from 64.95.223.71: 5 Time(s)
   guest/none from 60.190.240.70: 7 Time(s)
   guest/none from 64.95.223.71: 5 Time(s)
   guest/password from 60.190.240.70: 7 Time(s)
   guest/password from 64.95.223.71: 5 Time(s)
   kernel/none from 60.190.240.70: 4 Time(s)
   kernel/password from 60.190.240.70: 4 Time(s)
   lab/none from 64.95.223.71: 1 Time(s)
   lab/password from 64.95.223.71: 1 Time(s)
   nina/none from 60.190.240.70: 4 Time(s)
   nina/password from 60.190.240.70: 4 Time(s)
   oracle/none from 125.210.208.45: 4 Time(s)
   oracle/none from 60.190.240.70: 10 Time(s)
   oracle/none from 64.95.223.71: 4 Time(s)
   oracle/password from 125.210.208.45: 4 Time(s)
   oracle/password from 60.190.240.70: 10 Time(s)
   oracle/password from 64.95.223.71: 4 Time(s)
   stephanie/none from 64.95.223.71: 5 Time(s)
   stephanie/password from 64.95.223.71: 5 Time(s)
   stud/none from 64.95.223.71: 5 Time(s)
   stud/password from 64.95.223.71: 5 Time(s)
   test/none from 125.210.208.45: 4 Time(s)
   test/none from 60.190.240.70: 5 Time(s)
   test/none from 64.95.223.71: 4 Time(s)
   test/password from 125.210.208.45: 4 Time(s)
   test/password from 60.190.240.70: 5 Time(s)
   test/password from 64.95.223.71: 4 Time(s)
   test1/none from 60.190.240.70: 4 Time(s)
   test1/password from 60.190.240.70: 4 Time(s)
   test3/none from 60.190.240.70: 4 Time(s)
   test3/password from 60.190.240.70: 4 Time(s)
   trash/none from 64.95.223.71: 5 Time(s)
   trash/password from 64.95.223.71: 5 Time(s)
   user/none from 60.190.240.70: 12 Time(s)
   user/password from 60.190.240.70: 12 Time(s)
   william/none from 64.95.223.71: 5 Time(s)
   william/password from 64.95.223.71: 5 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   55G   14G  81% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list