[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Sat Feb 27 06:25:28 CST 2010


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Sat Feb 27 06:25:16 2010
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /home/dmah/bin/qmail-kill.sh 1> /dev/null 2>&1: 144 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

4 messages delivered immediately to 4 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.07 MB transfered in 271 responses  (1xx 0, 2xx 0, 3xx 16, 4xx 255, 5xx 0) 
 24 Images (0.01 MB),
 8 Documents (0.00 MB),
 1 Movies files (0.00 MB),
 129 Content pages (0.03 MB),
 109 Other (0.03 MB) 

Attempts to use 1 known hacks were logged 4 time(s)
  phpmyadmin   by 
          85.17.154.118 2 time(s) 
          88.191.12.80 2 time(s) 

A total of 2 sites probed the server 
  85.17.154.118  
  88.191.12.80  

A total of 39 unidentified 'other' records logged
  GET /jeff/code/form_to_window/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /marceloslg HTTP/1.1 with response code(s) 1 404 responses
  GET /simonc HTTP/1.1 with response code(s) 1 404 responses
  GET /fields/files/template_trifold.fh9 HTTP/1.1 with response code(s) 1 404 responses
  GET /php-login-system-with-admin-features\" class=http://www.fileden.com/files/2010/2/14/2761149//yuri.txt.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /gsws/license.kwd HTTP/1.1 with response code(s) 1 404 responses
  GET /jesteruk HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /shaggy/javascript/create_slideshow HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/137 HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /mwarden HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 38 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /jeff/code/input_value.cfm?sub=1 HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/116 HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\" HTTP/1.0 with response code(s) 1 404 responses
  GET /dshadovi/cf_columnlist/cf_columnlist_example.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /lindsay/nav HTTP/1.1 with response code(s) 1 404 responses
  GET /<a href= HTTP/1.1 with response code(s) 1 400 responses
  - with response code(s) 27 408 responses
  GET /gozz/stripcr.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/cf_columnlist/demo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /matthewo HTTP/1.1 with response code(s) 2 404 responses
  GET /isaac/photos/index.cfm?currentnum=71 HTTP/1.1 with response code(s) 1 404 responses
  GET /StOne HTTP/1.1 with response code(s) 1 404 responses
  GET /help/cfdocs/Developing_ColdFusion_Applications/appF HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 1 404 responses
  GET /soichih HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=20 HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60180 with response code(s) 3 404 responses

A total of 9 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 4 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 1 time(s) 
      Mozilla/5.0 (compatible; DotBot/1.1; http://www.dotnetdotcom.org/, crawler at dotnetdotcom.org) 4 time(s) 
      Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/spider.html;) Gecko/2008032620 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 9 time(s) 
      Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) 1 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 2 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 4 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 2 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 510 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Sessions Opened:
      dmah: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)
      dmah(uid=0) -> root: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   localhost(123.30.98.50): 15 Time(s)
   s010600012345678a.cg.shawcable.net(70.72.50.47): 1 Time(s)

Didn't receive an ident from these IPs:
   190-95-36-127.bk18-dsl.surnet.cl (190.95.36.127): 1 Time(s)
   221.143.46.189: 5 Time(s)
   222.73.205.9: 14 Time(s)
   localhost (123.30.98.50): 5 Time(s)
   pd95b8832.dip0.t-ipconnect.de (217.91.136.50): 5 Time(s)
   static-82-85-101-13.clienti.tiscali.it (82.85.101.13): 1 Time(s)

Failed logins from these:
   a/password from 222.73.205.9: 8 Time(s)
   adam/password from 222.73.205.9: 3 Time(s)
   adele/password from 222.73.205.9: 1 Time(s)
   adm/password from 222.73.205.9: 1 Time(s)
   admin/password from 123.30.98.50: 3 Time(s)
   admin/password from 222.73.205.9: 9 Time(s)
   alan/password from 222.73.205.9: 3 Time(s)
   alex/password from 222.73.205.9: 2 Time(s)
   alexa/password from 222.73.205.9: 1 Time(s)
   alexandra/password from 222.73.205.9: 1 Time(s)
   alias/password from 217.91.136.50: 5 Time(s)
   alisha/password from 222.73.205.9: 1 Time(s)
   amanda/password from 222.73.205.9: 1 Time(s)
   ammelie/password from 222.73.205.9: 1 Time(s)
   andrea/password from 222.73.205.9: 1 Time(s)
   angel/password from 222.73.205.9: 3 Time(s)
   angelika/password from 222.73.205.9: 1 Time(s)
   anja/password from 222.73.205.9: 1 Time(s)
   anke/password from 222.73.205.9: 1 Time(s)
   anna/password from 222.73.205.9: 1 Time(s)
   anne/password from 222.73.205.9: 1 Time(s)
   anneliese/password from 222.73.205.9: 1 Time(s)
   annemarie/password from 222.73.205.9: 1 Time(s)
   annette/password from 222.73.205.9: 1 Time(s)
   annike/password from 222.73.205.9: 1 Time(s)
   antje/password from 222.73.205.9: 1 Time(s)
   apache/password from 222.73.205.9: 1 Time(s)
   arianne/password from 222.73.205.9: 1 Time(s)
   aron/password from 222.73.205.9: 1 Time(s)
   astrid/password from 222.73.205.9: 1 Time(s)
   backup/password from 222.73.205.9: 3 Time(s)
   baerbel/password from 222.73.205.9: 1 Time(s)
   barbara/password from 222.73.205.9: 1 Time(s)
   beate/password from 222.73.205.9: 1 Time(s)
   bf/password from 222.73.205.9: 1 Time(s)
   bf123/password from 222.73.205.9: 1 Time(s)
   bicameral/password from 222.73.205.9: 1 Time(s)
   bicameral123/password from 222.73.205.9: 1 Time(s)
   bids/password from 222.73.205.9: 1 Time(s)
   bids123/password from 222.73.205.9: 1 Time(s)
   bill/password from 222.73.205.9: 1 Time(s)
   bill123/password from 222.73.205.9: 1 Time(s)
   bin/password from 222.73.205.9: 1 Time(s)
   bin123/password from 222.73.205.9: 1 Time(s)
   bishop/password from 222.73.205.9: 1 Time(s)
   bishop123/password from 222.73.205.9: 1 Time(s)
   bitch/password from 222.73.205.9: 1 Time(s)
   bitch123/password from 222.73.205.9: 1 Time(s)
   blacks/password from 222.73.205.9: 1 Time(s)
   blacks123/password from 222.73.205.9: 1 Time(s)
   blond/password from 222.73.205.9: 1 Time(s)
   blond123/password from 222.73.205.9: 1 Time(s)
   brett/password from 222.73.205.9: 2 Time(s)
   cyborg/password from 222.73.205.9: 1 Time(s)
   cyrus/password from 217.91.136.50: 1 Time(s)
   data/password from 222.73.205.9: 3 Time(s)
   david/password from 222.73.205.9: 3 Time(s)
   delta/password from 123.30.98.50: 4 Time(s)
   deutch/password from 222.73.205.9: 1 Time(s)
   deutchland/password from 222.73.205.9: 1 Time(s)
   file/password from 222.73.205.9: 1 Time(s)
   fluffy/password from 222.73.205.9: 3 Time(s)
   ftp/password from 222.73.205.9: 2 Time(s)
   games/password from 222.73.205.9: 2 Time(s)
   george/password from 222.73.205.9: 3 Time(s)
   german/password from 222.73.205.9: 1 Time(s)
   guest/password from 222.73.205.9: 5 Time(s)
   hitler/password from 222.73.205.9: 1 Time(s)
   http/password from 222.73.205.9: 3 Time(s)
   httpd/password from 222.73.205.9: 3 Time(s)
   info/password from 222.73.205.9: 6 Time(s)
   john/password from 222.73.205.9: 3 Time(s)
   leave/password from 222.73.205.9: 1 Time(s)
   left/password from 222.73.205.9: 1 Time(s)
   library/password from 222.73.205.9: 3 Time(s)
   linux/password from 222.73.205.9: 3 Time(s)
   mail/password from 222.73.205.9: 1 Time(s)
   master/password from 222.73.205.9: 2 Time(s)
   michael/password from 222.73.205.9: 3 Time(s)
   mike/password from 222.73.205.9: 2 Time(s)
   msg/password from 222.73.205.9: 1 Time(s)
   mysql/password from 222.73.205.9: 3 Time(s)
   network/password from 222.73.205.9: 2 Time(s)
   news/password from 222.73.205.9: 3 Time(s)
   nina/password from 222.73.205.9: 1 Time(s)
   nobody/password from 222.73.205.9: 3 Time(s)
   notice/password from 222.73.205.9: 1 Time(s)
   office/password from 217.91.136.50: 5 Time(s)
   oracle/password from 211.141.237.36: 2 Time(s)
   oracle/password from 222.73.205.9: 3 Time(s)
   paul/password from 222.73.205.9: 3 Time(s)
   pgsql/password from 222.73.205.9: 2 Time(s)
   psy/password from 222.73.205.9: 1 Time(s)
   recruit/password from 217.91.136.50: 5 Time(s)
   richard/password from 222.73.205.9: 3 Time(s)
   right/password from 222.73.205.9: 1 Time(s)
   robinson/password from 80.74.137.161: 12 Time(s)
   root/password from 123.30.98.50: 5 Time(s)
   root/password from 211.141.237.36: 36 Time(s)
   root/password from 222.73.205.9: 34 Time(s)
   root/password from 61.129.60.23: 85 Time(s)
   sales/password from 217.91.136.50: 5 Time(s)
   sales/password from 222.73.205.9: 3 Time(s)
   samba/password from 217.91.136.50: 5 Time(s)
   sharon/password from 222.73.205.9: 1 Time(s)
   shell/password from 222.73.205.9: 3 Time(s)
   shop/password from 222.73.205.9: 3 Time(s)
   spam/password from 217.91.136.50: 5 Time(s)
   staff/password from 217.91.136.50: 5 Time(s)
   stephen/password from 222.73.205.9: 3 Time(s)
   test/password from 123.30.98.50: 1 Time(s)
   test/password from 211.141.237.36: 2 Time(s)
   test/password from 222.73.205.9: 7 Time(s)
   tester/password from 123.30.98.50: 1 Time(s)
   testing/password from 123.30.98.50: 1 Time(s)
   tomcat/password from 217.91.136.50: 5 Time(s)
   troot/password from 211.141.237.36: 2 Time(s)
   unix/password from 222.73.205.9: 3 Time(s)
   user/password from 222.73.205.9: 2 Time(s)
   username/password from 222.73.205.9: 2 Time(s)
   virus/password from 217.91.136.50: 4 Time(s)
   web/password from 222.73.205.9: 3 Time(s)
   webadmin/password from 217.91.136.50: 5 Time(s)
   webadmin/password from 222.73.205.9: 3 Time(s)
   webmaster/password from 222.73.205.9: 4 Time(s)
   word/password from 222.73.205.9: 2 Time(s)
   www-data/password from 222.73.205.9: 3 Time(s)
   www/password from 222.73.205.9: 3 Time(s)
   wwwrun/password from 222.73.205.9: 3 Time(s)

Illegal users from these:
   a/none from 222.73.205.9: 8 Time(s)
   a/password from 222.73.205.9: 8 Time(s)
   adam/none from 222.73.205.9: 3 Time(s)
   adam/password from 222.73.205.9: 3 Time(s)
   adele/none from 222.73.205.9: 1 Time(s)
   adele/password from 222.73.205.9: 1 Time(s)
   adm/none from 222.73.205.9: 1 Time(s)
   adm/password from 222.73.205.9: 1 Time(s)
   admin/none from 123.30.98.50: 3 Time(s)
   admin/none from 222.73.205.9: 9 Time(s)
   admin/password from 123.30.98.50: 3 Time(s)
   admin/password from 222.73.205.9: 9 Time(s)
   alan/none from 222.73.205.9: 3 Time(s)
   alan/password from 222.73.205.9: 3 Time(s)
   alex/none from 222.73.205.9: 2 Time(s)
   alex/password from 222.73.205.9: 2 Time(s)
   alexa/none from 222.73.205.9: 1 Time(s)
   alexa/password from 222.73.205.9: 1 Time(s)
   alexandra/none from 222.73.205.9: 1 Time(s)
   alexandra/password from 222.73.205.9: 1 Time(s)
   alias/password from 217.91.136.50: 5 Time(s)
   alisha/none from 222.73.205.9: 1 Time(s)
   alisha/password from 222.73.205.9: 1 Time(s)
   amanda/none from 222.73.205.9: 1 Time(s)
   amanda/password from 222.73.205.9: 1 Time(s)
   ammelie/none from 222.73.205.9: 1 Time(s)
   ammelie/password from 222.73.205.9: 1 Time(s)
   andrea/none from 222.73.205.9: 1 Time(s)
   andrea/password from 222.73.205.9: 1 Time(s)
   angel/none from 222.73.205.9: 3 Time(s)
   angel/password from 222.73.205.9: 3 Time(s)
   angelika/none from 222.73.205.9: 1 Time(s)
   angelika/password from 222.73.205.9: 1 Time(s)
   anja/none from 222.73.205.9: 1 Time(s)
   anja/password from 222.73.205.9: 1 Time(s)
   anke/none from 222.73.205.9: 1 Time(s)
   anke/password from 222.73.205.9: 1 Time(s)
   anna/none from 222.73.205.9: 1 Time(s)
   anna/password from 222.73.205.9: 1 Time(s)
   anne/none from 222.73.205.9: 1 Time(s)
   anne/password from 222.73.205.9: 1 Time(s)
   anneliese/none from 222.73.205.9: 1 Time(s)
   anneliese/password from 222.73.205.9: 1 Time(s)
   annemarie/none from 222.73.205.9: 1 Time(s)
   annemarie/password from 222.73.205.9: 1 Time(s)
   annette/none from 222.73.205.9: 1 Time(s)
   annette/password from 222.73.205.9: 1 Time(s)
   annike/none from 222.73.205.9: 1 Time(s)
   annike/password from 222.73.205.9: 1 Time(s)
   antje/none from 222.73.205.9: 1 Time(s)
   antje/password from 222.73.205.9: 1 Time(s)
   apache/none from 222.73.205.9: 1 Time(s)
   apache/password from 222.73.205.9: 1 Time(s)
   arianne/none from 222.73.205.9: 1 Time(s)
   arianne/password from 222.73.205.9: 1 Time(s)
   aron/none from 222.73.205.9: 1 Time(s)
   aron/password from 222.73.205.9: 1 Time(s)
   astrid/none from 222.73.205.9: 1 Time(s)
   astrid/password from 222.73.205.9: 1 Time(s)
   baerbel/none from 222.73.205.9: 1 Time(s)
   baerbel/password from 222.73.205.9: 1 Time(s)
   barbara/none from 222.73.205.9: 1 Time(s)
   barbara/password from 222.73.205.9: 1 Time(s)
   beate/none from 222.73.205.9: 1 Time(s)
   beate/password from 222.73.205.9: 1 Time(s)
   bf/none from 222.73.205.9: 1 Time(s)
   bf/password from 222.73.205.9: 1 Time(s)
   bf123/none from 222.73.205.9: 1 Time(s)
   bf123/password from 222.73.205.9: 1 Time(s)
   bicameral/none from 222.73.205.9: 1 Time(s)
   bicameral/password from 222.73.205.9: 1 Time(s)
   bicameral123/none from 222.73.205.9: 1 Time(s)
   bicameral123/password from 222.73.205.9: 1 Time(s)
   bids/none from 222.73.205.9: 1 Time(s)
   bids/password from 222.73.205.9: 1 Time(s)
   bids123/none from 222.73.205.9: 1 Time(s)
   bids123/password from 222.73.205.9: 1 Time(s)
   bill/none from 222.73.205.9: 1 Time(s)
   bill/password from 222.73.205.9: 1 Time(s)
   bill123/none from 222.73.205.9: 1 Time(s)
   bill123/password from 222.73.205.9: 1 Time(s)
   bin123/none from 222.73.205.9: 1 Time(s)
   bin123/password from 222.73.205.9: 1 Time(s)
   bishop/none from 222.73.205.9: 1 Time(s)
   bishop/password from 222.73.205.9: 1 Time(s)
   bishop123/none from 222.73.205.9: 1 Time(s)
   bishop123/password from 222.73.205.9: 1 Time(s)
   bitch/none from 222.73.205.9: 1 Time(s)
   bitch/password from 222.73.205.9: 1 Time(s)
   bitch123/none from 222.73.205.9: 1 Time(s)
   bitch123/password from 222.73.205.9: 1 Time(s)
   blacks/none from 222.73.205.9: 1 Time(s)
   blacks/password from 222.73.205.9: 1 Time(s)
   blacks123/none from 222.73.205.9: 1 Time(s)
   blacks123/password from 222.73.205.9: 1 Time(s)
   blond/none from 222.73.205.9: 1 Time(s)
   blond/password from 222.73.205.9: 1 Time(s)
   blond123/none from 222.73.205.9: 1 Time(s)
   blond123/password from 222.73.205.9: 1 Time(s)
   brett/none from 222.73.205.9: 2 Time(s)
   brett/password from 222.73.205.9: 2 Time(s)
   cyborg/none from 222.73.205.9: 1 Time(s)
   cyborg/password from 222.73.205.9: 1 Time(s)
   cyrus/none from 217.91.136.50: 1 Time(s)
   cyrus/password from 217.91.136.50: 1 Time(s)
   data/none from 222.73.205.9: 3 Time(s)
   data/password from 222.73.205.9: 3 Time(s)
   david/none from 222.73.205.9: 3 Time(s)
   david/password from 222.73.205.9: 3 Time(s)
   delta/none from 123.30.98.50: 4 Time(s)
   delta/password from 123.30.98.50: 4 Time(s)
   deutch/none from 222.73.205.9: 1 Time(s)
   deutch/password from 222.73.205.9: 1 Time(s)
   deutchland/none from 222.73.205.9: 1 Time(s)
   deutchland/password from 222.73.205.9: 1 Time(s)
   file/none from 222.73.205.9: 1 Time(s)
   file/password from 222.73.205.9: 1 Time(s)
   fluffy/none from 222.73.205.9: 3 Time(s)
   fluffy/password from 222.73.205.9: 3 Time(s)
   george/none from 222.73.205.9: 3 Time(s)
   george/password from 222.73.205.9: 3 Time(s)
   german/none from 222.73.205.9: 1 Time(s)
   german/password from 222.73.205.9: 1 Time(s)
   guest/none from 222.73.205.9: 5 Time(s)
   guest/password from 222.73.205.9: 5 Time(s)
   hitler/none from 222.73.205.9: 1 Time(s)
   hitler/password from 222.73.205.9: 1 Time(s)
   http/none from 222.73.205.9: 3 Time(s)
   http/password from 222.73.205.9: 3 Time(s)
   httpd/none from 222.73.205.9: 3 Time(s)
   httpd/password from 222.73.205.9: 3 Time(s)
   info/none from 222.73.205.9: 6 Time(s)
   info/password from 222.73.205.9: 6 Time(s)
   john/none from 222.73.205.9: 3 Time(s)
   john/password from 222.73.205.9: 3 Time(s)
   leave/none from 222.73.205.9: 1 Time(s)
   leave/password from 222.73.205.9: 1 Time(s)
   left/none from 222.73.205.9: 1 Time(s)
   left/password from 222.73.205.9: 1 Time(s)
   library/none from 222.73.205.9: 3 Time(s)
   library/password from 222.73.205.9: 3 Time(s)
   linux/none from 222.73.205.9: 3 Time(s)
   linux/password from 222.73.205.9: 3 Time(s)
   master/none from 222.73.205.9: 2 Time(s)
   master/password from 222.73.205.9: 2 Time(s)
   michael/none from 222.73.205.9: 3 Time(s)
   michael/password from 222.73.205.9: 3 Time(s)
   mike/none from 222.73.205.9: 2 Time(s)
   mike/password from 222.73.205.9: 2 Time(s)
   msg/none from 222.73.205.9: 1 Time(s)
   msg/password from 222.73.205.9: 1 Time(s)
   network/none from 222.73.205.9: 2 Time(s)
   network/password from 222.73.205.9: 2 Time(s)
   nina/none from 222.73.205.9: 1 Time(s)
   nina/password from 222.73.205.9: 1 Time(s)
   notice/none from 222.73.205.9: 1 Time(s)
   notice/password from 222.73.205.9: 1 Time(s)
   office/none from 217.91.136.50: 5 Time(s)
   office/password from 217.91.136.50: 5 Time(s)
   oracle/none from 211.141.237.36: 2 Time(s)
   oracle/none from 222.73.205.9: 3 Time(s)
   oracle/password from 211.141.237.36: 2 Time(s)
   oracle/password from 222.73.205.9: 3 Time(s)
   paul/none from 222.73.205.9: 3 Time(s)
   paul/password from 222.73.205.9: 3 Time(s)
   pgsql/none from 222.73.205.9: 2 Time(s)
   pgsql/password from 222.73.205.9: 2 Time(s)
   psy/none from 222.73.205.9: 1 Time(s)
   psy/password from 222.73.205.9: 1 Time(s)
   recruit/none from 217.91.136.50: 5 Time(s)
   recruit/password from 217.91.136.50: 5 Time(s)
   richard/none from 222.73.205.9: 3 Time(s)
   richard/password from 222.73.205.9: 3 Time(s)
   right/none from 222.73.205.9: 1 Time(s)
   right/password from 222.73.205.9: 1 Time(s)
   robinson/none from 80.74.137.161: 12 Time(s)
   robinson/password from 80.74.137.161: 12 Time(s)
   sales/none from 217.91.136.50: 5 Time(s)
   sales/none from 222.73.205.9: 3 Time(s)
   sales/password from 217.91.136.50: 5 Time(s)
   sales/password from 222.73.205.9: 3 Time(s)
   samba/none from 217.91.136.50: 5 Time(s)
   samba/password from 217.91.136.50: 5 Time(s)
   sharon/none from 222.73.205.9: 1 Time(s)
   sharon/password from 222.73.205.9: 1 Time(s)
   shell/none from 222.73.205.9: 3 Time(s)
   shell/password from 222.73.205.9: 3 Time(s)
   shop/none from 222.73.205.9: 3 Time(s)
   shop/password from 222.73.205.9: 3 Time(s)
   spam/none from 217.91.136.50: 5 Time(s)
   spam/password from 217.91.136.50: 5 Time(s)
   staff/none from 217.91.136.50: 5 Time(s)
   staff/password from 217.91.136.50: 5 Time(s)
   stephen/none from 222.73.205.9: 3 Time(s)
   stephen/password from 222.73.205.9: 3 Time(s)
   test/none from 123.30.98.50: 1 Time(s)
   test/none from 211.141.237.36: 2 Time(s)
   test/none from 222.73.205.9: 7 Time(s)
   test/password from 123.30.98.50: 1 Time(s)
   test/password from 211.141.237.36: 2 Time(s)
   test/password from 222.73.205.9: 7 Time(s)
   tester/none from 123.30.98.50: 1 Time(s)
   tester/password from 123.30.98.50: 1 Time(s)
   testing/none from 123.30.98.50: 1 Time(s)
   testing/password from 123.30.98.50: 1 Time(s)
   tomcat/none from 217.91.136.50: 5 Time(s)
   tomcat/password from 217.91.136.50: 5 Time(s)
   troot/none from 211.141.237.36: 2 Time(s)
   troot/password from 211.141.237.36: 2 Time(s)
   unix/none from 222.73.205.9: 3 Time(s)
   unix/password from 222.73.205.9: 3 Time(s)
   user/none from 222.73.205.9: 2 Time(s)
   user/password from 222.73.205.9: 2 Time(s)
   username/none from 222.73.205.9: 2 Time(s)
   username/password from 222.73.205.9: 2 Time(s)
   virus/none from 217.91.136.50: 4 Time(s)
   virus/password from 217.91.136.50: 4 Time(s)
   web/none from 222.73.205.9: 3 Time(s)
   web/password from 222.73.205.9: 3 Time(s)
   webadmin/none from 217.91.136.50: 5 Time(s)
   webadmin/none from 222.73.205.9: 3 Time(s)
   webadmin/password from 217.91.136.50: 5 Time(s)
   webadmin/password from 222.73.205.9: 3 Time(s)
   webmaster/none from 222.73.205.9: 4 Time(s)
   webmaster/password from 222.73.205.9: 4 Time(s)
   word/none from 222.73.205.9: 2 Time(s)
   word/password from 222.73.205.9: 2 Time(s)
   www/none from 222.73.205.9: 3 Time(s)
   www/password from 222.73.205.9: 3 Time(s)
   wwwrun/none from 222.73.205.9: 3 Time(s)
   wwwrun/password from 222.73.205.9: 3 Time(s)

User login attempt failed because:
   shell /sbin/nologin does not exist:
      alias : 5 Time(s)

Users logging in through sshd:
   dmah:
      S010600012345678a.cg.shawcable.net (70.72.50.47): 1 time

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
dmah => root
------------------------------------------------------------------------------
/bin/su -

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 


 --------------------- vpopmail Begin ------------------------ 


No Such User Found:
	cbird@ - 1 Time(s)
	debbie@ - 7 Time(s)

 ---------------------- vpopmail End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   57G   12G  84% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 



More information about the Sysadmin mailing list