[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Wed Jan 27 06:27:43 CST 2010


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Wed Jan 27 06:25:20 2010
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /home/dmah/bin/qmail-kill.sh 1> /dev/null 2>&1: 144 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

6.32 MB transfered in 28417 responses  (1xx 0, 2xx 2, 3xx 28037, 4xx 378, 5xx 0) 
 31 Images (0.01 MB),
 7 Documents (0.00 MB),
 2 Archives (0.00 MB),
 2 Movies files (0.00 MB),
 28196 Content pages (6.26 MB),
 3 Redirects (0.00 MB),
 176 Other (0.05 MB) 

Attempts to use 1 known hacks were logged 4 time(s)
  phpmyadmin   by 
          61.187.94.171 4 time(s) 

A total of 1 sites probed the server 
  61.187.94.171  

A total of 40 unidentified 'other' records logged
  GET /shaggy/javascript/create_slideshow HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff HTTP/1.1 with response code(s) 1 404 responses
  GET /fields/files/template_trifold.fh9 HTTP/1.1 with response code(s) 1 404 responses
  GET /cbird HTTP/1.1 with response code(s) 1 404 responses
  POST /signup.cfm HTTP/1.0 with response code(s) 97 404 responses
  GET /PHP-Login-System-with-Admin-Features/ll tell you. If you look in constants.php you HTTP/1.1 with response code(s) 1 400 responses
  GET /mccreath/potatosalad/archives/~amnsnow.mpe HTTP/1.1 with response code(s) 1 404 responses
  GET /jesteruk HTTP/1.1 with response code(s) 1 404 responses
  GET /anarion HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 9 404 responses
  GET /liorean HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET  HTTP/1.1 with response code(s) 1 400 responses
  GET /frymaster HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/137 HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 16 400 responses
  GET /w00tw00t.at.ISC.SANS.test0:) HTTP/1.1 with response code(s) 3 400 responses
  GET /yournamehere HTTP/1.1 with response code(s) 1 404 responses
  GET /php-login-system-with-admin-features\" class=http://jonervdd.webs.com/newsimb588.txt? HTTP/1.1 with response code(s) 1 400 responses
  GET /seb HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm?foo=bar&far=bo HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\" HTTP/1.0 with response code(s) 2 404 responses
  GET /lindsay/nav HTTP/1.1 with response code(s) 1 404 responses
  GET /kroet HTTP/1.1 with response code(s) 1 404 responses
  GET /yourusername HTTP/1.1 with response code(s) 1 404 responses
  GET /bsrb\xb8\xb4\xbc\xfe mirserver.rar HTTP/1.1 with response code(s) 1 400 responses
  - with response code(s) 9 408 responses
  GET /garrett/site/books/factual HTTP/1.0 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/select_reset.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60222 .php?id=90&sa=X&ei=GVFfS8nPBszD-QaUnIS4DA&ved=0CMgBEB8w6AI4rAI' HTTP/1.0 with response code(s) 3 400 responses
  GET /liorean HTTP/1.0 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 4 404 responses
  GET /turkif HTTP/1.1 with response code(s) 1 404 responses

A total of 11 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 3 time(s) 
      DoCoMo/2.0 N905i(c100;TB;W24H16) (compatible; Googlebot-Mobile/2.1; +http://www.google.com/bot.html) 1 time(s) 
      Yandex/1.01.001 (compatible; Win16; H) 4 time(s) 
      Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; obot) 1 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 1 time(s) 
      Mozilla/5.0 (compatible; Exabot/3.0 (BiggerBetter); +http://www.exabot.com/go/robot) 1 time(s) 
      Yeti/1.0 (NHN Corp.; http://help.naver.com/robots/) 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 22 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 2 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 5 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 2 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode
5 Time(s): sending pkt_too_big (len[1500] pmtu[1492]) to self

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 510 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Sessions Opened:
      dmah: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)
      dmah(uid=0) -> root: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   s010600012345678a.cg.shawcable.net(70.72.50.47): 1 Time(s)

Didn't receive an ident from these IPs:
   119.62.128.113: 1 Time(s)
   121.32.89.210: 2 Time(s)
   148.208.234.6: 4 Time(s)
   213.34.207.200: 5 Time(s)
   218.153.247.23: 3 Time(s)
   host211-99-static.88-94-b.business.telecomitalia.it (94.88.99.211): 4 Time(s)
   mail.homeart.com.au (210.8.162.236): 5 Time(s)
   mail.pugr.vng.com.ru (213.234.11.170): 1 Time(s)
   tigger.netnet.net (206.40.111.181): 5 Time(s)
   unassigned.psychz.net (199.71.213.3): 2 Time(s)

Failed logins from these:
   00089/password from 213.234.11.170: 4 Time(s)
   Aaliyah/password from 213.234.11.170: 2 Time(s)
   Aaron/password from 213.234.11.170: 6 Time(s)
   Gnome/password from 206.167.240.196: 4 Time(s)
   PlcmSpIp/password from 206.40.111.181: 2 Time(s)
   TeamSpeak/password from 206.40.111.181: 1 Time(s)
   WinD3str0y/password from 206.167.240.196: 4 Time(s)
   a/password from 213.234.11.170: 3 Time(s)
   aa/password from 213.234.11.170: 4 Time(s)
   admin/password from 206.167.240.196: 3 Time(s)
   admin/password from 94.88.99.211: 4 Time(s)
   administrator/password from 121.32.89.210: 1 Time(s)
   agata/password from 121.32.89.210: 1 Time(s)
   alexandre/password from 121.32.89.210: 1 Time(s)
   alexandre/password from 213.234.11.170: 5 Time(s)
   alias/password from 213.34.207.200: 5 Time(s)
   alisia/password from 206.167.240.196: 8 Time(s)
   amstelecom/password from 213.234.11.170: 2 Time(s)
   bds/password from 206.167.240.196: 3 Time(s)
   cisco/password from 206.40.111.181: 1 Time(s)
   cyrus/password from 213.34.207.200: 5 Time(s)
   dasusr1/password from 206.40.111.181: 1 Time(s)
   db2inst1/password from 206.40.111.181: 2 Time(s)
   devil/password from 206.167.240.196: 3 Time(s)
   domin/password from 206.40.111.181: 1 Time(s)
   fido/password from 206.167.240.196: 4 Time(s)
   foc/password from 206.167.240.196: 4 Time(s)
   ftp/password from 213.34.207.200: 5 Time(s)
   guest/password from 206.167.240.196: 3 Time(s)
   guest/password from 94.88.99.211: 4 Time(s)
   heroin/password from 206.167.240.196: 4 Time(s)
   hlds/password from 206.167.240.196: 3 Time(s)
   ibiza/password from 206.167.240.196: 4 Time(s)
   japca/password from 206.167.240.196: 4 Time(s)
   joan/password from 121.32.89.210: 1 Time(s)
   johan/password from 121.32.89.210: 1 Time(s)
   jordan/password from 206.167.240.196: 3 Time(s)
   joseluis/password from 121.32.89.210: 1 Time(s)
   joseluis/password from 213.234.11.170: 4 Time(s)
   kmysclub/password from 206.167.240.196: 2 Time(s)
   kylix/password from 206.167.240.196: 4 Time(s)
   lovegaku/password from 206.167.240.196: 4 Time(s)
   mac/password from 206.167.240.196: 3 Time(s)
   michael/password from 213.34.207.200: 5 Time(s)
   monitor/password from 206.167.240.196: 4 Time(s)
   mysql/password from 94.88.99.211: 4 Time(s)
   nrg/password from 206.167.240.196: 4 Time(s)
   office/password from 213.34.207.200: 5 Time(s)
   oracle/password from 202.165.177.130: 2 Time(s)
   oracle/password from 206.167.240.196: 3 Time(s)
   oracle/password from 213.34.207.200: 5 Time(s)
   oracle/password from 94.88.99.211: 2 Time(s)
   p0stgres/password from 206.167.240.196: 4 Time(s)
   paul/password from 213.34.207.200: 4 Time(s)
   plcmspip/password from 206.40.111.181: 4 Time(s)
   postfix/password from 213.34.207.200: 5 Time(s)
   postgres/password from 213.34.207.200: 5 Time(s)
   postmaster/password from 213.34.207.200: 5 Time(s)
   ppazmino/password from 213.234.11.170: 2 Time(s)
   raimundo/password from 121.32.89.210: 2 Time(s)
   recruit/password from 213.34.207.200: 5 Time(s)
   root/password from 121.32.89.210: 1 Time(s)
   root/password from 121.37.58.49: 4 Time(s)
   root/password from 148.208.234.6: 30 Time(s)
   root/password from 202.165.177.130: 26 Time(s)
   root/password from 206.167.240.196: 93 Time(s)
   root/password from 213.34.207.200: 2 Time(s)
   root/password from 218.6.160.253: 10 Time(s)
   root/password from 86.124.54.72: 28 Time(s)
   root/password from 88.208.208.65: 43 Time(s)
   root/password from 94.88.99.211: 4 Time(s)
   sales/password from 213.34.207.200: 5 Time(s)
   samba/password from 213.34.207.200: 5 Time(s)
   sbin/password from 206.167.240.196: 4 Time(s)
   scan/password from 206.167.240.196: 4 Time(s)
   sebastian/password from 121.32.89.210: 1 Time(s)
   spam/password from 213.34.207.200: 5 Time(s)
   specialk/password from 206.167.240.196: 3 Time(s)
   staff/password from 213.34.207.200: 5 Time(s)
   svn/password from 206.40.111.181: 1 Time(s)
   sybase/password from 206.167.240.196: 4 Time(s)
   test/password from 202.165.177.130: 2 Time(s)
   test/password from 206.167.240.196: 3 Time(s)
   test/password from 206.40.111.181: 3 Time(s)
   test/password from 213.34.207.200: 5 Time(s)
   test/password from 94.88.99.211: 4 Time(s)
   tomcat/password from 213.34.207.200: 5 Time(s)
   toni/password from 206.167.240.196: 4 Time(s)
   tool/password from 206.167.240.196: 8 Time(s)
   ts/password from 206.40.111.181: 1 Time(s)
   utilidad/password from 213.234.11.170: 2 Time(s)
   utilidades/password from 213.234.11.170: 2 Time(s)
   virus/password from 213.34.207.200: 5 Time(s)
   webadmin/password from 213.34.207.200: 5 Time(s)
   webmaster/password from 213.34.207.200: 5 Time(s)
   webmaster/password from 94.88.99.211: 4 Time(s)
   www/password from 206.167.240.196: 4 Time(s)
   xwp/password from 206.167.240.196: 4 Time(s)

Illegal users from these:
   00089/none from 213.234.11.170: 4 Time(s)
   00089/password from 213.234.11.170: 4 Time(s)
   Aaliyah/none from 213.234.11.170: 2 Time(s)
   Aaliyah/password from 213.234.11.170: 2 Time(s)
   Aaron/none from 213.234.11.170: 6 Time(s)
   Aaron/password from 213.234.11.170: 6 Time(s)
   Gnome/none from 206.167.240.196: 4 Time(s)
   Gnome/password from 206.167.240.196: 4 Time(s)
   PlcmSpIp/none from 206.40.111.181: 2 Time(s)
   PlcmSpIp/password from 206.40.111.181: 2 Time(s)
   TeamSpeak/none from 206.40.111.181: 1 Time(s)
   TeamSpeak/password from 206.40.111.181: 1 Time(s)
   WinD3str0y/none from 206.167.240.196: 4 Time(s)
   WinD3str0y/password from 206.167.240.196: 4 Time(s)
   a/none from 213.234.11.170: 3 Time(s)
   a/password from 213.234.11.170: 3 Time(s)
   aa/none from 213.234.11.170: 4 Time(s)
   aa/password from 213.234.11.170: 4 Time(s)
   admin/none from 206.167.240.196: 3 Time(s)
   admin/none from 94.88.99.211: 4 Time(s)
   admin/password from 206.167.240.196: 3 Time(s)
   admin/password from 94.88.99.211: 4 Time(s)
   administrator/none from 121.32.89.210: 1 Time(s)
   administrator/password from 121.32.89.210: 1 Time(s)
   agata/none from 121.32.89.210: 1 Time(s)
   agata/password from 121.32.89.210: 1 Time(s)
   alexandre/none from 121.32.89.210: 1 Time(s)
   alexandre/none from 213.234.11.170: 5 Time(s)
   alexandre/password from 121.32.89.210: 1 Time(s)
   alexandre/password from 213.234.11.170: 5 Time(s)
   alias/password from 213.34.207.200: 5 Time(s)
   alisia/none from 206.167.240.196: 8 Time(s)
   alisia/password from 206.167.240.196: 8 Time(s)
   amstelecom/none from 213.234.11.170: 2 Time(s)
   amstelecom/password from 213.234.11.170: 2 Time(s)
   bds/none from 206.167.240.196: 3 Time(s)
   bds/password from 206.167.240.196: 3 Time(s)
   cisco/none from 206.40.111.181: 1 Time(s)
   cisco/password from 206.40.111.181: 1 Time(s)
   cyrus/none from 213.34.207.200: 5 Time(s)
   cyrus/password from 213.34.207.200: 5 Time(s)
   dasusr1/none from 206.40.111.181: 1 Time(s)
   dasusr1/password from 206.40.111.181: 1 Time(s)
   db2inst1/none from 206.40.111.181: 2 Time(s)
   db2inst1/password from 206.40.111.181: 2 Time(s)
   devil/none from 206.167.240.196: 3 Time(s)
   devil/password from 206.167.240.196: 3 Time(s)
   domin/none from 206.40.111.181: 1 Time(s)
   domin/password from 206.40.111.181: 1 Time(s)
   fido/none from 206.167.240.196: 4 Time(s)
   fido/password from 206.167.240.196: 4 Time(s)
   foc/none from 206.167.240.196: 4 Time(s)
   foc/password from 206.167.240.196: 4 Time(s)
   guest/none from 206.167.240.196: 3 Time(s)
   guest/none from 94.88.99.211: 4 Time(s)
   guest/password from 206.167.240.196: 3 Time(s)
   guest/password from 94.88.99.211: 4 Time(s)
   heroin/none from 206.167.240.196: 4 Time(s)
   heroin/password from 206.167.240.196: 4 Time(s)
   hlds/none from 206.167.240.196: 3 Time(s)
   hlds/password from 206.167.240.196: 3 Time(s)
   ibiza/none from 206.167.240.196: 4 Time(s)
   ibiza/password from 206.167.240.196: 4 Time(s)
   japca/none from 206.167.240.196: 4 Time(s)
   japca/password from 206.167.240.196: 4 Time(s)
   joan/none from 121.32.89.210: 1 Time(s)
   joan/password from 121.32.89.210: 1 Time(s)
   johan/none from 121.32.89.210: 1 Time(s)
   johan/password from 121.32.89.210: 1 Time(s)
   jordan/none from 206.167.240.196: 3 Time(s)
   jordan/password from 206.167.240.196: 3 Time(s)
   joseluis/none from 121.32.89.210: 1 Time(s)
   joseluis/none from 213.234.11.170: 4 Time(s)
   joseluis/password from 121.32.89.210: 1 Time(s)
   joseluis/password from 213.234.11.170: 4 Time(s)
   kmysclub/none from 206.167.240.196: 2 Time(s)
   kmysclub/password from 206.167.240.196: 2 Time(s)
   kylix/none from 206.167.240.196: 4 Time(s)
   kylix/password from 206.167.240.196: 4 Time(s)
   lovegaku/none from 206.167.240.196: 4 Time(s)
   lovegaku/password from 206.167.240.196: 4 Time(s)
   mac/none from 206.167.240.196: 3 Time(s)
   mac/password from 206.167.240.196: 3 Time(s)
   michael/none from 213.34.207.200: 5 Time(s)
   michael/password from 213.34.207.200: 5 Time(s)
   monitor/none from 206.167.240.196: 4 Time(s)
   monitor/password from 206.167.240.196: 4 Time(s)
   nrg/none from 206.167.240.196: 4 Time(s)
   nrg/password from 206.167.240.196: 4 Time(s)
   office/none from 213.34.207.200: 5 Time(s)
   office/password from 213.34.207.200: 5 Time(s)
   oracle/none from 202.165.177.130: 2 Time(s)
   oracle/none from 206.167.240.196: 3 Time(s)
   oracle/none from 213.34.207.200: 5 Time(s)
   oracle/none from 94.88.99.211: 2 Time(s)
   oracle/password from 202.165.177.130: 2 Time(s)
   oracle/password from 206.167.240.196: 3 Time(s)
   oracle/password from 213.34.207.200: 5 Time(s)
   oracle/password from 94.88.99.211: 2 Time(s)
   p0stgres/none from 206.167.240.196: 4 Time(s)
   p0stgres/password from 206.167.240.196: 4 Time(s)
   paul/none from 213.34.207.200: 4 Time(s)
   paul/password from 213.34.207.200: 4 Time(s)
   plcmspip/none from 206.40.111.181: 4 Time(s)
   plcmspip/password from 206.40.111.181: 4 Time(s)
   postfix/none from 213.34.207.200: 5 Time(s)
   postfix/password from 213.34.207.200: 5 Time(s)
   postmaster/none from 213.34.207.200: 5 Time(s)
   postmaster/password from 213.34.207.200: 5 Time(s)
   ppazmino/none from 213.234.11.170: 2 Time(s)
   ppazmino/password from 213.234.11.170: 2 Time(s)
   raimundo/none from 121.32.89.210: 2 Time(s)
   raimundo/password from 121.32.89.210: 2 Time(s)
   recruit/none from 213.34.207.200: 5 Time(s)
   recruit/password from 213.34.207.200: 5 Time(s)
   sales/none from 213.34.207.200: 5 Time(s)
   sales/password from 213.34.207.200: 5 Time(s)
   samba/none from 213.34.207.200: 5 Time(s)
   samba/password from 213.34.207.200: 5 Time(s)
   sbin/none from 206.167.240.196: 4 Time(s)
   sbin/password from 206.167.240.196: 4 Time(s)
   scan/none from 206.167.240.196: 4 Time(s)
   scan/password from 206.167.240.196: 4 Time(s)
   sebastian/none from 121.32.89.210: 1 Time(s)
   sebastian/password from 121.32.89.210: 1 Time(s)
   spam/none from 213.34.207.200: 5 Time(s)
   spam/password from 213.34.207.200: 5 Time(s)
   specialk/none from 206.167.240.196: 3 Time(s)
   specialk/password from 206.167.240.196: 3 Time(s)
   staff/none from 213.34.207.200: 5 Time(s)
   staff/password from 213.34.207.200: 5 Time(s)
   svn/none from 206.40.111.181: 1 Time(s)
   svn/password from 206.40.111.181: 1 Time(s)
   sybase/none from 206.167.240.196: 4 Time(s)
   sybase/password from 206.167.240.196: 4 Time(s)
   test/none from 202.165.177.130: 2 Time(s)
   test/none from 206.167.240.196: 3 Time(s)
   test/none from 206.40.111.181: 3 Time(s)
   test/none from 213.34.207.200: 5 Time(s)
   test/none from 94.88.99.211: 4 Time(s)
   test/password from 202.165.177.130: 2 Time(s)
   test/password from 206.167.240.196: 3 Time(s)
   test/password from 206.40.111.181: 3 Time(s)
   test/password from 213.34.207.200: 5 Time(s)
   test/password from 94.88.99.211: 4 Time(s)
   tomcat/none from 213.34.207.200: 5 Time(s)
   tomcat/password from 213.34.207.200: 5 Time(s)
   toni/none from 206.167.240.196: 4 Time(s)
   toni/password from 206.167.240.196: 4 Time(s)
   tool/none from 206.167.240.196: 8 Time(s)
   tool/password from 206.167.240.196: 8 Time(s)
   ts/none from 206.40.111.181: 1 Time(s)
   ts/password from 206.40.111.181: 1 Time(s)
   utilidad/none from 213.234.11.170: 2 Time(s)
   utilidad/password from 213.234.11.170: 2 Time(s)
   utilidades/none from 213.234.11.170: 2 Time(s)
   utilidades/password from 213.234.11.170: 2 Time(s)
   virus/none from 213.34.207.200: 5 Time(s)
   virus/password from 213.34.207.200: 5 Time(s)
   webadmin/none from 213.34.207.200: 5 Time(s)
   webadmin/password from 213.34.207.200: 5 Time(s)
   webmaster/none from 213.34.207.200: 5 Time(s)
   webmaster/none from 94.88.99.211: 4 Time(s)
   webmaster/password from 213.34.207.200: 5 Time(s)
   webmaster/password from 94.88.99.211: 4 Time(s)
   www/none from 206.167.240.196: 4 Time(s)
   www/password from 206.167.240.196: 4 Time(s)
   xwp/none from 206.167.240.196: 4 Time(s)
   xwp/password from 206.167.240.196: 4 Time(s)

User login attempt failed because:
   shell /sbin/nologin does not exist:
      alias : 5 Time(s)

Users logging in through sshd:
   dmah:
      S010600012345678a.cg.shawcable.net (70.72.50.47): 1 time

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
dmah => root
------------------------------------------------------------------------------
/bin/su -

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 


 --------------------- vpopmail Begin ------------------------ 


No Such User Found:
	academia@ - 305 Time(s)
	alex@ - 305 Time(s)
	cbird@ - 1 Time(s)
	hello@ - 87 Time(s)
	inna@ - 305 Time(s)
	manager@ - 305 Time(s)

 ---------------------- vpopmail End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   56G   13G  83% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 



More information about the Sysadmin mailing list