[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Wed Jul 28 06:26:40 CDT 2010


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Wed Jul 28 06:25:42 2010
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
      /home/dmah/bin/user_reminder.pl: 24 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /home/dmah/bin/qmail-kill.sh 1> /dev/null 2>&1: 144 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

4 messages delivered immediately to 4 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.35 MB transfered in 1196 responses  (1xx 0, 2xx 0, 3xx 64, 4xx 1132, 5xx 0) 
 13 Images (0.00 MB),
 8 Documents (0.00 MB),
 2 Archives (0.00 MB),
 1140 Content pages (0.33 MB),
 1 Redirects (0.00 MB),
 32 Other (0.02 MB) 

Attempts to use 1 known hacks were logged 779 time(s)
  phpmyadmin   by 
          85.126.61.178 386 time(s) 
          64.15.159.169 6 time(s) 
          70.52.235.183 387 time(s) 

A total of 3 sites probed the server 
  85.126.61.178  
  64.15.159.169  
  70.52.235.183  

A total of 13 unidentified 'other' records logged
  GET /matthewo HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 3 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 9 400 responses
  GET /djc HTTP/1.1 with response code(s) 1 404 responses
  - with response code(s) 5 408 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/preload_n_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features HTTP/1.1 with response code(s) 1 400 responses, 1 408 responses
  GET /node/60180 with response code(s) 1 404 responses

A total of 12 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 11 time(s) 
      Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) 6 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 3 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.0.13) Gecko/2009073022 Firefox/3.5.2 (.NET CLR 3.5.30729) SurveyBot/2.3 (DomainTools) 1 time(s) 
      Mozilla/5.0 (compatible; DotBot/1.1; http://www.dotnetdotcom.org/, crawler at dotnetdotcom.org) 1 time(s) 
      Mozilla/5.0 (compatible; spbot/2.0.4; +http://www.seoprofiler.com/bot ) 7 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm)._ 4 time(s) 
      msnbot-media/1.1 (+http://search.msn.com/msnbot.htm) 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 12 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.0.2) Gecko/2008091620 Firefox/3.0.2 1 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 3 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 5 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


WARNING:  Kernel Errors Present
   59.99.193.103 sent an invalid ICMP type 3, code 0 error to a broadcast: ...:  3 Time(s)

1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 510 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 26 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      unknown (114.255.59.3): 10 Time(s)
      unknown (123.127.150.200): 10 Time(s)
      unknown (202.103.52.143): 10 Time(s)
      unknown (211.143.6.149): 10 Time(s)
      unknown (212.254.218.162): 10 Time(s)
      unknown (59.40.182.68): 10 Time(s)
      unknown (60.19.28.24): 10 Time(s)
      unknown (121.176.124.65): 9 Time(s)
      unknown (211.94.154.130): 6 Time(s)
      unknown (94.101.118.24): 6 Time(s)
      unknown (114.247.18.10): 5 Time(s)
      unknown (114.247.18.14): 5 Time(s)
      unknown (114.247.18.9): 5 Time(s)
      unknown (123.139.3.101): 5 Time(s)
      unknown (190.58.158.3.business.static.tstt.net.tt): 5 Time(s)
      unknown (190.72.100.205): 5 Time(s)
      unknown (200-171-178-213.dsl.telesp.net.br): 5 Time(s)
      unknown (200.247.215.250): 5 Time(s)
      unknown (201.76.166.70): 5 Time(s)
      unknown (202.109.115.169): 5 Time(s)
      unknown (203.39.124.196): 5 Time(s)
      unknown (208.66.69.237): 5 Time(s)
      unknown (211.115.234.143): 5 Time(s)
      unknown (211.139.26.139): 5 Time(s)
      unknown (218.248.75.161): 5 Time(s)
      unknown (219.149.151.12): 5 Time(s)
      unknown (221.11.1.81): 5 Time(s)
      unknown (221.13.79.34): 5 Time(s)
      unknown (222.177.24.35): 5 Time(s)
      unknown (222.177.24.40): 5 Time(s)
      unknown (222.221.12.104): 5 Time(s)
      unknown (58.132.10.149): 5 Time(s)
      unknown (58.30.255.12): 5 Time(s)
      unknown (60.216.174.152): 5 Time(s)
      unknown (210.21.208.238): 4 Time(s)
      unknown (219.142.61.2): 4 Time(s)
      unknown (221.232.65.50): 4 Time(s)
      unknown (222.161.58.83): 4 Time(s)
      unknown (59.37.44.133): 4 Time(s)
      unknown (123.127.218.135): 3 Time(s)
      unknown (124.207.140.12): 3 Time(s)
      unknown (221.226.2.178): 3 Time(s)
      unknown (58.49.53.4): 3 Time(s)
      unknown (202.108.143.2): 2 Time(s)
      unknown (210.51.240.146): 2 Time(s)
      unknown (219.143.246.70): 2 Time(s)
      unknown (219.146.185.114): 2 Time(s)
      unknown (121.15.129.157): 1 Time(s)
      unknown (200-63-163-27.static.speedy.com.ar): 1 Time(s)
      unknown (210.21.243.170): 1 Time(s)
      unknown (219.146.185.102): 1 Time(s)
      unknown (219.146.185.6): 1 Time(s)
      unknown (219.93.199.14): 1 Time(s)
      unknown (219.93.199.18): 1 Time(s)
      unknown (219.93.199.22): 1 Time(s)
      unknown (219.93.199.26): 1 Time(s)
      unknown (222.168.33.114): 1 Time(s)
      unknown (61.156.234.162): 1 Time(s)
      unknown (61.191.41.53): 1 Time(s)
   Invalid Users:
      Unknown Account: 263 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   190-72-100-205.dyn.dsl.cantv.net(190.72.100.205): 5 Time(s)
   35.24.177.222.cq.cq.cta.net.cn: 5 Time(s)
   40.24.177.222.cq.cq.cta.net.cn: 5 Time(s)
   dd-143-2-a8.bta.net.cn: 2 Time(s)
   demona.gargoyles.ch: 10 Time(s)
   mvx-201-76-166-70.mundivox.com: 5 Time(s)
   reverse-mtl-69-237.gogax.com(208.66.69.237): 5 Time(s)
   reverse.gdsz.cncnet.net: 4 Time(s)

Didn't receive an ident from these IPs:
   210.177.76.138: 2 Time(s)
   211.62.35.223: 5 Time(s)
   61.191.41.53: 4 Time(s)
   firewall.peajemet.cl (200.73.4.179): 5 Time(s)
   ip.194.150.95.66.veer.net.ua (194.150.95.66): 5 Time(s)
   oslo048.server4you.de (62.75.178.48): 5 Time(s)

Failed logins from these:
   Br0nw3n/password from 62.75.178.48: 2 Time(s)
   PlcmSpIp/password from 62.75.178.48: 2 Time(s)
   TeamSpeak/password from 62.75.178.48: 4 Time(s)
   abrielle/password from 210.177.76.138: 2 Time(s)
   admin/password from 211.62.35.223: 3 Time(s)
   admin01/password from 211.62.35.223: 3 Time(s)
   admin02/password from 211.62.35.223: 3 Time(s)
   admin1/password from 211.62.35.223: 3 Time(s)
   admin2/password from 211.62.35.223: 3 Time(s)
   apache/password from 211.62.35.223: 3 Time(s)
   bsoft/password from 62.75.178.48: 2 Time(s)
   cyrus/password from 62.75.178.48: 4 Time(s)
   dasusr1/password from 62.75.178.48: 2 Time(s)
   db2inst1/password from 62.75.178.48: 2 Time(s)
   dtedrick/password from 62.75.178.48: 2 Time(s)
   ftp/password from 211.62.35.223: 3 Time(s)
   ftp/password from 92.48.228.130: 5 Time(s)
   ftpuser/password from 211.62.35.223: 3 Time(s)
   gameserver/password from 92.48.228.130: 5 Time(s)
   gameservers/password from 92.48.228.130: 5 Time(s)
   gastftp/password from 92.48.228.130: 5 Time(s)
   gasttest/password from 92.48.228.130: 5 Time(s)
   gdm/password from 92.48.228.130: 5 Time(s)
   guestftp/password from 92.48.228.130: 5 Time(s)
   guesttest/password from 92.48.228.130: 5 Time(s)
   hlds1/password from 62.75.178.48: 10 Time(s)
   home/password from 92.48.228.130: 2 Time(s)
   mail/password from 211.62.35.223: 3 Time(s)
   nagios/password from 211.62.35.223: 3 Time(s)
   nagios/password from 92.48.228.130: 35 Time(s)
   oracle/password from 211.154.254.172: 5 Time(s)
   oracle/password from 211.62.35.223: 3 Time(s)
   physics/keyboard-interactive/pam from 123.127.150.200: 5 Time(s)
   physics/keyboard-interactive/pam from 210.51.240.146: 2 Time(s)
   physics/keyboard-interactive/pam from 211.139.26.139: 5 Time(s)
   physics/keyboard-interactive/pam from 211.143.6.149: 5 Time(s)
   physics/keyboard-interactive/pam from 211.94.154.130: 3 Time(s)
   physics/keyboard-interactive/pam from 219.142.61.2: 2 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.102: 1 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.114: 2 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.6: 1 Time(s)
   physics/keyboard-interactive/pam from 221.11.1.81: 5 Time(s)
   physics/keyboard-interactive/pam from 222.221.12.104: 5 Time(s)
   physics/keyboard-interactive/pam from 58.49.53.4: 3 Time(s)
   physics/keyboard-interactive/pam from 59.40.182.68: 5 Time(s)
   physics/keyboard-interactive/pam from 60.19.28.24: 5 Time(s)
   physics/keyboard-interactive/pam from 61.156.234.162: 1 Time(s)
   plcmspip/password from 62.75.178.48: 4 Time(s)
   plotex/keyboard-interactive/pam from 190.58.158.3: 5 Time(s)
   proba/password from 92.48.228.130: 35 Time(s)
   probaftp/password from 92.48.228.130: 5 Time(s)
   probatest/password from 92.48.228.130: 5 Time(s)
   reno/keyboard-interactive/pam from 114.247.18.9: 5 Time(s)
   reno/keyboard-interactive/pam from 114.255.59.3: 5 Time(s)
   reno/keyboard-interactive/pam from 121.176.124.65: 4 Time(s)
   reno/keyboard-interactive/pam from 124.207.140.12: 3 Time(s)
   reno/keyboard-interactive/pam from 202.103.52.143: 5 Time(s)
   reno/keyboard-interactive/pam from 202.108.143.2: 2 Time(s)
   reno/keyboard-interactive/pam from 203.39.124.196: 5 Time(s)
   reno/keyboard-interactive/pam from 210.21.243.170: 1 Time(s)
   reno/keyboard-interactive/pam from 221.226.2.178: 3 Time(s)
   reno/keyboard-interactive/pam from 222.177.24.35: 2 Time(s)
   reno/keyboard-interactive/pam from 222.177.24.40: 3 Time(s)
   reno/keyboard-interactive/pam from 59.37.44.133: 4 Time(s)
   reno/keyboard-interactive/pam from 59.40.182.68: 5 Time(s)
   reyes/keyboard-interactive/pam from 121.15.129.157: 1 Time(s)
   reyes/keyboard-interactive/pam from 121.176.124.65: 5 Time(s)
   reyes/keyboard-interactive/pam from 123.127.150.200: 5 Time(s)
   reyes/keyboard-interactive/pam from 123.139.3.101: 5 Time(s)
   reyes/keyboard-interactive/pam from 200.171.178.213: 5 Time(s)
   reyes/keyboard-interactive/pam from 202.109.115.169: 5 Time(s)
   reyes/keyboard-interactive/pam from 210.21.208.238: 4 Time(s)
   reyes/keyboard-interactive/pam from 211.143.6.149: 5 Time(s)
   reyes/keyboard-interactive/pam from 219.149.151.12: 5 Time(s)
   reyes/keyboard-interactive/pam from 60.19.28.24: 5 Time(s)
   reyes/keyboard-interactive/pam from 94.101.118.24: 5 Time(s)
   rivera/keyboard-interactive/pam from 114.247.18.14: 5 Time(s)
   rivera/keyboard-interactive/pam from 123.127.218.135: 3 Time(s)
   rivera/keyboard-interactive/pam from 200.63.163.27: 1 Time(s)
   rivera/keyboard-interactive/pam from 212.254.218.162: 10 Time(s)
   rivera/keyboard-interactive/pam from 219.143.246.70: 2 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.14: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.18: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.22: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.26: 1 Time(s)
   rivera/keyboard-interactive/pam from 221.232.65.50: 4 Time(s)
   rivera/keyboard-interactive/pam from 222.161.58.83: 4 Time(s)
   rivera/keyboard-interactive/pam from 222.168.33.114: 1 Time(s)
   rivera/keyboard-interactive/pam from 58.132.10.149: 5 Time(s)
   rivera/keyboard-interactive/pam from 58.30.255.12: 5 Time(s)
   rivera/keyboard-interactive/pam from 61.191.41.53: 1 Time(s)
   rjf/keyboard-interactive/pam from 114.247.18.10: 5 Time(s)
   rjf/keyboard-interactive/pam from 114.255.59.3: 5 Time(s)
   rjf/keyboard-interactive/pam from 190.72.100.205: 5 Time(s)
   rjf/keyboard-interactive/pam from 200.247.215.250: 5 Time(s)
   rjf/keyboard-interactive/pam from 201.76.166.70: 5 Time(s)
   rjf/keyboard-interactive/pam from 208.66.69.237: 5 Time(s)
   rjf/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   rjf/keyboard-interactive/pam from 211.94.154.130: 3 Time(s)
   rjf/keyboard-interactive/pam from 218.248.75.161: 5 Time(s)
   rjf/keyboard-interactive/pam from 219.142.61.2: 2 Time(s)
   rjf/keyboard-interactive/pam from 221.13.79.34: 5 Time(s)
   rjf/keyboard-interactive/pam from 60.216.174.152: 5 Time(s)
   rjf/keyboard-interactive/pam from 94.101.118.24: 1 Time(s)
   roberto/keyboard-interactive/pam from 202.103.52.143: 5 Time(s)
   roberto/keyboard-interactive/pam from 222.177.24.35: 3 Time(s)
   roberto/keyboard-interactive/pam from 222.177.24.40: 2 Time(s)
   root/password from 211.154.254.172: 81 Time(s)
   root/password from 211.62.35.223: 32 Time(s)
   root/password from 88.191.68.82: 99 Time(s)
   ssn/password from 62.75.178.48: 2 Time(s)
   t-sato/password from 211.62.35.223: 3 Time(s)
   teamspeak/password from 62.75.178.48: 2 Time(s)
   test/password from 211.154.254.172: 5 Time(s)
   test/password from 211.62.35.223: 3 Time(s)
   test01/password from 211.62.35.223: 3 Time(s)
   test02/password from 211.62.35.223: 3 Time(s)
   test1/password from 211.62.35.223: 3 Time(s)
   test2/password from 211.62.35.223: 3 Time(s)
   ts/password from 62.75.178.48: 4 Time(s)
   webmaster/password from 92.48.228.130: 10 Time(s)
   www/password from 211.62.35.223: 3 Time(s)

Illegal users from these:
   Br0nw3n/none from 62.75.178.48: 2 Time(s)
   Br0nw3n/password from 62.75.178.48: 2 Time(s)
   PlcmSpIp/none from 62.75.178.48: 2 Time(s)
   PlcmSpIp/password from 62.75.178.48: 2 Time(s)
   TeamSpeak/none from 62.75.178.48: 4 Time(s)
   TeamSpeak/password from 62.75.178.48: 4 Time(s)
   abrielle/none from 210.177.76.138: 2 Time(s)
   abrielle/password from 210.177.76.138: 2 Time(s)
   admin/none from 211.62.35.223: 3 Time(s)
   admin/password from 211.62.35.223: 3 Time(s)
   admin01/none from 211.62.35.223: 3 Time(s)
   admin01/password from 211.62.35.223: 3 Time(s)
   admin02/none from 211.62.35.223: 3 Time(s)
   admin02/password from 211.62.35.223: 3 Time(s)
   admin1/none from 211.62.35.223: 3 Time(s)
   admin1/password from 211.62.35.223: 3 Time(s)
   admin2/none from 211.62.35.223: 3 Time(s)
   admin2/password from 211.62.35.223: 3 Time(s)
   apache/none from 211.62.35.223: 3 Time(s)
   apache/password from 211.62.35.223: 3 Time(s)
   bsoft/none from 62.75.178.48: 2 Time(s)
   bsoft/password from 62.75.178.48: 2 Time(s)
   cyrus/none from 62.75.178.48: 4 Time(s)
   cyrus/password from 62.75.178.48: 4 Time(s)
   dasusr1/none from 62.75.178.48: 2 Time(s)
   dasusr1/password from 62.75.178.48: 2 Time(s)
   db2inst1/none from 62.75.178.48: 2 Time(s)
   db2inst1/password from 62.75.178.48: 2 Time(s)
   dtedrick/none from 62.75.178.48: 2 Time(s)
   dtedrick/password from 62.75.178.48: 2 Time(s)
   ftpuser/none from 211.62.35.223: 3 Time(s)
   ftpuser/password from 211.62.35.223: 3 Time(s)
   gameserver/none from 92.48.228.130: 5 Time(s)
   gameserver/password from 92.48.228.130: 5 Time(s)
   gameservers/none from 92.48.228.130: 5 Time(s)
   gameservers/password from 92.48.228.130: 5 Time(s)
   gastftp/none from 92.48.228.130: 5 Time(s)
   gastftp/password from 92.48.228.130: 5 Time(s)
   gasttest/none from 92.48.228.130: 5 Time(s)
   gasttest/password from 92.48.228.130: 5 Time(s)
   gdm/none from 92.48.228.130: 5 Time(s)
   gdm/password from 92.48.228.130: 5 Time(s)
   guestftp/none from 92.48.228.130: 5 Time(s)
   guestftp/password from 92.48.228.130: 5 Time(s)
   guesttest/none from 92.48.228.130: 5 Time(s)
   guesttest/password from 92.48.228.130: 5 Time(s)
   hlds1/none from 62.75.178.48: 10 Time(s)
   hlds1/password from 62.75.178.48: 10 Time(s)
   home/none from 92.48.228.130: 2 Time(s)
   home/password from 92.48.228.130: 2 Time(s)
   nagios/none from 211.62.35.223: 3 Time(s)
   nagios/none from 92.48.228.130: 35 Time(s)
   nagios/password from 211.62.35.223: 3 Time(s)
   nagios/password from 92.48.228.130: 35 Time(s)
   oracle/none from 211.154.254.172: 5 Time(s)
   oracle/none from 211.62.35.223: 3 Time(s)
   oracle/password from 211.154.254.172: 5 Time(s)
   oracle/password from 211.62.35.223: 3 Time(s)
   physics/keyboard-interactive/pam from 123.127.150.200: 5 Time(s)
   physics/keyboard-interactive/pam from 210.51.240.146: 2 Time(s)
   physics/keyboard-interactive/pam from 211.139.26.139: 5 Time(s)
   physics/keyboard-interactive/pam from 211.143.6.149: 5 Time(s)
   physics/keyboard-interactive/pam from 211.94.154.130: 3 Time(s)
   physics/keyboard-interactive/pam from 219.142.61.2: 2 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.102: 1 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.114: 2 Time(s)
   physics/keyboard-interactive/pam from 219.146.185.6: 1 Time(s)
   physics/keyboard-interactive/pam from 221.11.1.81: 5 Time(s)
   physics/keyboard-interactive/pam from 222.221.12.104: 5 Time(s)
   physics/keyboard-interactive/pam from 58.49.53.4: 3 Time(s)
   physics/keyboard-interactive/pam from 59.40.182.68: 5 Time(s)
   physics/keyboard-interactive/pam from 60.19.28.24: 5 Time(s)
   physics/keyboard-interactive/pam from 61.156.234.162: 1 Time(s)
   physics/none from 123.127.150.200: 5 Time(s)
   physics/none from 210.51.240.146: 2 Time(s)
   physics/none from 211.139.26.139: 5 Time(s)
   physics/none from 211.143.6.149: 5 Time(s)
   physics/none from 211.94.154.130: 3 Time(s)
   physics/none from 219.142.61.2: 2 Time(s)
   physics/none from 219.146.185.102: 1 Time(s)
   physics/none from 219.146.185.114: 2 Time(s)
   physics/none from 219.146.185.6: 1 Time(s)
   physics/none from 221.11.1.81: 5 Time(s)
   physics/none from 222.221.12.104: 5 Time(s)
   physics/none from 58.49.53.4: 3 Time(s)
   physics/none from 59.40.182.68: 5 Time(s)
   physics/none from 60.19.28.24: 5 Time(s)
   physics/none from 61.156.234.162: 1 Time(s)
   plcmspip/none from 62.75.178.48: 4 Time(s)
   plcmspip/password from 62.75.178.48: 4 Time(s)
   plotex/keyboard-interactive/pam from 190.58.158.3: 5 Time(s)
   plotex/none from 190.58.158.3: 5 Time(s)
   proba/none from 92.48.228.130: 35 Time(s)
   proba/password from 92.48.228.130: 35 Time(s)
   probaftp/none from 92.48.228.130: 5 Time(s)
   probaftp/password from 92.48.228.130: 5 Time(s)
   probatest/none from 92.48.228.130: 5 Time(s)
   probatest/password from 92.48.228.130: 5 Time(s)
   reno/keyboard-interactive/pam from 114.247.18.9: 5 Time(s)
   reno/keyboard-interactive/pam from 114.255.59.3: 5 Time(s)
   reno/keyboard-interactive/pam from 121.176.124.65: 4 Time(s)
   reno/keyboard-interactive/pam from 124.207.140.12: 3 Time(s)
   reno/keyboard-interactive/pam from 202.103.52.143: 5 Time(s)
   reno/keyboard-interactive/pam from 202.108.143.2: 2 Time(s)
   reno/keyboard-interactive/pam from 203.39.124.196: 5 Time(s)
   reno/keyboard-interactive/pam from 210.21.243.170: 1 Time(s)
   reno/keyboard-interactive/pam from 221.226.2.178: 3 Time(s)
   reno/keyboard-interactive/pam from 222.177.24.35: 2 Time(s)
   reno/keyboard-interactive/pam from 222.177.24.40: 3 Time(s)
   reno/keyboard-interactive/pam from 59.37.44.133: 4 Time(s)
   reno/keyboard-interactive/pam from 59.40.182.68: 5 Time(s)
   reno/none from 114.247.18.9: 5 Time(s)
   reno/none from 114.255.59.3: 5 Time(s)
   reno/none from 121.176.124.65: 4 Time(s)
   reno/none from 124.207.140.12: 3 Time(s)
   reno/none from 202.103.52.143: 5 Time(s)
   reno/none from 202.108.143.2: 2 Time(s)
   reno/none from 203.39.124.196: 5 Time(s)
   reno/none from 210.21.243.170: 1 Time(s)
   reno/none from 221.226.2.178: 3 Time(s)
   reno/none from 222.177.24.35: 2 Time(s)
   reno/none from 222.177.24.40: 3 Time(s)
   reno/none from 59.37.44.133: 4 Time(s)
   reno/none from 59.40.182.68: 5 Time(s)
   reyes/keyboard-interactive/pam from 121.15.129.157: 1 Time(s)
   reyes/keyboard-interactive/pam from 121.176.124.65: 5 Time(s)
   reyes/keyboard-interactive/pam from 123.127.150.200: 5 Time(s)
   reyes/keyboard-interactive/pam from 123.139.3.101: 5 Time(s)
   reyes/keyboard-interactive/pam from 200.171.178.213: 5 Time(s)
   reyes/keyboard-interactive/pam from 202.109.115.169: 5 Time(s)
   reyes/keyboard-interactive/pam from 210.21.208.238: 4 Time(s)
   reyes/keyboard-interactive/pam from 211.143.6.149: 5 Time(s)
   reyes/keyboard-interactive/pam from 219.149.151.12: 5 Time(s)
   reyes/keyboard-interactive/pam from 60.19.28.24: 5 Time(s)
   reyes/keyboard-interactive/pam from 94.101.118.24: 5 Time(s)
   reyes/none from 121.15.129.157: 1 Time(s)
   reyes/none from 121.176.124.65: 5 Time(s)
   reyes/none from 123.127.150.200: 5 Time(s)
   reyes/none from 123.139.3.101: 5 Time(s)
   reyes/none from 200.171.178.213: 5 Time(s)
   reyes/none from 202.109.115.169: 5 Time(s)
   reyes/none from 210.21.208.238: 4 Time(s)
   reyes/none from 211.143.6.149: 5 Time(s)
   reyes/none from 219.149.151.12: 5 Time(s)
   reyes/none from 60.19.28.24: 5 Time(s)
   reyes/none from 94.101.118.24: 5 Time(s)
   rivera/keyboard-interactive/pam from 114.247.18.14: 5 Time(s)
   rivera/keyboard-interactive/pam from 123.127.218.135: 3 Time(s)
   rivera/keyboard-interactive/pam from 200.63.163.27: 1 Time(s)
   rivera/keyboard-interactive/pam from 212.254.218.162: 10 Time(s)
   rivera/keyboard-interactive/pam from 219.143.246.70: 2 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.14: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.18: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.22: 1 Time(s)
   rivera/keyboard-interactive/pam from 219.93.199.26: 1 Time(s)
   rivera/keyboard-interactive/pam from 221.232.65.50: 4 Time(s)
   rivera/keyboard-interactive/pam from 222.161.58.83: 4 Time(s)
   rivera/keyboard-interactive/pam from 222.168.33.114: 1 Time(s)
   rivera/keyboard-interactive/pam from 58.132.10.149: 5 Time(s)
   rivera/keyboard-interactive/pam from 58.30.255.12: 5 Time(s)
   rivera/keyboard-interactive/pam from 61.191.41.53: 1 Time(s)
   rivera/none from 114.247.18.14: 5 Time(s)
   rivera/none from 123.127.218.135: 3 Time(s)
   rivera/none from 200.63.163.27: 1 Time(s)
   rivera/none from 212.254.218.162: 10 Time(s)
   rivera/none from 219.143.246.70: 2 Time(s)
   rivera/none from 219.93.199.14: 1 Time(s)
   rivera/none from 219.93.199.18: 1 Time(s)
   rivera/none from 219.93.199.22: 1 Time(s)
   rivera/none from 219.93.199.26: 1 Time(s)
   rivera/none from 221.232.65.50: 4 Time(s)
   rivera/none from 222.161.58.83: 4 Time(s)
   rivera/none from 222.168.33.114: 1 Time(s)
   rivera/none from 58.132.10.149: 5 Time(s)
   rivera/none from 58.30.255.12: 5 Time(s)
   rivera/none from 61.191.41.53: 1 Time(s)
   rjf/keyboard-interactive/pam from 114.247.18.10: 5 Time(s)
   rjf/keyboard-interactive/pam from 114.255.59.3: 5 Time(s)
   rjf/keyboard-interactive/pam from 190.72.100.205: 5 Time(s)
   rjf/keyboard-interactive/pam from 200.247.215.250: 5 Time(s)
   rjf/keyboard-interactive/pam from 201.76.166.70: 5 Time(s)
   rjf/keyboard-interactive/pam from 208.66.69.237: 5 Time(s)
   rjf/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   rjf/keyboard-interactive/pam from 211.94.154.130: 3 Time(s)
   rjf/keyboard-interactive/pam from 218.248.75.161: 5 Time(s)
   rjf/keyboard-interactive/pam from 219.142.61.2: 2 Time(s)
   rjf/keyboard-interactive/pam from 221.13.79.34: 5 Time(s)
   rjf/keyboard-interactive/pam from 60.216.174.152: 5 Time(s)
   rjf/keyboard-interactive/pam from 94.101.118.24: 1 Time(s)
   rjf/none from 114.247.18.10: 5 Time(s)
   rjf/none from 114.255.59.3: 5 Time(s)
   rjf/none from 190.72.100.205: 5 Time(s)
   rjf/none from 200.247.215.250: 5 Time(s)
   rjf/none from 201.76.166.70: 5 Time(s)
   rjf/none from 208.66.69.237: 5 Time(s)
   rjf/none from 211.115.234.143: 5 Time(s)
   rjf/none from 211.94.154.130: 3 Time(s)
   rjf/none from 218.248.75.161: 5 Time(s)
   rjf/none from 219.142.61.2: 2 Time(s)
   rjf/none from 221.13.79.34: 5 Time(s)
   rjf/none from 60.216.174.152: 5 Time(s)
   rjf/none from 94.101.118.24: 1 Time(s)
   roberto/keyboard-interactive/pam from 202.103.52.143: 5 Time(s)
   roberto/keyboard-interactive/pam from 222.177.24.35: 3 Time(s)
   roberto/keyboard-interactive/pam from 222.177.24.40: 2 Time(s)
   roberto/none from 202.103.52.143: 5 Time(s)
   roberto/none from 222.177.24.35: 3 Time(s)
   roberto/none from 222.177.24.40: 2 Time(s)
   ssn/none from 62.75.178.48: 2 Time(s)
   ssn/password from 62.75.178.48: 2 Time(s)
   t-sato/none from 211.62.35.223: 3 Time(s)
   t-sato/password from 211.62.35.223: 3 Time(s)
   teamspeak/none from 62.75.178.48: 2 Time(s)
   teamspeak/password from 62.75.178.48: 2 Time(s)
   test/none from 211.154.254.172: 5 Time(s)
   test/none from 211.62.35.223: 3 Time(s)
   test/password from 211.154.254.172: 5 Time(s)
   test/password from 211.62.35.223: 3 Time(s)
   test01/none from 211.62.35.223: 3 Time(s)
   test01/password from 211.62.35.223: 3 Time(s)
   test02/none from 211.62.35.223: 3 Time(s)
   test02/password from 211.62.35.223: 3 Time(s)
   test1/none from 211.62.35.223: 3 Time(s)
   test1/password from 211.62.35.223: 3 Time(s)
   test2/none from 211.62.35.223: 3 Time(s)
   test2/password from 211.62.35.223: 3 Time(s)
   ts/none from 62.75.178.48: 4 Time(s)
   ts/password from 62.75.178.48: 4 Time(s)
   webmaster/none from 92.48.228.130: 10 Time(s)
   webmaster/password from 92.48.228.130: 10 Time(s)
   www/none from 211.62.35.223: 3 Time(s)
   www/password from 211.62.35.223: 3 Time(s)

Error in PAM authentication:
   User not known to the underlying authentication module for illegal user physics from 123.127.150.200 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 210.51.240.146 : 2 Time(s)
   User not known to the underlying authentication module for illegal user physics from 211.139.26.139 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 211.143.6.149 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 211.94.154.130 : 3 Time(s)
   User not known to the underlying authentication module for illegal user physics from 219.142.61.2 : 2 Time(s)
   User not known to the underlying authentication module for illegal user physics from 219.146.185.102 : 1 Time(s)
   User not known to the underlying authentication module for illegal user physics from 219.146.185.114 : 2 Time(s)
   User not known to the underlying authentication module for illegal user physics from 219.146.185.6 : 1 Time(s)
   User not known to the underlying authentication module for illegal user physics from 221.11.1.81 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 222.221.12.104 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 58.49.53.4 : 3 Time(s)
   User not known to the underlying authentication module for illegal user physics from 59.40.182.68 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 60.19.28.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user physics from 61.156.234.162 : 1 Time(s)
   User not known to the underlying authentication module for illegal user plotex from 190.58.158.3.business.static.tstt.net.tt : 5 Time(s)
   User not known to the underlying authentication module for illegal user reno from 114.247.18.9 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reno from 114.255.59.3 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reno from 121.176.124.65 : 4 Time(s)
   User not known to the underlying authentication module for illegal user reno from 124.207.140.12 : 3 Time(s)
   User not known to the underlying authentication module for illegal user reno from 202.103.52.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reno from 202.108.143.2 : 2 Time(s)
   User not known to the underlying authentication module for illegal user reno from 203.39.124.196 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reno from 210.21.243.170 : 1 Time(s)
   User not known to the underlying authentication module for illegal user reno from 221.226.2.178 : 3 Time(s)
   User not known to the underlying authentication module for illegal user reno from 222.177.24.35 : 2 Time(s)
   User not known to the underlying authentication module for illegal user reno from 222.177.24.40 : 3 Time(s)
   User not known to the underlying authentication module for illegal user reno from 59.37.44.133 : 4 Time(s)
   User not known to the underlying authentication module for illegal user reno from 59.40.182.68 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 121.15.129.157 : 1 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 121.176.124.65 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 123.127.150.200 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 123.139.3.101 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 200-171-178-213.dsl.telesp.net.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 202.109.115.169 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 210.21.208.238 : 4 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 211.143.6.149 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 219.149.151.12 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 60.19.28.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user reyes from 94.101.118.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 114.247.18.14 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 123.127.218.135 : 3 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 200-63-163-27.static.speedy.com.ar : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 212.254.218.162 : 10 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 219.143.246.70 : 2 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 219.93.199.14 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 219.93.199.18 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 219.93.199.22 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 219.93.199.26 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 221.232.65.50 : 4 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 222.161.58.83 : 4 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 222.168.33.114 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 58.132.10.149 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 58.30.255.12 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rivera from 61.191.41.53 : 1 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 114.247.18.10 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 114.255.59.3 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 190.72.100.205 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 200.247.215.250 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 201.76.166.70 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 208.66.69.237 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 211.115.234.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 211.94.154.130 : 3 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 218.248.75.161 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 219.142.61.2 : 2 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 221.13.79.34 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 60.216.174.152 : 5 Time(s)
   User not known to the underlying authentication module for illegal user rjf from 94.101.118.24 : 1 Time(s)
   User not known to the underlying authentication module for illegal user roberto from 202.103.52.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user roberto from 222.177.24.35 : 3 Time(s)
   User not known to the underlying authentication module for illegal user roberto from 222.177.24.40 : 2 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 


 --------------------- vpopmail Begin ------------------------ 


No Such User Found:
	aaliyah@ - 4 Time(s)
	aba@ - 4 Time(s)
	abc123@ - 4 Time(s)
	abel@ - 4 Time(s)
	adam@ - 4 Time(s)
	adm@ - 4 Time(s)
	admin@ - 52 Time(s)
	admins@ - 8 Time(s)
	alan@ - 4 Time(s)
	alex@ - 8 Time(s)
	amanda@ - 4 Time(s)
	andrew@ - 4 Time(s)
	angel@ - 4 Time(s)
	apple@ - 4 Time(s)
	aron@ - 4 Time(s)
	asshole@ - 4 Time(s)
	bear@ - 4 Time(s)
	blue@ - 4 Time(s)
	boomer@ - 4 Time(s)
	brett@ - 4 Time(s)
	buster@ - 4 Time(s)
	calvin@ - 4 Time(s)
	canada@ - 4 Time(s)
	cbird@ - 1 Time(s)
	chris@ - 4 Time(s)
	computer@ - 4 Time(s)
	dallas@ - 4 Time(s)
	daniel@ - 4 Time(s)
	danny@ - 4 Time(s)
	dave@ - 4 Time(s)
	david@ - 12 Time(s)
	diamond@ - 4 Time(s)
	dolphin@ - 4 Time(s)
	fiction@ - 4 Time(s)
	foobar@ - 4 Time(s)
	fred@ - 4 Time(s)
	friday@ - 4 Time(s)
	george@ - 4 Time(s)
	golf@ - 4 Time(s)
	green@ - 4 Time(s)
	hammer@ - 4 Time(s)
	happy@ - 3 Time(s)
	harley@ - 4 Time(s)
	hello@ - 4 Time(s)
	hockey@ - 4 Time(s)
	hunter@ - 4 Time(s)
	info@ - 4 Time(s)
	internet@ - 8 Time(s)
	james@ - 4 Time(s)
	jason@ - 3 Time(s)
	jennifer@ - 4 Time(s)
	jewel@ - 4 Time(s)
	john@ - 4 Time(s)
	jordan@ - 4 Time(s)
	joshua@ - 4 Time(s)
	justin@ - 4 Time(s)
	letmein@ - 4 Time(s)
	linda@ - 4 Time(s)
	maddock@ - 8 Time(s)
	madison@ - 1 Time(s)
	maggie@ - 4 Time(s)
	magic@ - 4 Time(s)
	mail@ - 4 Time(s)
	martin@ - 1 Time(s)
	master@ - 4 Time(s)
	merlin@ - 4 Time(s)
	michael@ - 12 Time(s)
	michelle@ - 4 Time(s)
	mickey@ - 8 Time(s)
	mikael@ - 4 Time(s)
	mike@ - 12 Time(s)
	monday@ - 4 Time(s)
	money@ - 4 Time(s)
	murphy@ - 4 Time(s)
	mustang@ - 4 Time(s)
	mysql@ - 4 Time(s)
	newpass@ - 8 Time(s)
	nite@ - 4 Time(s)
	notused@ - 4 Time(s)
	operator@ - 4 Time(s)
	orange@ - 4 Time(s)
	party@ - 4 Time(s)
	pascal@ - 4 Time(s)
	passwd@ - 4 Time(s)
	patrick@ - 4 Time(s)
	paul@ - 4 Time(s)
	pepper@ - 4 Time(s)
	phoenix@ - 4 Time(s)
	piglet@ - 4 Time(s)
	polaris@ - 4 Time(s)
	postmaster@ - 4 Time(s)
	qwerty@ - 4 Time(s)
	rainbow@ - 4 Time(s)
	resin@ - 4 Time(s)
	richard@ - 12 Time(s)
	robert@ - 12 Time(s)
	root@ - 19 Time(s)
	rpm@ - 4 Time(s)
	runner@ - 4 Time(s)
	sales@ - 4 Time(s)
	sam@ - 4 Time(s)
	sara@ - 4 Time(s)
	sarah@ - 4 Time(s)
	scooter@ - 4 Time(s)
	search@ - 4 Time(s)
	secret@ - 4 Time(s)
	service@ - 4 Time(s)
	sgi@ - 4 Time(s)
	sharon@ - 4 Time(s)
	shop@ - 4 Time(s)
	silver@ - 4 Time(s)
	snoopy@ - 4 Time(s)
	sophie@ - 4 Time(s)
	sshd@ - 4 Time(s)
	stephen@ - 4 Time(s)
	steve@ - 4 Time(s)
	steven@ - 4 Time(s)
	stupid@ - 4 Time(s)
	summer@ - 4 Time(s)
	sunny@ - 4 Time(s)
	sunshine@ - 4 Time(s)
	sunsun@ - 4 Time(s)
	susan@ - 4 Time(s)
	suva@ - 4 Time(s)
	technicom@ - 4 Time(s)
	test@ - 4 Time(s)
	thomas@ - 4 Time(s)
	thursday@ - 4 Time(s)
	tiger@ - 4 Time(s)
	tigger@ - 4 Time(s)
	users@ - 4 Time(s)
	web@ - 4 Time(s)
	webpop@ - 4 Time(s)
	welcome@ - 4 Time(s)
	wheeling@ - 4 Time(s)

 ---------------------- vpopmail End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   57G   12G  83% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 



More information about the Sysadmin mailing list