Salut à tous,
Ce matin, bon pied bon oeil, je m'installe devant mon pingouin favori
pour constater que mon fichier logwatch (envoyé à root par le système
toutes les nuits) est extraordinairement long et surtout étrange.
J'en met un bout seulement !!
========================================================
Return-Path: root
Return-Path: <[EMAIL PROTECTED]>
Received: (from root@localhost)
by cadimat.sarl (8.11.6/8.11.6) id g1C325h04718
for root; Tue, 12 Feb 2002 04:02:05 +0100
Date: Tue, 12 Feb 2002 04:02:05 +0100
From: root <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: LogWatch for cadimat.sarl
################## LogWatch 2.1.1 Begin #####################
--------------------- proftpd-messages Begin ------------------------
**Unmatched Entries**
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session opened.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session opened.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session opened.
**/**
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
cadimat.sarl - MaxInstances (20) reached, new connection denied.
**/**
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'olivia'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'olivia'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'laura'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'laura'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jessica'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jessica'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'emilly'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'emilly'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'cynthia'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'cynthia'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'connie'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'connie'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'caroline'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'caroline'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'ada'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'ada'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'whitney'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'whitney'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'victoria'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'victoria'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'susanna'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'susanna'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'sandy'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'sandy'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'maria'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'maria'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'lisa'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'lisa'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'joyce'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'joyce'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'janet'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'janet'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jane'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jane'
**/**
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'sandy'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'helena'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'caroline'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'caroline'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'ada'
PAM-listfile: Refused user amanda for service ftp
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'whitney'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'whitney'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'janet'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'emilly'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'laura'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'joyce'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'olivia'
**/**
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'lisa'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'lisa'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'lisa'
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jane'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jane'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'jane'
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session closed.
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'susanna'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'susanna'
cadimat.sarl (61.145.11.136[61.145.11.136]) - no such user 'susanna'
cadimat.sarl (61.145.11.136[61.145.11.136]) - PAM(amanda):
Authentication failure. cadimat.sarl (61.145.11.136[61.145.11.136]) -
no such user 'sandy' cadimat.sarl (61.145.11.136[61.145.11.136]) - no
such user 'sandy' cadimat.sarl (61.145.11.136[61.145.11.136]) - no
such user 'sandy' cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP
session closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP
session closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP
session closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP
session closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP
session closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'joyce' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'joyce' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'joyce' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'helena' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'helena' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'helena' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'grace' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'grace' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'grace' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'janet' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'janet' cadimat.sarl (61.145.11.136[61.145.11.136]) - no such
user 'janet' cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. cadimat.sarl (61.145.11.136[61.145.11.136]) - FTP session
closed. PAM-listfile: Refused user amanda for service ftp
cadimat.sarl (61.145.11.136[61.145.11.136]) - PAM(amanda):
Authentication failure. cadimat.sarl (61.145.11.136[61.145.11.136]) -
FTP session closed. cadimat.sarl - ProFTPD killed (signal 15)
cadimat.sarl - ProFTPD 1.2.4 standalone mode SHUTDOWN
cadimat.sarl - ProFTPD 1.2.4 (release) (built Wed Oct 24 01:10:49 CEST
2001) standalone mode STARTUP cadimat.sarl - ProFTPD killed (signal
15) cadimat.sarl - ProFTPD 1.2.4 standalone mode SHUTDOWN
cadimat.sarl - ProFTPD 1.2.4 (release) (built Wed Oct 24 01:10:49 CEST
2001) standalone mode STARTUP
---------------------- proftpd-messages End -------------------------
---------------- Connections (secure-log) Begin -------------------
Connections:
Service telnet:
127.0.0.1: 1 Time(s)
**Unmatched Entries**
Feb 11 02:41:17 cadimat proftpd[26773]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER ftp (Login failed): Invalid
shell. Feb 11 02:42:30 cadimat proftpd[26775]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER olivia: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26776]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER laura: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26777]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER jessica: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26778]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER emilly: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26779]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER cynthia: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26780]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER connie: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26781]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER caroline: no such user found
from 61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11
02:42:30 cadimat proftpd[26783]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER ada: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26784]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER whitney: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26785]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER victoria: no such user found
from 61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11
02:42:30 cadimat proftpd[26788]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER maria: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26789]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER lisa: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26792]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER jane: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26786]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER susanna: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26787]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER sandy: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26790]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER joyce: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26793]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER helena: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:30
cadimat proftpd[26794]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER grace: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:30 cadimat proftpd[26791]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER janet: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26777]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER jessica: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26781]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER caroline: no such user found
from 61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11
02:42:31 cadimat proftpd[26784]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER whitney: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26778]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER emilly: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26776]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER laura: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26783]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER ada: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26775]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER olivia: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26779]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER cynthia: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26780]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER connie: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26785]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER victoria: no such user found from 61.145.11.136 [61.145.11.136]
to 217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26788]:
cadimat.sarl (61.145.11.136[61.145.11.136]) - USER maria: no such user
found from 61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11
02:42:31 cadimat proftpd[26789]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER lisa: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26792]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER jane: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26786]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER susanna: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26782]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER amanda (Login failed): Incorrect password. Feb 11 02:42:31
cadimat proftpd[26787]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER sandy: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26790]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER joyce: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26793]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER helena: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:31 cadimat proftpd[26794]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER grace: no such user found from
61.145.11.136 [61.145.11.136] to 217.128.216.18:21 Feb 11 02:42:31
cadimat proftpd[26791]: cadimat.sarl (61.145.11.136[61.145.11.136]) -
USER janet: no such user found from 61.145.11.136 [61.145.11.136] to
217.128.216.18:21 Feb 11 02:42:33 cadimat proftpd[26782]: cadimat.sarl
(61.145.11.136[61.145.11.136]) - USER amanda (Login failed): Incorrect
password. Feb 11 11:59:23 cadimat sshd[1052]: Received signal 15;
terminating. Feb 11 12:02:55 cadimat sshd[908]: Server listening on
0.0.0.0 port 22. Feb 11 16:50:06 cadimat sshd[908]: Received signal
15; terminating. Feb 11 16:51:37 cadimat sshd[911]: Server listening
on 0.0.0.0 port 22.
----------------- Connections (secure-log) End --------------------
--------------------- sendmail Begin ------------------------
5044 bytes transferred
5 messages sent
**Unmatched Entries**
gethostbyaddr(10.0.0.10) failed: 1
gethostbyaddr(217.128.216.18) failed: 1
g1AN0fT22116: forward /home/didier/.forward.cadimat: Group writable
directory g1AN0fT22116: forward /home/didier/.forward: Group writable
directory gethostbyaddr(10.0.0.10) failed: 1
g1B322x29005: forward /home/didier/.forward.cadimat: Group writable
directory g1B322x29005: forward /home/didier/.forward: Group writable
directory gethostbyaddr(10.0.0.10) failed: 1
g1B32p029042: forward /home/didier/.forward.cadimat: Group writable
directory g1B32p029042: forward /home/didier/.forward: Group writable
directory gethostbyaddr(10.0.0.10) failed: 1
g1B501502337: forward /home/didier/.forward.cadimat: Group writable
directory g1B501502337: forward /home/didier/.forward: Group writable
directory gethostbyaddr(10.0.0.10) failed: 1
g1BH02302175: forward /home/didier/.forward.cadimat: Group writable
directory g1BH02302175: forward /home/didier/.forward: Group writable
directory
---------------------- sendmail End -------------------------
###################### LogWatch End #########################
Voilà désolé pour la longueur.
Pour ceux qui penserais qu'il s'agit de mes copines, he ben non :))
Quelqu'un pourrait m'expliquer ce qui s'est passé ??
Merci
Cordialement
Didier --> inquiet !!
--
===================================================
D i d i e r N o a c k 48°46'50N 7°48'31E
90CD D308 1993 4E1B 8E52 CF9D E0CC 92A8 E05E A2C5
http://pro.wanadoo.fr/cadimat/
Vous souhaitez acquerir votre Pack ou des Services MandrakeSoft?
Rendez-vous sur "http://www.mandrakestore.com";
