System Information

SysInfo : byers   19:45:52 up 127 days, 10:33, 1 user, load average: 0.00, 0.00, 0.00 OS : Linux 2.6.12-1.1381_FC3 RAM : 376 MB (approx.) Swap : 767 MB (approx.)

Drive Information
Filesystem	Mount	Use	Used	Avail	Size
/dev/mapper/VolGroup00-LogVol00	/	11%	7,514,548K	66,390,172K	77,859,816K
/dev/hda1	/boot	34%	32,502K	63,365K	101,086K
none	/dev/shm	0%	0K	192,884K	192,884K

Who, What, When

19:45:52 up 127 days, 10:33, 1 user, load average: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT root tty1 - 13Jan12 127days 1.05s 1.05s -bash

Resource Information

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.1 1592 528 ? S Jan13 1:26 init root 3492 0.0 0.2 24128 772 ? Sl Jan13 0:49 ypbind root 4066 0.0 3.2 20532 12588 ? Ss Jan13 3:00 httpd web 22645 0.0 3.4 21120 13440 ? S May18 0:38 \_ httpd web 26578 0.0 3.4 21120 13432 ? S 12:40 0:09 \_ httpd web 6870 0.0 3.4 20792 13220 ? S 02:37 0:26 \_ httpd web 28025 0.0 3.4 20728 13144 ? S 13:28 0:05 \_ httpd web 10534 0.0 3.4 20720 13140 ? S 04:41 0:26 \_ httpd root 6616 0.0 0.4 3520 1608 ? S 19:45 0:00 | \_ syswatch.pl root 6629 0.0 0.2 2392 860 ? R 19:45 0:00 | \_ ps web 19342 0.0 3.4 20712 13128 ? S 08:59 0:11 \_ httpd web 21839 0.0 3.3 20696 13108 ? S 10:22 0:08 \_ httpd web 28028 0.0 3.3 20688 13104 ? S 13:28 0:07 \_ httpd web 2309 0.0 3.4 20688 13320 ? S 17:18 0:01 \_ httpd web 6006 0.0 3.3 20656 13028 ? S 19:24 0:00 \_ httpd root 4180 0.0 1.3 19964 5212 ? Sl Jan13 31:51 python root 3922 0.0 1.2 10760 4708 ? S Jan13 60:37 snmpd root 3985 0.0 1.3 8480 5024 ? S Jan13 43:45 ddclient root 4005 0.0 0.8 7384 3096 ? Ss Jan13 2:07 sendmail smmsp 4013 0.0 0.6 6380 2552 ? Ss Jan13 0:04 sendmail root 4123 0.0 0.9 5424 3808 ? Ss Jan13 30:52 hald ntp 17351 0.0 1.1 4480 4476 ? SLs May17 0:02 ntpd root 4076 0.0 0.2 4464 1120 ? Ss Jan13 0:03 crond root 3932 0.0 0.3 3888 1496 ? Ss Jan13 45:04 sshd root 3970 0.0 0.2 3628 984 ? S Jan13 0:03 vsftpd root 3974 0.0 0.2 3628 968 ? S Jan13 0:00 vsftpd root 4463 0.0 0.2 3552 884 ? Ss Jan13 0:00 ssh-agent matlik 2767 0.0 0.2 3552 1020 ? Ss Apr18 0:00 ssh-agent uvncrep 4221 0.0 0.3 2768 1212 ? S Jan13 2:01 repeater root 4234 0.0 0.3 2744 1180 ? Ss Jan13 0:00 login root 4422 0.0 0.5 4840 1988 tty1 Ss+ Jan13 0:01 \_ bash dbus 4113 0.0 0.3 2240 1176 ? Ss Jan13 0:00 dbus-daemon-1 root 2286 0.0 0.2 2128 1084 ? Ss Jan13 5:39 dhclient root 2545 0.0 0.2 2128 1104 ? Ss Jan13 5:08 dhclient root 3943 0.0 0.2 2036 816 ? Ss Jan13 0:03 xinetd root 3901 0.0 0.2 1764 896 ? S Jan13 0:23 smartd root 3633 0.0 0.1 1664 756 ? S Jan13 0:42 automount root 3747 0.0 0.1 1664 768 ? S Jan13 0:42 automount root 3813 0.0 0.1 1664 760 ? S Jan13 0:31 automount root 3590 0.0 0.1 1660 752 ? S Jan13 0:19 automount root 3687 0.0 0.1 1660 752 ? S Jan13 0:31 automount rpcuser 3410 0.0 0.1 1644 748 ? Ss Jan13 0:00 rpc.statd nobody 3827 0.0 0.1 1612 668 ? Ss Jan13 0:01 oidentd rpc 3390 0.0 0.1 1572 552 ? Ss Jan13 0:00 portmap root 1222 0.0 0.1 1492 464 ? S

System Messages

May 19 19:43:00 byers sshd(pam_unix)[6526]: session closed for user cacti May 19 19:43:00 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:45248 May 19 19:43:02 byers sshd(pam_unix)[6536]: session opened for user cacti by (uid=0) May 19 19:43:03 byers sshd(pam_unix)[6536]: session closed for user cacti May 19 19:43:03 byers sshd(pam_unix)[6546]: session opened for user cacti by (uid=0) May 19 19:43:03 byers sshd(pam_unix)[6546]: session closed for user cacti May 19 19:43:04 byers sshd(pam_unix)[6556]: session opened for user cacti by (uid=0) May 19 19:43:04 byers sshd(pam_unix)[6556]: session closed for user cacti May 19 19:43:04 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:46144 May 19 19:43:04 byers snmpd[3922]: Received SNMP packet(s) from UDP: [192.168.1.109]:46144 May 19 19:43:04 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:46144 May 19 19:43:04 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:46144 May 19 19:43:20 byers sshd(pam_unix)[6567]: session opened for user cacti by (uid=0) May 19 19:43:20 byers sshd(pam_unix)[6567]: session closed for user cacti May 19 19:43:21 byers sshd(pam_unix)[6577]: session opened for user cacti by (uid=0) May 19 19:43:21 byers sshd(pam_unix)[6577]: session closed for user cacti May 19 19:43:21 byers sshd(pam_unix)[6587]: session opened for user cacti by (uid=0) May 19 19:43:22 byers sshd(pam_unix)[6587]: session closed for user cacti May 19 19:43:22 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:57308 May 19 19:43:22 byers snmpd[3922]: Received SNMP packet(s) from UDP: [192.168.1.109]:57308 May 19 19:43:22 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:57308 May 19 19:43:22 byers sshd(pam_unix)[6597]: session opened for user cacti by (uid=0) May 19 19:43:22 byers sshd(pam_unix)[6597]: session closed for user cacti May 19 19:43:23 byers snmpd[3922]: Connection from UDP: [192.168.1.109]:57308 May 19 19:43:30 byers kernel: [UDP drop] IN=eth0 OUT= MAC=00:02:e3:23:7c:79:00:01:5c:3f:12:41:08:00 SRC=187.54.255.19 DST=67.253.170.83 LEN=58 TOS=0x00 PREC=0x00 TTL=110 ID=11404 PROTO=UDP SPT=45682 DPT=51481 LEN=38 May 19 19:44:42 byers kernel: [UDP drop] IN=eth0 OUT= MAC=00:02:e3:23:7c:79:00:01:5c:3f:12:41:08:00 SRC=121.76.41.138 DST=67.253.170.83 LEN=58 TOS=0x00 PREC=0x00 TTL=45 ID=5676 PROTO=UDP SPT=63569 DPT=51481 LEN=38 May 19 19:44:57 byers kernel: [TCP Scan?] IN=eth0 OUT= MAC=00:02:e3:23:7c:79:00:01:5c:3f:12:41:08:00 SRC=59.182.186.19 DST=67.253.170.83 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=47993 PROTO=TCP SPT=46459 DPT=48942 WINDOW=0 RES=0x00 ACK RST FIN URGP=0 May 19 19:45:01 byers smartd[3901]: Device: /dev/hda, 1 Currently unreadable (pending) sectors May 19 19:45:30 byers sshd: warning: /etc/hosts.allow, line 77: host name/name mismatch: customer.injectednetworks.com != www288.servergod.com May 19 19:45:30 byers sshd: refused connect from ::ffff:173.46.82.2 (::ffff:173.46.82.2)