Sean's Whacky Dream Blogg

Every morning I am emailed a report of failed login attempts to my Red Hat Linux box from the previous day.

################### Logwatch 7.3 (03/24/06) ####################
Processing Initiated: Sun Apr 29 04:36:34 2007
Date Range Processed: yesterday
( 2007-Apr-28 )
Period is day.
Detail Level of Output: 0
Type of Output: unformatted
Logfiles for Host: essequibo.homeip.net
##################################################################

--------------------- pam_unix Begin ------------------------

sshd:
Authentication Failures:
unknown (www.ema.edu.ee): 1516 Time(s)
unknown (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 122 Time(s)
root (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 15 Time(s)
root (host242-19-dynamic.10-87-r.retail.telecomitalia.it): 12 Time(s)
root (www.ema.edu.ee): 8 Time(s)
postgres (www.ema.edu.ee): 3 Time(s)
clamav (www.ema.edu.ee): 2 Time(s)
lp (www.ema.edu.ee): 2 Time(s)
robert (www.ema.edu.ee): 2 Time(s)
adm (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
apache (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
bin (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
clamav (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
daemon (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
download (www.ema.edu.ee): 1 Time(s)
ftp (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
games (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
gopher (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
halt (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
lp (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
mail (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
mailman (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
mailnull (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
mysql (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
mysql (www.ema.edu.ee): 1 Time(s)
named (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
news (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
nfsnobody (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
nobody (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
operator (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
postfix (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
postfix (www.ema.edu.ee): 1 Time(s)
postgres (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
robert (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
rpc (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
rpcuser (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
rpm (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
shutdown (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
smmsp (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
smmsp (www.ema.edu.ee): 1 Time(s)
sshd (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
sync (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
tomcat (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
unknown (host242-19-dynamic.10-87-r.retail.telecomitalia.it): 1 Time(s)
uucp (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 1 Time(s)
uucp (www.ema.edu.ee): 1 Time(s)
Invalid Users:
Unknown Account: 1639 Time(s)

---------------------- pam_unix End -------------------------

--------------------- SSHD Begin ------------------------

Failed logins from:
75.18.178.80 (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 46 times
87.10.19.242 (host242-19-dynamic.10-87-r.retail.telecomitalia.it): 12 times
193.40.128.123 (www.ema.edu.ee): 22 times

Illegal users from:
75.18.178.80 (adsl-75-18-178-80.dsl.pltn13.sbcglobal.net): 122 times
87.10.19.242 (host242-19-dynamic.10-87-r.retail.telecomitalia.it): 1 time
193.40.128.123 (www.ema.edu.ee): 1516 times

Received disconnect:
11: Bye Bye : 1718 Time(s)

---------------------- SSHD End -------------------------

--------------------- Disk Space Begin ------------------------

Filesystem Size Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
8.2G 5.1G 2.7G 66% /
/dev/hda1 99M 16M 79M 17% /boot
/dev/hdb1 38G 7.3G 29G 21% /ftp

---------------------- Disk Space End -------------------------

###################### Logwatch End #########################

This first attemp is from someone at this domain. I guess they are bored with learning about music and theatre? Who can blame them... there isn't much of a future from such a place unless they are planning on breaking into the Estonian film/acting industry or creating a band... " The Rolling Estonians" maybe?.

Maybe they are attempting to be an ethical hacker and land a job at the FBI?

Some of you may be wondering why I am up at such an ungodly hour on a Sunday. The answer to that is the cat... He did his almost nighly puke on our bedroom floor and it wakes me up. &^#&^$%@(!)$% cat.

I was sitting at home in front of my computer and someone sends me an instant message on Windows Live messenger.

They ask me if I’ve seen the flying dogs yet. I tell them no and shrug off the incident. Shortly thereafter, I hear a commotion outside and see the neighbors pointing at the trees. I then see something swoop down out of the trees. It looks like a large dog with wings. I run outside to get a closer look and end up in a Tahoe by the side of the street with on of my friend’s old girlfriends.

She puts down the window and a baby flying dog makes it inside the vehicle. It is on the floor scratching my legs and flapping its wings. I keep telling her to grab it and toss it out the window. She is finally able to do so. Then I woke up.