one log : Jun 23 06:57:34 ixion watchdog[7205]: current load is 0 0 0 Jun 23 06:57:34 ixion watchdog[7205]: currently there are 1071964 kB of free memory available Jun 23 06:57:34 ixion watchdog[7205]: was able to ping process 3942 (/var/run/sshd.pid). Jun 23 06:57:34 ixion watchdog[7205]: device eth0 received 1416585628 bytes Jun 23 06:57:44 ixion watchdog[7205]: still alive after 8534 interval(s) Jun 23 06:57:44 ixion watchdog[7205]: current load is 0 0 0 Jun 23 06:57:44 ixion watchdog[7205]: currently there are 1068752 kB of free memory available Jun 23 06:57:44 ixion watchdog[7205]: was able to ping process 3942 (/var/run/sshd.pid). Jun 23 06:57:44 ixion watchdog[7205]: device eth0 received 1416607723 bytes Jun 23 06:57:54 ixion watchdog[7205]: still alive after 8535 interval(s) Jun 23 06:57:54 ixion watchdog[7205]: current load is 0 0 0 Jun 23 06:57:54 ixion watchdog[7205]: currently there are 1076848 kB of free memory available Jun 23 06:57:54 ixion watchdog[7205]: was able to ping process 3942 (/var/run/sshd.pid). Jun 23 06:57:54 ixion watchdog[7205]: device eth0 received 1416656730 bytes Mar 17 07:49:15 ixion syslog-ng[3336]: syslog-ng starting up; version='2.0.9' Mar 17 07:49:21 ixion rc-scripts: Strange, the socket file already exist in "/var/run/mysqld/mysqld.sock" Mar 17 07:49:21 ixion rc-scripts: it will be removed now and re-created by the MySQL server Mar 17 07:49:21 ixion rc-scripts: BUT please make your checks. Mar 17 07:49:22 ixion sshd[3943]: Server listening on :: port 22. Mar 17 07:49:22 ixion sshd[3943]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use. Jun 23 04:59:55 ixion -- MARK -- Mar 17 07:49:29 ixion ntpdate[4130]: step time server 88.191.14.30 offset 40083027.062693 sec Mar 17 08:49:29 ixion syslog-ng[3336]: Log statistics; processed='center(queued)=276', processed='center(received)=252', processed='destination(newsnotice)=0', processed='destination(audit)=2', processed='destination(avc)=0', processed='destination(console)=0', processed='destination(debug)=5', processed='destination(mailinfo)=0', processed='destination(mail)=0', processed='destination(user)=0', processed='destination(newserr)=0', processed='destination(newscrit)=0', processed='destination(uucp)=0', processed='destination(messages)=5', processed='destination(mailwarn)=0', processed='destination(watchdog)=0', processed='destination(grsec)=0', processed='destination(lpr)=0', processed='destination(cron)=0', processed='destination(syslog)=7', processed='destination(authlog)=2', processed='destination(mailerr)=0', processed='destination(kern)=245', processed='destination(daemon)=3', processed='destination(xconsole)=0', processed='destination(console_all)=7', processed='destination(pax)=0', processed='source(kernsrc)=245', processed='source(src)=7' Jun 23 07:00:09 ixion logger: Shorewall started Jun 23 07:00:09 ixion snort[7086]: Var 'any_ADDRESS' defined, value len = 15 chars Jun 23 07:00:09 ixion snort[7086]: , value = 0.0.0.0/0.0.0.0 Jun 23 07:00:09 ixion snort[7086]: Var 'lo_ADDRESS' defined, value len = 19 chars Jun 23 07:00:09 ixion snort[7086]: , value = 127.0.0.0/255.0.0.0 Jun 23 07:00:09 ixion snort[7086]: Parsing Rules file /etc/snort/snort.conf Jun 23 07:00:09 ixion snort[7086]: Var 'HOME_NET' defined, value len = 3 chars Jun 23 07:00:09 ixion snort[7086]: , value = any Jun 23 07:00:09 ixion snort[7086]: Var 'EXTERNAL_NET' defined, value len = 3 chars and another one : Jun 22 07:12:20 ixion sshd[758]: Invalid user rocco from 216.255.183.2 Jun 22 07:12:21 ixion watchdog[7208]: still alive after 1342 interval(s) Jun 22 07:12:21 ixion watchdog[7208]: current load is 1 0 0 Jun 22 07:12:21 ixion watchdog[7208]: currently there are 1099088 kB of free memory available Jun 22 07:12:21 ixion watchdog[7208]: was able to ping process 3942 (/var/run/sshd.pid). Jun 22 07:12:21 ixion watchdog[7208]: device eth0 received 124963743 bytes Jun 22 07:12:21 ixion sshd[763]: reverse mapping checking getaddrinfo for 216.255.183.2-custblock.intercage.com [216.255.183.2] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 22 07:12:21 ixion sshd[763]: Invalid user robin from 216.255.183.2 Mar 16 08:03:48 ixion syslog-ng[3335]: syslog-ng starting up; version='2.0.9' Mar 16 08:03:54 ixion rc-scripts: Strange, the socket file already exist in "/var/run/mysqld/mysqld.sock" Mar 16 08:03:54 ixion rc-scripts: it will be removed now and re-created by the MySQL server Mar 16 08:03:54 ixion rc-scripts: BUT please make your checks. Mar 16 08:03:55 ixion sshd[3942]: Server listening on :: port 22. Mar 16 08:03:55 ixion sshd[3942]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use. Jun 22 05:14:30 ixion -- MARK -- Mar 16 08:04:03 ixion ntpdate[4130]: step time server 88.191.19.23 offset 40083028.655461 sec Mar 16 09:04:03 ixion syslog-ng[3335]: Log statistics; processed='center(queued)=276', processed='center(received)=252', processed='destination(newsnotice)=0', processed='destination(audit)=2', processed='destination(avc)=0', processed='destination(console)=0', processed='destination(debug)=5', processed='destination(mailinfo)=0', processed='destination(mail)=0', processed='destination(user)=0', processed='destination(newserr)=0', processed='destination(newscrit)=0', processed='destination(uucp)=0', processed='destination(messages)=5', processed='destination(mailwarn)=0', processed='destination(watchdog)=0', processed='destination(grsec)=0', processed='destination(lpr)=0', processed='destination(cron)=0', processed='destination(syslog)=7', processed='destination(authlog)=2', processed='destination(mailerr)=0', processed='destination(kern)=245', processed='destination(daemon)=3', processed='destination(xconsole)=0', processed='destination(console_all)=7', processed='destination(pax)=0', processed='source(kernsrc)=245', processed='source(src)=7' Jun 22 07:14:44 ixion logger: Shorewall started Jun 22 07:14:44 ixion snort[7088]: Var 'any_ADDRESS' defined, value len = 15 chars Jun 22 07:14:44 ixion snort[7088]: , value = 0.0.0.0/0.0.0.0 Jun 22 07:14:44 ixion snort[7088]: Var 'lo_ADDRESS' defined, value len = 19 chars Jun 22 07:14:44 ixion snort[7088]: , value = 127.0.0.0/255.0.0.0 Jun 22 07:14:44 ixion snort[7088]: Parsing Rules file /etc/snort/snort.conf Jun 22 07:14:44 ixion snort[7088]: Var 'HOME_NET' defined, value len = 3 chars Jun 22 07:14:44 ixion snort[7088]: , value = any Jun 22 07:14:44 ixion snort[7088]: Var 'EXTERNAL_NET' defined, value len = 3 chars Jun 22 07:14:44 ixion snort[7088]: , value = any Jun 22 07:14:44 ixion snort[7088]: Var 'DNS_SERVERS' defined, value len = 3 chars Jun 22 07:14:44 ixion snort[7088]: , value = any Jun 22 07:14:44 ixion snort[7088]: Var 'SMTP_SERVERS' defined, value len = 3 chars Jun 22 07:14:44 ixion snort[7088]: , value = any