search for: 1xxxxxxxxxxxxxxxxxxxxxxx

...0 open("/etc/shadow", O_RDONLY) = 3 fcntl(3, F_GETFD) = 0 fcntl(3, F_SETFD, FD_CLOEXEC) = 0 fstat64(0x3, 0xbfffef28) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000 read(3, "root:$1$1xxxxxxxxxxxxxxxxxxxxxxx"..., 4096) = 757 close(3) = 0 munmap(0x40015000, 4096) = 0 getpeername(4, {sin_family=AF_INET, sin_port=htons(743), sin_addr=inet_addr("192.168.254.200")}}, [16]) = 0 write(2, "Failed password for darren from "..., 57) = 57 writ...