[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Sat Dec 20 06:25:23 CST 2008


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Sat Dec 20 06:25:15 2008
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/local/bin/planetupdate 1>/dev/null 2>&1: 24 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
      wget -O - -q http://evolt.org/cron.php: 72 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

4 messages delivered immediately to 4 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

1.36 MB transfered in 1462 responses  (1xx 0, 2xx 2, 3xx 567, 4xx 893, 5xx 0) 
 44 Images (0.01 MB),
 8 Documents (0.00 MB),
 1266 Content pages (1.32 MB),
 18 Program source files (0.01 MB),
 126 Other (0.02 MB) 

A total of 53 unidentified 'other' records logged
  GET /Mishka/Styles/index.html. HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/planetmirror.com/contact?rev=1.1&view=log HTTP/1.1 with response code(s) 1 404 responses
  GET /turkif HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/planetmirror.com/description?rev=1.1&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?rev=1.2 HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/evoltorg.psd?rev=1.4&hideattic=0&only_with_tag=HEAD&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/40 HTTP/1.1 with response code(s) 1 404 responses
  GET /webdad/testing/day_scheduler.html, HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?view=log&rev=1.25&sortby=log&r1=1.10 HTTP/1.1 with response code(s) 1 404 responses
  GET /creating_a_login_script_with_php4_part_2/ve written a script and forgot to include db_connect.php, so it HTTP/1.1 with response code(s) 1 400 responses
  GET /PHP-Login-System-with-Admin-Features/ll tell you. If you look in constants.php you HTTP/1.1 with response code(s) 1 400 responses
  GET /Making_clean_URLs_with_Apache_and_PHP/s mime magic module.  Basically, I can call my .php files without the .php and they look like directories.  It HTTP/1.1 with response code(s) 1 400 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/49 HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/yahoo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/rollover_n_click/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/, make sure your database name and password information is specified correctly in constants.php. If you still can HTTP/1.1 with response code(s) 1 400 responses
  GET /jeff/code/toggle_tablerows.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /quick_calendar_using_ajax_and_php/version), it would be nice if Bernard would post quick_calendar2.txt for the HTTP/1.1 with response code(s) 2 400 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 6 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /Isaac HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /creating_a_login_script_with_php4_part_2/Location: index.php HTTP/1.1 with response code(s) 1 400 responses
  GET /agent-v-agent/t follow robots.txt? I HTTP/1.1 with response code(s) 1 400 responses
  GET /Designing_your_pages_for_search_engines/or the robots.txt file you used to be able to use to direct search engines around your site I haven HTTP/1.1 with response code(s) 1 400 responses
  GET /renaming_files_with_perl/t work.  The command line passes the exact string to the Perl program.  For instance, when using *.txt to rename all of the .txt files, the Perl script gets the string HTTP/1.1 with response code(s) 1 400 responses
  GET /webshot HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?sortby=log&r2=1.16&r1=1.15 HTTP/1.1 with response code(s) 1 404 responses
  GET /rss/articles.rss HTTP/1.0 with response code(s) 5 404 responses
  GET /jswiders HTTP/1.0 with response code(s) 1 404 responses
  - with response code(s) 58 408 responses
  GET /cgi-bin/viewcvs.cgi/beo_ng/mirrors/sites/planetmirror.com/http?rev=1.1&view=auto HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /burhankhalid HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/form_to_window/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 2 404 responses
  GET /elfur HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/wip/photoshop/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/evolt-logo.ai?rev=1.3&hideattic=0&view=log HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_html/evolt-logo.ai?sortby=author&view=graph HTTP/1.1 with response code(s) 1 404 responses
  GET /pear_soap/re ready to test the application. Point your browser to pearsoap-hello-client.php, and you should see HTTP/1.1 with response code(s) 1 400 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?annotate=1.9&sortby=log HTTP/1.1 with response code(s) 1 404 responses
  GET /shaggy/windows/user, HTTP/1.1 with response code(s) 1 404 responses
  GET /Targeting_Search_Engines/Due to the disallow command in your robots.txt file, your page has been excluded.  If your page was already listed in the index, it will be deleted. HTTP/1.1 with response code(s) 1 400 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?sortby=log&r2=1.17&r1=1.25 HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/link_accessibility_usability.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/cftree/cftree_event.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /kristyfrey HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/character_converting_textarea.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /danfascia/index.cfm?case=pneumonia&page=1&section=clinical HTTP/1.1 with response code(s) 1 404 responses
  GET /turkif HTTP/1.1 with response code(s) 3 404 responses

A total of 10 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 3 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      Mozilla/5.0 (compatible; Charlotte/1.1; http://www.searchme.com/support/) 1 time(s) 
      Gigabot/3.0 (http://www.gigablast.com/spider.html) 1 time(s) 
      - 1 time(s) 
      msnbot-media/1.0 (+http://search.msn.com/msnbot.htm) 4 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 13 time(s) 
      Nokia6820/2.0 (4.83) Profile/MIDP-1.0 Configuration/CLDC-1.0 (compatible; Googlebot-Mobile/2.1; +http://www.google.com/bot.html) 1 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 4 time(s) 
      Mozilla/5.0 (compatible; Exabot/3.0; +http://www.exabot.com/go/robot) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode
17 Time(s): sending pkt_too_big (len[1500] pmtu[1496]) to self

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 462 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      unknown (124.42.124.87): 14 Time(s)
      unknown (60.191.111.234): 12 Time(s)
      unknown (62.61.141.93.generic-hostname.arrownet.dk): 12 Time(s)
      unknown (217.96.70.66): 10 Time(s)
      unknown (58.223.242.246): 10 Time(s)
      unknown (c-71-63-229-140.hsd1.mn.comcast.net): 10 Time(s)
      unknown (c-98-216-38-18.hsd1.ma.comcast.net): 10 Time(s)
      unknown (robert71.lnk.telstra.net): 10 Time(s)
      unknown (190.144.61.58): 8 Time(s)
      unknown (200.118.119.48): 8 Time(s)
      unknown (201.249.112.138): 8 Time(s)
      unknown (as5300-s47-050.cnt.entelchile.net): 8 Time(s)
      unknown (n219076222027.netvigator.com): 8 Time(s)
      unknown (170.56.255.20): 6 Time(s)
      unknown (179.26-246-81.adsl-static.isp.belgacom.be): 6 Time(s)
      unknown (195.234.169.138): 6 Time(s)
      unknown (200.123.174.145): 6 Time(s)
      unknown (201.161.28.9): 6 Time(s)
      unknown (220.225.46.34): 6 Time(s)
      unknown (221.158.48.69): 6 Time(s)
      unknown (64.149.146.242): 6 Time(s)
      unknown (88-196-206-58-dsl.hps.estpak.ee): 6 Time(s)
      unknown (adsl-75-22-172-193.dsl.sndg02.sbcglobal.net): 6 Time(s)
      unknown (mail.clinandes.cl): 6 Time(s)
      unknown (mail.hierrobeco.com): 6 Time(s)
      unknown (189-19-76-194.dsl.telesp.net.br): 4 Time(s)
      unknown (200-170-141-134.static.ctbctelecom.com.br): 4 Time(s)
      unknown (213.8.59.133): 4 Time(s)
      unknown (36.249.97-84.rev.gaoland.net): 4 Time(s)
      unknown (3e70defd.adsl.enternet.hu): 4 Time(s)
      unknown (58.39.145.213): 4 Time(s)
      unknown (58.77.117.97): 4 Time(s)
      unknown (61.172.200.198): 4 Time(s)
      unknown (79.120.226.174): 4 Time(s)
      unknown (80.51.31.84): 4 Time(s)
      unknown (customer-200-79-25-39.uninet.net.mx): 4 Time(s)
      unknown (p578b4f0b.dip0.t-ipconnect.de): 4 Time(s)
      unknown (189.17.23.210): 2 Time(s)
      unknown (193.86.111.6): 2 Time(s)
      unknown (200.254.105.2): 2 Time(s)
      unknown (201.21.216.198): 2 Time(s)
      unknown (221.8.255.134): 2 Time(s)
      unknown (53.red-80-38-150.staticip.rima-tde.net): 2 Time(s)
      unknown (61.183.16.96): 2 Time(s)
      unknown (62.72.110.203): 2 Time(s)
      unknown (74.95.165.97): 2 Time(s)
      unknown (81-7-76-88.static.zebra.lt): 2 Time(s)
      unknown (ppp-69-217-30-214.dsl.applwi.ameritech.net): 2 Time(s)
      unknown (static-70-107-248-126.ny325.east.verizon.net): 2 Time(s)
      unknown (static-98-119-110-139.lsanca.dsl-w.verizon.net): 2 Time(s)
      dmah (s010600c049d9e99b.cg.shawcable.net): 1 Time(s)
      unknown (120.red-80-59-254.staticip.rima-tde.net): 1 Time(s)
   Invalid Users:
      Unknown Account: 275 Time(s)
   Sessions Opened:
      dmah: 1 Time(s)
      neuro: 1 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)

sudo:
   Unknown Entries:
      authentication failure; logname=neuro uid=0 euid=0 tty=pts/0 ruser= rhost=  user=neuro: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   201.249.112-138.dyn.dsl.cantv.net(201.249.112.138): 8 Time(s)
   74-95-165-97-philadelphia.hfc.comcastbusiness.net: 2 Time(s)
   c915d8c6.virtua.com.br: 2 Time(s)
   customer123-174-145.iplannetworks.net: 6 Time(s)
   mail.tmafarmnet.com(64.149.146.242): 6 Time(s)
   static-ip-cr20011811948.cable.net.co: 8 Time(s)

Didn't receive an ident from these IPs:
   sd-10568.dedibox.fr (88.191.69.70): 5 Time(s)

Failed logins from these:
   nitza/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   nitza/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   nixie/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   nixie/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nixie/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   niyati/keyboard-interactive/pam from 84.97.249.36: 2 Time(s)
   niyati/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   nizana/keyboard-interactive/pam from 189.19.76.194: 2 Time(s)
   nizana/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   nizana/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   noah/keyboard-interactive/pam from 200.79.25.39: 2 Time(s)
   noah/keyboard-interactive/pam from 87.139.79.11: 2 Time(s)
   noam/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nodin/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   nodin/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nodin/keyboard-interactive/pam from 70.107.248.126: 2 Time(s)
   noe/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   noe/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   noel/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   noel/keyboard-interactive/pam from 58.77.117.97: 2 Time(s)
   noel/keyboard-interactive/pam from 62.112.222.253: 2 Time(s)
   noelani/keyboard-interactive/pam from 220.225.46.34: 6 Time(s)
   noelle/keyboard-interactive/pam from 61.172.200.198: 2 Time(s)
   noelle/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   noelle/keyboard-interactive/pam from 79.120.226.174: 2 Time(s)
   nohealani/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nohealani/keyboard-interactive/pam from 58.77.117.97: 2 Time(s)
   nola/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nolan/keyboard-interactive/pam from 213.8.59.133: 2 Time(s)
   noland/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   noland/keyboard-interactive/pam from 80.59.254.120: 1 Time(s)
   nolcha/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   nolcha/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   nolcha/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nolen/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   noleta/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   noleta/keyboard-interactive/pam from 98.119.110.139: 2 Time(s)
   noma/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   noma/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   nona/keyboard-interactive/pam from 61.172.200.198: 2 Time(s)
   nona/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   nona/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   nonnie/keyboard-interactive/pam from 165.228.181.30: 4 Time(s)
   nonnie/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nora/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   nora/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   nora/keyboard-interactive/pam from 200.170.141.134: 2 Time(s)
   norah/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   norah/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   noreen/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   noreen/keyboard-interactive/pam from 193.86.111.6: 2 Time(s)
   noreen/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   nori/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   norina/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   norm/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   norm/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   norm/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   norma/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   norma/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   norman/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   norman/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   normandy/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   normandy/keyboard-interactive/pam from 213.8.59.133: 2 Time(s)
   norton/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   norwood/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   norwood/keyboard-interactive/pam from 62.72.110.203: 2 Time(s)
   noura/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   noura/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   nova/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   november/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   november/keyboard-interactive/pam from 61.183.16.96: 2 Time(s)
   novia/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   novia/keyboard-interactive/pam from 58.39.145.213: 2 Time(s)
   nowles/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   nox/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   nozomi/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nozomi/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   nu/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   nuala/keyboard-interactive/pam from 201.21.216.198: 2 Time(s)
   nuala/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nubia/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nubia/keyboard-interactive/pam from 80.51.31.84: 2 Time(s)
   nuhad/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   nuhad/keyboard-interactive/pam from 69.217.30.214: 2 Time(s)
   nuncio/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   nuncio/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nura/keyboard-interactive/pam from 74.95.165.97: 2 Time(s)
   nuri/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   nuri/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   nuria/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nuru/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   nusa/keyboard-interactive/pam from 62.112.222.253: 2 Time(s)
   nusa/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nusa/keyboard-interactive/pam from 84.97.249.36: 2 Time(s)
   nyack/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   nyack/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyako/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   nydia/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nye/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   nye/keyboard-interactive/pam from 79.120.226.174: 2 Time(s)
   nye/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nyeki/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   nyeki/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   nyla/keyboard-interactive/pam from 200.170.141.134: 2 Time(s)
   nyla/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyoka/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nyoka/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyoka/keyboard-interactive/pam from 81.7.76.88: 2 Time(s)
   nysa/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   nysa/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nyx/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   nyx/keyboard-interactive/pam from 189.19.76.194: 2 Time(s)
   oakes/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   oakes/keyboard-interactive/pam from 189.17.23.210: 2 Time(s)
   oakes/keyboard-interactive/pam from 221.8.255.134: 2 Time(s)
   oakley/keyboard-interactive/pam from 200.79.25.39: 2 Time(s)
   oakley/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   obedience/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   obedience/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   obelia/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   oberon/keyboard-interactive/pam from 200.254.105.2: 2 Time(s)
   oberon/keyboard-interactive/pam from 80.51.31.84: 2 Time(s)
   obert/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   obert/keyboard-interactive/pam from 87.139.79.11: 2 Time(s)
   ocean/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   ocean/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   oceana/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   oceana/keyboard-interactive/pam from 58.39.145.213: 2 Time(s)
   octavia/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   octavia/keyboard-interactive/pam from 80.38.150.53: 2 Time(s)
   octavio/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   octavio/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   octavious/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   octavious/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   octavious/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   root/password from 204.8.12.243: 336 Time(s)

Illegal users from these:
   nitza/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   nitza/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   nitza/none from 190.60.41.82: 2 Time(s)
   nitza/none from 201.161.28.9: 2 Time(s)
   nixie/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   nixie/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nixie/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   nixie/none from 165.228.181.30: 2 Time(s)
   nixie/none from 62.61.141.93: 2 Time(s)
   nixie/none from 75.22.172.193: 2 Time(s)
   niyati/keyboard-interactive/pam from 84.97.249.36: 2 Time(s)
   niyati/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   niyati/none from 84.97.249.36: 2 Time(s)
   niyati/none from 88.196.206.58: 2 Time(s)
   nizana/keyboard-interactive/pam from 189.19.76.194: 2 Time(s)
   nizana/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   nizana/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   nizana/none from 189.19.76.194: 2 Time(s)
   nizana/none from 60.191.111.234: 2 Time(s)
   nizana/none from 81.246.26.179: 2 Time(s)
   noah/keyboard-interactive/pam from 200.79.25.39: 2 Time(s)
   noah/keyboard-interactive/pam from 87.139.79.11: 2 Time(s)
   noah/none from 200.79.25.39: 2 Time(s)
   noah/none from 87.139.79.11: 2 Time(s)
   noam/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   noam/none from 98.216.38.18: 2 Time(s)
   nodin/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   nodin/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nodin/keyboard-interactive/pam from 70.107.248.126: 2 Time(s)
   nodin/none from 217.96.70.66: 2 Time(s)
   nodin/none from 221.158.48.69: 2 Time(s)
   nodin/none from 70.107.248.126: 2 Time(s)
   noe/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   noe/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   noe/none from 217.96.70.66: 2 Time(s)
   noe/none from 219.76.222.27: 2 Time(s)
   noel/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   noel/keyboard-interactive/pam from 58.77.117.97: 2 Time(s)
   noel/keyboard-interactive/pam from 62.112.222.253: 2 Time(s)
   noel/none from 170.56.255.20: 2 Time(s)
   noel/none from 58.77.117.97: 2 Time(s)
   noel/none from 62.112.222.253: 2 Time(s)
   noelani/keyboard-interactive/pam from 220.225.46.34: 6 Time(s)
   noelani/none from 220.225.46.34: 6 Time(s)
   noelle/keyboard-interactive/pam from 61.172.200.198: 2 Time(s)
   noelle/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   noelle/keyboard-interactive/pam from 79.120.226.174: 2 Time(s)
   noelle/none from 61.172.200.198: 2 Time(s)
   noelle/none from 62.61.141.93: 2 Time(s)
   noelle/none from 79.120.226.174: 2 Time(s)
   nohealani/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nohealani/keyboard-interactive/pam from 58.77.117.97: 2 Time(s)
   nohealani/none from 190.144.61.58: 2 Time(s)
   nohealani/none from 58.77.117.97: 2 Time(s)
   nola/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nola/none from 98.216.38.18: 2 Time(s)
   nolan/keyboard-interactive/pam from 213.8.59.133: 2 Time(s)
   nolan/none from 213.8.59.133: 2 Time(s)
   noland/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   noland/keyboard-interactive/pam from 80.59.254.120: 1 Time(s)
   noland/none from 124.42.124.87: 2 Time(s)
   noland/none from 80.59.254.120: 1 Time(s)
   nolcha/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   nolcha/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   nolcha/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nolcha/none from 200.118.119.48: 2 Time(s)
   nolcha/none from 200.126.119.91: 2 Time(s)
   nolcha/none from 98.216.38.18: 2 Time(s)
   nolen/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   nolen/none from 170.56.255.20: 2 Time(s)
   noleta/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   noleta/keyboard-interactive/pam from 98.119.110.139: 2 Time(s)
   noleta/none from 217.96.70.66: 2 Time(s)
   noleta/none from 98.119.110.139: 2 Time(s)
   noma/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   noma/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   noma/none from 195.234.169.138: 2 Time(s)
   noma/none from 71.63.229.140: 2 Time(s)
   nona/keyboard-interactive/pam from 61.172.200.198: 2 Time(s)
   nona/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   nona/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   nona/none from 61.172.200.198: 2 Time(s)
   nona/none from 71.63.229.140: 2 Time(s)
   nona/none from 75.22.172.193: 2 Time(s)
   nonnie/keyboard-interactive/pam from 165.228.181.30: 4 Time(s)
   nonnie/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nonnie/none from 165.228.181.30: 4 Time(s)
   nonnie/none from 58.223.242.246: 2 Time(s)
   nora/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   nora/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   nora/keyboard-interactive/pam from 200.170.141.134: 2 Time(s)
   nora/none from 190.60.41.82: 2 Time(s)
   nora/none from 200.118.119.48: 2 Time(s)
   nora/none from 200.170.141.134: 2 Time(s)
   norah/keyboard-interactive/pam from 190.60.41.82: 2 Time(s)
   norah/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   norah/none from 190.60.41.82: 2 Time(s)
   norah/none from 98.216.38.18: 2 Time(s)
   noreen/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   noreen/keyboard-interactive/pam from 193.86.111.6: 2 Time(s)
   noreen/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   noreen/none from 164.77.145.60: 2 Time(s)
   noreen/none from 193.86.111.6: 2 Time(s)
   noreen/none from 200.123.174.145: 2 Time(s)
   nori/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nori/none from 58.223.242.246: 2 Time(s)
   norina/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   norina/none from 200.126.119.91: 2 Time(s)
   norm/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   norm/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   norm/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   norm/none from 164.77.145.60: 2 Time(s)
   norm/none from 201.249.112.138: 2 Time(s)
   norm/none from 71.63.229.140: 2 Time(s)
   norma/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   norma/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   norma/none from 60.191.111.234: 2 Time(s)
   norma/none from 71.63.229.140: 2 Time(s)
   norman/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   norman/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   norman/none from 165.228.181.30: 2 Time(s)
   norman/none from 200.118.119.48: 2 Time(s)
   normandy/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   normandy/keyboard-interactive/pam from 213.8.59.133: 2 Time(s)
   normandy/none from 200.123.174.145: 2 Time(s)
   normandy/none from 213.8.59.133: 2 Time(s)
   norton/keyboard-interactive/pam from 170.56.255.20: 2 Time(s)
   norton/none from 170.56.255.20: 2 Time(s)
   norwood/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   norwood/keyboard-interactive/pam from 62.72.110.203: 2 Time(s)
   norwood/none from 124.42.124.87: 2 Time(s)
   norwood/none from 62.72.110.203: 2 Time(s)
   noura/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   noura/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   noura/none from 60.191.111.234: 2 Time(s)
   noura/none from 81.246.26.179: 2 Time(s)
   nova/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   nova/none from 219.76.222.27: 2 Time(s)
   november/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   november/keyboard-interactive/pam from 61.183.16.96: 2 Time(s)
   november/none from 60.191.111.234: 2 Time(s)
   november/none from 61.183.16.96: 2 Time(s)
   novia/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   novia/keyboard-interactive/pam from 58.39.145.213: 2 Time(s)
   novia/none from 217.96.70.66: 2 Time(s)
   novia/none from 58.39.145.213: 2 Time(s)
   nowles/keyboard-interactive/pam from 71.63.229.140: 2 Time(s)
   nowles/none from 71.63.229.140: 2 Time(s)
   nox/keyboard-interactive/pam from 200.126.119.91: 2 Time(s)
   nox/none from 200.126.119.91: 2 Time(s)
   nozomi/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nozomi/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   nozomi/none from 190.144.61.58: 2 Time(s)
   nozomi/none from 88.196.206.58: 2 Time(s)
   nu/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   nu/none from 219.76.222.27: 2 Time(s)
   nuala/keyboard-interactive/pam from 201.21.216.198: 2 Time(s)
   nuala/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nuala/none from 201.21.216.198: 2 Time(s)
   nuala/none from 221.158.48.69: 2 Time(s)
   nubia/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nubia/keyboard-interactive/pam from 80.51.31.84: 2 Time(s)
   nubia/none from 62.61.141.93: 2 Time(s)
   nubia/none from 80.51.31.84: 2 Time(s)
   nuhad/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   nuhad/keyboard-interactive/pam from 69.217.30.214: 2 Time(s)
   nuhad/none from 195.234.169.138: 2 Time(s)
   nuhad/none from 69.217.30.214: 2 Time(s)
   nuncio/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   nuncio/keyboard-interactive/pam from 221.158.48.69: 2 Time(s)
   nuncio/none from 201.249.112.138: 2 Time(s)
   nuncio/none from 221.158.48.69: 2 Time(s)
   nura/keyboard-interactive/pam from 74.95.165.97: 2 Time(s)
   nura/none from 74.95.165.97: 2 Time(s)
   nuri/keyboard-interactive/pam from 81.246.26.179: 2 Time(s)
   nuri/keyboard-interactive/pam from 88.196.206.58: 2 Time(s)
   nuri/none from 81.246.26.179: 2 Time(s)
   nuri/none from 88.196.206.58: 2 Time(s)
   nuria/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nuria/none from 64.149.146.242: 2 Time(s)
   nuru/keyboard-interactive/pam from 219.76.222.27: 2 Time(s)
   nuru/none from 219.76.222.27: 2 Time(s)
   nusa/keyboard-interactive/pam from 62.112.222.253: 2 Time(s)
   nusa/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nusa/keyboard-interactive/pam from 84.97.249.36: 2 Time(s)
   nusa/none from 62.112.222.253: 2 Time(s)
   nusa/none from 64.149.146.242: 2 Time(s)
   nusa/none from 84.97.249.36: 2 Time(s)
   nyack/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   nyack/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyack/none from 201.161.28.9: 2 Time(s)
   nyack/none from 58.223.242.246: 2 Time(s)
   nyako/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   nyako/none from 201.249.112.138: 2 Time(s)
   nydia/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   nydia/none from 62.61.141.93: 2 Time(s)
   nye/keyboard-interactive/pam from 75.22.172.193: 2 Time(s)
   nye/keyboard-interactive/pam from 79.120.226.174: 2 Time(s)
   nye/keyboard-interactive/pam from 98.216.38.18: 2 Time(s)
   nye/none from 75.22.172.193: 2 Time(s)
   nye/none from 79.120.226.174: 2 Time(s)
   nye/none from 98.216.38.18: 2 Time(s)
   nyeki/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   nyeki/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   nyeki/none from 124.42.124.87: 2 Time(s)
   nyeki/none from 164.77.145.60: 2 Time(s)
   nyla/keyboard-interactive/pam from 200.170.141.134: 2 Time(s)
   nyla/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyla/none from 200.170.141.134: 2 Time(s)
   nyla/none from 58.223.242.246: 2 Time(s)
   nyoka/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   nyoka/keyboard-interactive/pam from 58.223.242.246: 2 Time(s)
   nyoka/keyboard-interactive/pam from 81.7.76.88: 2 Time(s)
   nyoka/none from 190.144.61.58: 2 Time(s)
   nyoka/none from 58.223.242.246: 2 Time(s)
   nyoka/none from 81.7.76.88: 2 Time(s)
   nysa/keyboard-interactive/pam from 195.234.169.138: 2 Time(s)
   nysa/keyboard-interactive/pam from 64.149.146.242: 2 Time(s)
   nysa/none from 195.234.169.138: 2 Time(s)
   nysa/none from 64.149.146.242: 2 Time(s)
   nyx/keyboard-interactive/pam from 165.228.181.30: 2 Time(s)
   nyx/keyboard-interactive/pam from 189.19.76.194: 2 Time(s)
   nyx/none from 165.228.181.30: 2 Time(s)
   nyx/none from 189.19.76.194: 2 Time(s)
   oakes/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   oakes/keyboard-interactive/pam from 189.17.23.210: 2 Time(s)
   oakes/keyboard-interactive/pam from 221.8.255.134: 2 Time(s)
   oakes/none from 124.42.124.87: 2 Time(s)
   oakes/none from 189.17.23.210: 2 Time(s)
   oakes/none from 221.8.255.134: 2 Time(s)
   oakley/keyboard-interactive/pam from 200.79.25.39: 2 Time(s)
   oakley/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   oakley/none from 200.79.25.39: 2 Time(s)
   oakley/none from 62.61.141.93: 2 Time(s)
   obedience/keyboard-interactive/pam from 201.161.28.9: 2 Time(s)
   obedience/keyboard-interactive/pam from 62.61.141.93: 2 Time(s)
   obedience/none from 201.161.28.9: 2 Time(s)
   obedience/none from 62.61.141.93: 2 Time(s)
   obelia/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   obelia/none from 60.191.111.234: 2 Time(s)
   oberon/keyboard-interactive/pam from 200.254.105.2: 2 Time(s)
   oberon/keyboard-interactive/pam from 80.51.31.84: 2 Time(s)
   oberon/none from 200.254.105.2: 2 Time(s)
   oberon/none from 80.51.31.84: 2 Time(s)
   obert/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   obert/keyboard-interactive/pam from 87.139.79.11: 2 Time(s)
   obert/none from 124.42.124.87: 2 Time(s)
   obert/none from 87.139.79.11: 2 Time(s)
   ocean/keyboard-interactive/pam from 164.77.145.60: 2 Time(s)
   ocean/keyboard-interactive/pam from 201.249.112.138: 2 Time(s)
   ocean/none from 164.77.145.60: 2 Time(s)
   ocean/none from 201.249.112.138: 2 Time(s)
   oceana/keyboard-interactive/pam from 200.118.119.48: 2 Time(s)
   oceana/keyboard-interactive/pam from 58.39.145.213: 2 Time(s)
   oceana/none from 200.118.119.48: 2 Time(s)
   oceana/none from 58.39.145.213: 2 Time(s)
   octavia/keyboard-interactive/pam from 217.96.70.66: 2 Time(s)
   octavia/keyboard-interactive/pam from 80.38.150.53: 2 Time(s)
   octavia/none from 217.96.70.66: 2 Time(s)
   octavia/none from 80.38.150.53: 2 Time(s)
   octavio/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   octavio/keyboard-interactive/pam from 190.144.61.58: 2 Time(s)
   octavio/none from 124.42.124.87: 2 Time(s)
   octavio/none from 190.144.61.58: 2 Time(s)
   octavious/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   octavious/keyboard-interactive/pam from 200.123.174.145: 2 Time(s)
   octavious/keyboard-interactive/pam from 60.191.111.234: 2 Time(s)
   octavious/none from 124.42.124.87: 2 Time(s)
   octavious/none from 200.123.174.145: 2 Time(s)
   octavious/none from 60.191.111.234: 2 Time(s)

Users logging in through sshd:
   dmah:
      S010600c049d9e99b.cg.shawcable.net (70.72.16.222): 1 time
   neuro:
      nat-egress.zero.geekha.us (78.86.109.47): 1 time

Error in PAM authentication:
   Authentication failure for dmah from s010600c049d9e99b.cg.shawcable.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nitza from 201.161.28.9 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nitza from mail.hierrobeco.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user nixie from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user nixie from adsl-75-22-172-193.dsl.sndg02.sbcglobal.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nixie from robert71.lnk.telstra.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user niyati from 36.249.97-84.rev.gaoland.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user niyati from 88-196-206-58-dsl.hps.estpak.ee : 2 Time(s)
   User not known to the underlying authentication module for illegal user nizana from 179.26-246-81.adsl-static.isp.belgacom.be : 2 Time(s)
   User not known to the underlying authentication module for illegal user nizana from 189-19-76-194.dsl.telesp.net.br : 2 Time(s)
   User not known to the underlying authentication module for illegal user nizana from 60.191.111.234 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noah from customer-200-79-25-39.uninet.net.mx : 2 Time(s)
   User not known to the underlying authentication module for illegal user noah from p578b4f0b.dip0.t-ipconnect.de : 2 Time(s)
   User not known to the underlying authentication module for illegal user noam from c-98-216-38-18.hsd1.ma.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nodin from 217.96.70.66 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nodin from 221.158.48.69 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nodin from static-70-107-248-126.ny325.east.verizon.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user noe from 217.96.70.66 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noe from n219076222027.netvigator.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user noel from 170.56.255.20 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noel from 3e70defd.adsl.enternet.hu : 2 Time(s)
   User not known to the underlying authentication module for illegal user noel from 58.77.117.97 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noelani from 220.225.46.34 : 6 Time(s)
   User not known to the underlying authentication module for illegal user noelle from 61.172.200.198 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noelle from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user noelle from 79.120.226.174 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nohealani from 190.144.61.58 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nohealani from 58.77.117.97 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nola from c-98-216-38-18.hsd1.ma.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nolan from 213.8.59.133 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noland from 120.red-80-59-254.staticip.rima-tde.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user noland from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nolcha from 200.118.119.48 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nolcha from c-98-216-38-18.hsd1.ma.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nolcha from mail.clinandes.cl : 2 Time(s)
   User not known to the underlying authentication module for illegal user nolen from 170.56.255.20 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noleta from 217.96.70.66 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noleta from static-98-119-110-139.lsanca.dsl-w.verizon.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user noma from 195.234.169.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noma from c-71-63-229-140.hsd1.mn.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nona from 61.172.200.198 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nona from adsl-75-22-172-193.dsl.sndg02.sbcglobal.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nona from c-71-63-229-140.hsd1.mn.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nonnie from 58.223.242.246 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nonnie from robert71.lnk.telstra.net : 4 Time(s)
   User not known to the underlying authentication module for illegal user nora from 200-170-141-134.static.ctbctelecom.com.br : 2 Time(s)
   User not known to the underlying authentication module for illegal user nora from 200.118.119.48 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nora from mail.hierrobeco.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user norah from c-98-216-38-18.hsd1.ma.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user norah from mail.hierrobeco.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user noreen from 193.86.111.6 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noreen from 200.123.174.145 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noreen from as5300-s47-050.cnt.entelchile.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nori from 58.223.242.246 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norina from mail.clinandes.cl : 2 Time(s)
   User not known to the underlying authentication module for illegal user norm from 201.249.112.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norm from as5300-s47-050.cnt.entelchile.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user norm from c-71-63-229-140.hsd1.mn.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user norma from 60.191.111.234 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norma from c-71-63-229-140.hsd1.mn.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user norman from 200.118.119.48 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norman from robert71.lnk.telstra.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user normandy from 200.123.174.145 : 2 Time(s)
   User not known to the underlying authentication module for illegal user normandy from 213.8.59.133 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norton from 170.56.255.20 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norwood from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user norwood from 62.72.110.203 : 2 Time(s)
   User not known to the underlying authentication module for illegal user noura from 179.26-246-81.adsl-static.isp.belgacom.be : 2 Time(s)
   User not known to the underlying authentication module for illegal user noura from 60.191.111.234 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nova from n219076222027.netvigator.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user november from 60.191.111.234 : 2 Time(s)
   User not known to the underlying authentication module for illegal user november from 61.183.16.96 : 2 Time(s)
   User not known to the underlying authentication module for illegal user novia from 217.96.70.66 : 2 Time(s)
   User not known to the underlying authentication module for illegal user novia from 58.39.145.213 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nowles from c-71-63-229-140.hsd1.mn.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nox from mail.clinandes.cl : 2 Time(s)
   User not known to the underlying authentication module for illegal user nozomi from 190.144.61.58 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nozomi from 88-196-206-58-dsl.hps.estpak.ee : 2 Time(s)
   User not known to the underlying authentication module for illegal user nu from n219076222027.netvigator.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuala from 201.21.216.198 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuala from 221.158.48.69 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nubia from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user nubia from 80.51.31.84 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuhad from 195.234.169.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuhad from ppp-69-217-30-214.dsl.applwi.ameritech.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuncio from 201.249.112.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuncio from 221.158.48.69 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nura from 74.95.165.97 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuri from 179.26-246-81.adsl-static.isp.belgacom.be : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuri from 88-196-206-58-dsl.hps.estpak.ee : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuria from 64.149.146.242 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nuru from n219076222027.netvigator.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user nusa from 36.249.97-84.rev.gaoland.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nusa from 3e70defd.adsl.enternet.hu : 2 Time(s)
   User not known to the underlying authentication module for illegal user nusa from 64.149.146.242 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyack from 201.161.28.9 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyack from 58.223.242.246 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyako from 201.249.112.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nydia from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user nye from 79.120.226.174 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nye from adsl-75-22-172-193.dsl.sndg02.sbcglobal.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nye from c-98-216-38-18.hsd1.ma.comcast.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyeki from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyeki from as5300-s47-050.cnt.entelchile.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyla from 200-170-141-134.static.ctbctelecom.com.br : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyla from 58.223.242.246 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyoka from 190.144.61.58 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyoka from 58.223.242.246 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyoka from 81-7-76-88.static.zebra.lt : 2 Time(s)
   User not known to the underlying authentication module for illegal user nysa from 195.234.169.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nysa from 64.149.146.242 : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyx from 189-19-76-194.dsl.telesp.net.br : 2 Time(s)
   User not known to the underlying authentication module for illegal user nyx from robert71.lnk.telstra.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user oakes from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oakes from 189.17.23.210 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oakes from 221.8.255.134 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oakley from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user oakley from customer-200-79-25-39.uninet.net.mx : 2 Time(s)
   User not known to the underlying authentication module for illegal user obedience from 201.161.28.9 : 2 Time(s)
   User not known to the underlying authentication module for illegal user obedience from 62.61.141.93.generic-hostname.arrownet.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user obelia from 60.191.111.234 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oberon from 200.254.105.2 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oberon from 80.51.31.84 : 2 Time(s)
   User not known to the underlying authentication module for illegal user obert from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user obert from p578b4f0b.dip0.t-ipconnect.de : 2 Time(s)
   User not known to the underlying authentication module for illegal user ocean from 201.249.112.138 : 2 Time(s)
   User not known to the underlying authentication module for illegal user ocean from as5300-s47-050.cnt.entelchile.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user oceana from 200.118.119.48 : 2 Time(s)
   User not known to the underlying authentication module for illegal user oceana from 58.39.145.213 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavia from 217.96.70.66 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavia from 53.red-80-38-150.staticip.rima-tde.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavio from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavio from 190.144.61.58 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavious from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavious from 200.123.174.145 : 2 Time(s)
   User not known to the underlying authentication module for illegal user octavious from 60.191.111.234 : 2 Time(s)

 ---------------------- SSHD End ------------------------- 


 --------------------- Sudo (secure-log) Begin ------------------------ 

==============================================================================
neuro => root
------------------------------------------------------------------------------
/usr/bin/vi /etc/apache/httpd.conf
/usr/bin/vi /etc/apache/conf.d/evolt.org.conf
/usr/sbin/apachectl configtest
/usr/sbin/apachectl graceful
Unmatched Entries:
(pam_unix) authentication failure; logname=neuro uid=0 euid=0 tty=pts/0 ruser= rhost=  user=neuro

 ---------------------- Sudo (secure-log) End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   45G   24G  66% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list