December 2012 - Sysadmins - mailman3.cels.anl.gov

Cron <root@nagasaki-11> run-parts /etc/cron.weekly
by root＠nagasaki-11.mcs.anl.gov 23 Dec '12

23 Dec '12

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 23 Dec '12

23 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sun Dec 23 04:02:01 2012 Date Range Processed: yesterday ( 2012-Dec-22 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cB_rvhwYK6Ve.asp: 1 Time(s) /cB_rvhwYK6Ve.cfm: 1 Time(s) /cB_rvhwYK6Ve.cgi: 1 Time(s) /cB_rvhwYK6Ve.html: 1 Time(s) /cB_rvhwYK6Ve.inc: 1 Time(s) /cB_rvhwYK6Ve.php: 1 Time(s) /cB_rvhwYK6Ve.php3: 1 Time(s) /cB_rvhwYK6Ve.pl: 1 Time(s) /cB_rvhwYK6Ve.sh: 1 Time(s) /cB_rvhwYK6Ve.shtml: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.asp: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.cfm: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.cgi: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.html: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.inc: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.php: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.php3: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.pl: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.sh: 1 Time(s) /cgi-bin/cB_rvhwYK6Ve.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/cB_rvhwYK6Ve.asp: 1 Time(s) /scripts/cB_rvhwYK6Ve.cfm: 1 Time(s) /scripts/cB_rvhwYK6Ve.cgi: 1 Time(s) /scripts/cB_rvhwYK6Ve.html: 1 Time(s) /scripts/cB_rvhwYK6Ve.inc: 1 Time(s) /scripts/cB_rvhwYK6Ve.php: 1 Time(s) /scripts/cB_rvhwYK6Ve.php3: 1 Time(s) /scripts/cB_rvhwYK6Ve.pl: 1 Time(s) /scripts/cB_rvhwYK6Ve.sh: 1 Time(s) /scripts/cB_rvhwYK6Ve.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: authentication failure; logname=tharriso uid=5078 euid=0 tty=pts/1 ruser=tharriso rhost= user=mgrastprod: 1 Time(s) session closed for user mgrastprod: 1 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 1 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6322 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** su: pam_krb5[21733]: authentication fails for 'mgrastprod' (mgrastprod(a)MCS.ANL.GOV) Authentication failure (Decrypt integrity check failed) ---------------------- Connections (secure-log) End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 1 Time(s) 140.221.9.205: 1 Time(s) Users logging in through sshd: jbischof: 140.221.9.199 (login1.mcs.anl.gov) 1 time 140.221.9.205 (login3.mcs.anl.gov) 1 time tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 1 time Received disconnect: 11: disconnected by user : 3 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.9G 4.6G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Output from "cron" command
by Super-User 23 Dec '12

23 Dec '12

Your "cron" job on kasserine-3 [ -x /usr/lib/fs/nfs/nfsfind ] && /usr/lib/fs/nfs/nfsfind produced the following output: find: stat() error /dpool/software-prod/logs/.global_pipeline.log.LCK: No such file or directory

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 22 Dec '12

22 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Dec 22 04:02:02 2012 Date Range Processed: yesterday ( 2012-Dec-21 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.asp: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.cfm: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.cgi: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.html: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.inc: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.php: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.php3: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.pl: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.sh: 1 Time(s) /cgi-bin/uV5BOhYoqw3u.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/uV5BOhYoqw3u.asp: 1 Time(s) /scripts/uV5BOhYoqw3u.cfm: 1 Time(s) /scripts/uV5BOhYoqw3u.cgi: 1 Time(s) /scripts/uV5BOhYoqw3u.html: 1 Time(s) /scripts/uV5BOhYoqw3u.inc: 1 Time(s) /scripts/uV5BOhYoqw3u.php: 1 Time(s) /scripts/uV5BOhYoqw3u.php3: 1 Time(s) /scripts/uV5BOhYoqw3u.pl: 1 Time(s) /scripts/uV5BOhYoqw3u.sh: 1 Time(s) /scripts/uV5BOhYoqw3u.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /uV5BOhYoqw3u.asp: 1 Time(s) /uV5BOhYoqw3u.cfm: 1 Time(s) /uV5BOhYoqw3u.cgi: 1 Time(s) /uV5BOhYoqw3u.html: 1 Time(s) /uV5BOhYoqw3u.inc: 1 Time(s) /uV5BOhYoqw3u.php: 1 Time(s) /uV5BOhYoqw3u.php3: 1 Time(s) /uV5BOhYoqw3u.pl: 1 Time(s) /uV5BOhYoqw3u.sh: 1 Time(s) /uV5BOhYoqw3u.shtml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 1 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 7 Time(s) dsouza(0) -> dsouza: 1 Time(s) tharriso(0) -> tharriso: 1 Time(s) Unknown Entries: auth could not identify password for [jbischof]: 1 Time(s) conversation failed: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 5868 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 2 Time(s) 140.221.9.200: 3 Time(s) 140.221.9.205: 4 Time(s) 140.221.9.206: 1 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time jbischof: 140.221.9.205 (login3.mcs.anl.gov) 4 times 140.221.9.200 (login2.mcs.anl.gov) 3 times 140.221.9.199 (login1.mcs.anl.gov) 2 times 140.221.11.19 (jbischof.mcs.anl.gov) 2 times 140.221.9.206 (login4.mcs.anl.gov) 1 time tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 2 times Received disconnect: 11: disconnected by user : 13 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 10 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.6G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 21 Dec '12

21 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Fri Dec 21 04:02:01 2012 Date Range Processed: yesterday ( 2012-Dec-20 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/k0gV8BaZI1so.asp: 1 Time(s) /cgi-bin/k0gV8BaZI1so.cfm: 1 Time(s) /cgi-bin/k0gV8BaZI1so.cgi: 1 Time(s) /cgi-bin/k0gV8BaZI1so.html: 1 Time(s) /cgi-bin/k0gV8BaZI1so.inc: 1 Time(s) /cgi-bin/k0gV8BaZI1so.php: 1 Time(s) /cgi-bin/k0gV8BaZI1so.php3: 1 Time(s) /cgi-bin/k0gV8BaZI1so.pl: 1 Time(s) /cgi-bin/k0gV8BaZI1so.sh: 1 Time(s) /cgi-bin/k0gV8BaZI1so.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /k0gV8BaZI1so.asp: 1 Time(s) /k0gV8BaZI1so.cfm: 1 Time(s) /k0gV8BaZI1so.cgi: 1 Time(s) /k0gV8BaZI1so.html: 1 Time(s) /k0gV8BaZI1so.inc: 1 Time(s) /k0gV8BaZI1so.php: 1 Time(s) /k0gV8BaZI1so.php3: 1 Time(s) /k0gV8BaZI1so.pl: 1 Time(s) /k0gV8BaZI1so.sh: 1 Time(s) /k0gV8BaZI1so.shtml: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/k0gV8BaZI1so.asp: 1 Time(s) /scripts/k0gV8BaZI1so.cfm: 1 Time(s) /scripts/k0gV8BaZI1so.cgi: 1 Time(s) /scripts/k0gV8BaZI1so.html: 1 Time(s) /scripts/k0gV8BaZI1so.inc: 1 Time(s) /scripts/k0gV8BaZI1so.php: 1 Time(s) /scripts/k0gV8BaZI1so.php3: 1 Time(s) /scripts/k0gV8BaZI1so.pl: 1 Time(s) /scripts/k0gV8BaZI1so.sh: 1 Time(s) /scripts/k0gV8BaZI1so.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 3 Time(s) session opened for user mgrastprod by jbischof(uid=0): 2 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 8 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 23228 bytes transferred 37 messages sent 37 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 1 Time(s) 140.221.9.200: 1 Time(s) Users logging in through sshd: jbischof: 140.221.11.19 (jbischof.mcs.anl.gov) 3 times 130.202.135.161 (mcswl161.mcs.anl.gov) 1 time 140.221.9.199 (login1.mcs.anl.gov) 1 time 140.221.9.200 (login2.mcs.anl.gov) 1 time tharriso: 130.202.135.151 (mcswl151.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 6 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.5G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 20 Dec '12

20 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Thu Dec 20 04:02:02 2012 Date Range Processed: yesterday ( 2012-Dec-19 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /IkROEDtCinnF.asp: 1 Time(s) /IkROEDtCinnF.cfm: 1 Time(s) /IkROEDtCinnF.cgi: 1 Time(s) /IkROEDtCinnF.html: 1 Time(s) /IkROEDtCinnF.inc: 1 Time(s) /IkROEDtCinnF.php: 1 Time(s) /IkROEDtCinnF.php3: 1 Time(s) /IkROEDtCinnF.pl: 1 Time(s) /IkROEDtCinnF.sh: 1 Time(s) /IkROEDtCinnF.shtml: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/IkROEDtCinnF.asp: 1 Time(s) /cgi-bin/IkROEDtCinnF.cfm: 1 Time(s) /cgi-bin/IkROEDtCinnF.cgi: 1 Time(s) /cgi-bin/IkROEDtCinnF.html: 1 Time(s) /cgi-bin/IkROEDtCinnF.inc: 1 Time(s) /cgi-bin/IkROEDtCinnF.php: 1 Time(s) /cgi-bin/IkROEDtCinnF.php3: 1 Time(s) /cgi-bin/IkROEDtCinnF.pl: 1 Time(s) /cgi-bin/IkROEDtCinnF.sh: 1 Time(s) /cgi-bin/IkROEDtCinnF.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/IkROEDtCinnF.asp: 1 Time(s) /scripts/IkROEDtCinnF.cfm: 1 Time(s) /scripts/IkROEDtCinnF.cgi: 1 Time(s) /scripts/IkROEDtCinnF.html: 1 Time(s) /scripts/IkROEDtCinnF.inc: 1 Time(s) /scripts/IkROEDtCinnF.php: 1 Time(s) /scripts/IkROEDtCinnF.php3: 1 Time(s) /scripts/IkROEDtCinnF.pl: 1 Time(s) /scripts/IkROEDtCinnF.sh: 1 Time(s) /scripts/IkROEDtCinnF.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 1 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 4 Time(s) dsouza(0) -> dsouza: 3 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6045 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 1 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 2 times jbischof: 140.221.9.199 (login1.mcs.anl.gov) 1 time 140.221.11.19 (jbischof.mcs.anl.gov) 1 time tharriso: 130.202.135.148 (mcswl148.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 8 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh dsouza => root ------------------------------------------------------------------------------ /bin/bash /bin/bash ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.5G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 19 Dec '12

19 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Wed Dec 19 04:02:01 2012 Date Range Processed: yesterday ( 2012-Dec-18 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /AgTddD8wycE2.asp: 1 Time(s) /AgTddD8wycE2.cfm: 1 Time(s) /AgTddD8wycE2.cgi: 1 Time(s) /AgTddD8wycE2.html: 1 Time(s) /AgTddD8wycE2.inc: 1 Time(s) /AgTddD8wycE2.php: 1 Time(s) /AgTddD8wycE2.php3: 1 Time(s) /AgTddD8wycE2.pl: 1 Time(s) /AgTddD8wycE2.sh: 1 Time(s) /AgTddD8wycE2.shtml: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/AgTddD8wycE2.asp: 1 Time(s) /cgi-bin/AgTddD8wycE2.cfm: 1 Time(s) /cgi-bin/AgTddD8wycE2.cgi: 1 Time(s) /cgi-bin/AgTddD8wycE2.html: 1 Time(s) /cgi-bin/AgTddD8wycE2.inc: 1 Time(s) /cgi-bin/AgTddD8wycE2.php: 1 Time(s) /cgi-bin/AgTddD8wycE2.php3: 1 Time(s) /cgi-bin/AgTddD8wycE2.pl: 1 Time(s) /cgi-bin/AgTddD8wycE2.sh: 1 Time(s) /cgi-bin/AgTddD8wycE2.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/AgTddD8wycE2.asp: 1 Time(s) /scripts/AgTddD8wycE2.cfm: 1 Time(s) /scripts/AgTddD8wycE2.cgi: 1 Time(s) /scripts/AgTddD8wycE2.html: 1 Time(s) /scripts/AgTddD8wycE2.inc: 1 Time(s) /scripts/AgTddD8wycE2.php: 1 Time(s) /scripts/AgTddD8wycE2.php3: 1 Time(s) /scripts/AgTddD8wycE2.pl: 1 Time(s) /scripts/AgTddD8wycE2.sh: 1 Time(s) /scripts/AgTddD8wycE2.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su: Sessions Opened: jbischof(uid=0) -> mgrastprod: 1 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 1 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 4 Time(s) dsouza(0) -> dsouza: 1 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6818 bytes transferred 4 messages sent 4 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 3 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time jbischof: 140.221.9.199 (login1.mcs.anl.gov) 3 times 130.202.135.172 (mcswl172.mcs.anl.gov) 2 times 140.221.11.19 (jbischof.mcs.anl.gov) 2 times tharriso: 130.202.135.159 (mcswl159.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 7 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 3 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.6G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 18 Dec '12

18 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Tue Dec 18 04:02:02 2012 Date Range Processed: yesterday ( 2012-Dec-17 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /8XJSu8WMtllb.asp: 1 Time(s) /8XJSu8WMtllb.cfm: 1 Time(s) /8XJSu8WMtllb.cgi: 1 Time(s) /8XJSu8WMtllb.html: 1 Time(s) /8XJSu8WMtllb.inc: 1 Time(s) /8XJSu8WMtllb.php: 1 Time(s) /8XJSu8WMtllb.php3: 1 Time(s) /8XJSu8WMtllb.pl: 1 Time(s) /8XJSu8WMtllb.sh: 1 Time(s) /8XJSu8WMtllb.shtml: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/8XJSu8WMtllb.asp: 1 Time(s) /cgi-bin/8XJSu8WMtllb.cfm: 1 Time(s) /cgi-bin/8XJSu8WMtllb.cgi: 1 Time(s) /cgi-bin/8XJSu8WMtllb.html: 1 Time(s) /cgi-bin/8XJSu8WMtllb.inc: 1 Time(s) /cgi-bin/8XJSu8WMtllb.php: 1 Time(s) /cgi-bin/8XJSu8WMtllb.php3: 1 Time(s) /cgi-bin/8XJSu8WMtllb.pl: 1 Time(s) /cgi-bin/8XJSu8WMtllb.sh: 1 Time(s) /cgi-bin/8XJSu8WMtllb.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /favicon.ico: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/8XJSu8WMtllb.asp: 1 Time(s) /scripts/8XJSu8WMtllb.cfm: 1 Time(s) /scripts/8XJSu8WMtllb.cgi: 1 Time(s) /scripts/8XJSu8WMtllb.html: 1 Time(s) /scripts/8XJSu8WMtllb.inc: 1 Time(s) /scripts/8XJSu8WMtllb.php: 1 Time(s) /scripts/8XJSu8WMtllb.php3: 1 Time(s) /scripts/8XJSu8WMtllb.pl: 1 Time(s) /scripts/8XJSu8WMtllb.sh: 1 Time(s) /scripts/8XJSu8WMtllb.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su: Sessions Opened: jbischof(uid=0) -> mgrastprod: 1 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6488 bytes transferred 4 messages sent 4 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.200: 1 Time(s) 140.221.9.205: 1 Time(s) Users logging in through sshd: jbischof: 140.221.11.19 (jbischof.mcs.anl.gov) 4 times 140.221.9.200 (login2.mcs.anl.gov) 1 time 140.221.9.205 (login3.mcs.anl.gov) 1 time tharriso: 130.202.135.158 (mcswl158.mcs.anl.gov) 2 times Received disconnect: 11: disconnected by user : 7 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.6G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 17 Dec '12

17 Dec '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Mon Dec 17 04:02:01 2012 Date Range Processed: yesterday ( 2012-Dec-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /bAYsOY5GN2Hx.asp: 1 Time(s) /bAYsOY5GN2Hx.cfm: 1 Time(s) /bAYsOY5GN2Hx.cgi: 1 Time(s) /bAYsOY5GN2Hx.html: 1 Time(s) /bAYsOY5GN2Hx.inc: 1 Time(s) /bAYsOY5GN2Hx.php: 1 Time(s) /bAYsOY5GN2Hx.php3: 1 Time(s) /bAYsOY5GN2Hx.pl: 1 Time(s) /bAYsOY5GN2Hx.sh: 1 Time(s) /bAYsOY5GN2Hx.shtml: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.asp: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.cfm: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.cgi: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.html: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.inc: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.php: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.php3: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.pl: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.sh: 1 Time(s) /cgi-bin/bAYsOY5GN2Hx.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/bAYsOY5GN2Hx.asp: 1 Time(s) /scripts/bAYsOY5GN2Hx.cfm: 1 Time(s) /scripts/bAYsOY5GN2Hx.cgi: 1 Time(s) /scripts/bAYsOY5GN2Hx.html: 1 Time(s) /scripts/bAYsOY5GN2Hx.inc: 1 Time(s) /scripts/bAYsOY5GN2Hx.php: 1 Time(s) /scripts/bAYsOY5GN2Hx.php3: 1 Time(s) /scripts/bAYsOY5GN2Hx.pl: 1 Time(s) /scripts/bAYsOY5GN2Hx.sh: 1 Time(s) /scripts/bAYsOY5GN2Hx.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4623 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.205: 2 Time(s) Users logging in through sshd: jbischof: 140.221.9.205 (login3.mcs.anl.gov) 2 times tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 2 times Received disconnect: 11: disconnected by user : 2 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 9.0G 4.6G 67% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Cron <root@nagasaki-15> run-parts /etc/cron.weekly
by root＠nagasaki-15.mcs.anl.gov 16 Dec '12

16 Dec '12

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0