September 2013 - Sysadmins - mailman3.cels.anl.gov

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 10 Sep '13

10 Sep '13

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Tue Sep 10 04:02:03 2013 Date Range Processed: yesterday ( 2013-Sep-09 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /9yYNsWEgVlDb.asp: 1 Time(s) /9yYNsWEgVlDb.cfm: 1 Time(s) /9yYNsWEgVlDb.cgi: 1 Time(s) /9yYNsWEgVlDb.html: 1 Time(s) /9yYNsWEgVlDb.inc: 1 Time(s) /9yYNsWEgVlDb.php: 1 Time(s) /9yYNsWEgVlDb.php3: 1 Time(s) /9yYNsWEgVlDb.pl: 1 Time(s) /9yYNsWEgVlDb.sh: 1 Time(s) /9yYNsWEgVlDb.shtml: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.asp: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.cfm: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.cgi: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.html: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.inc: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.php: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.php3: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.pl: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.sh: 1 Time(s) /cgi-bin/9yYNsWEgVlDb.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /robots.txt: 1 Time(s) /scripts/9yYNsWEgVlDb.asp: 1 Time(s) /scripts/9yYNsWEgVlDb.cfm: 1 Time(s) /scripts/9yYNsWEgVlDb.cgi: 1 Time(s) /scripts/9yYNsWEgVlDb.html: 1 Time(s) /scripts/9yYNsWEgVlDb.inc: 1 Time(s) /scripts/9yYNsWEgVlDb.php: 1 Time(s) /scripts/9yYNsWEgVlDb.php3: 1 Time(s) /scripts/9yYNsWEgVlDb.pl: 1 Time(s) /scripts/9yYNsWEgVlDb.sh: 1 Time(s) /scripts/9yYNsWEgVlDb.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) /xmldata?item=All: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 200401 bytes transferred 334 messages sent 334 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.206: 2 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time jbischof: 140.221.9.206 (login4.mcs.anl.gov) 2 times Received disconnect: 11: disconnected by user : 2 Time(s) **Unmatched Entries** userauth_hostbased: unsupported public key algorithm: ecdsa-sha2-nistp256 : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => root ------------------------------------------------------------------------------ /bin/bash ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 11G 3.5G 75% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 141G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

[mrepo] changes to warehouse13.mcs.anl.gov (new: 19, removed: 6)
by mrepo＠warehouse13.mcs.anl.gov 10 Sep '13

10 Sep '13

The following changes to mrepo's repositories on warehouse13.mcs.anl.gov have been made: Dist: CentOS 5.9 (x86_64) (centos-5.9-x86_64) Repo: puppet + facter-1.7.3-1.el5.i386.rpm (85 kiB) + facter-1.7.3-1.el5.x86_64.rpm (85 kiB) Dist: CentOS 6.3 (x86_64) (centos-6.3-x86_64) Repo: epel + cacti-0.8.8b-2.el6.noarch.rpm (2249 kiB) + python-sparklines-0.9-2.el6.noarch.rpm (11 kiB) + scribus-1.4.3-1.el6.x86_64.rpm (21761 kiB) + urdfdom-headers-devel-0.2.3-1.el6.noarch.rpm (14 kiB) - cacti-0.8.8b-1.el6.noarch.rpm (2249 kiB) - scribus-1.4.2-2.el6.x86_64.rpm (21665 kiB) - urdfdom-headers-devel-0.2.2-2.el6.noarch.rpm (14 kiB) Repo: puppet + facter-1.7.3-1.el6.x86_64.rpm (85 kiB) Dist: CentOS 6.4 (x86_64) (centos-6.4-x86_64) Repo: epel + cacti-0.8.8b-2.el6.noarch.rpm (2249 kiB) + python-sparklines-0.9-2.el6.noarch.rpm (11 kiB) + scribus-1.4.3-1.el6.x86_64.rpm (21761 kiB) + urdfdom-headers-devel-0.2.3-1.el6.noarch.rpm (14 kiB) - cacti-0.8.8b-1.el6.noarch.rpm (2249 kiB) - scribus-1.4.2-2.el6.x86_64.rpm (21665 kiB) - urdfdom-headers-devel-0.2.2-2.el6.noarch.rpm (14 kiB) Repo: puppet + facter-1.7.3-1.el6.x86_64.rpm (85 kiB) Repo: updates + rsyslog-5.8.10-7.el6_4.x86_64.rpm (648 kiB) + rsyslog-gnutls-5.8.10-7.el6_4.x86_64.rpm (26 kiB) + rsyslog-gssapi-5.8.10-7.el6_4.x86_64.rpm (28 kiB) + rsyslog-mysql-5.8.10-7.el6_4.x86_64.rpm (20 kiB) + rsyslog-pgsql-5.8.10-7.el6_4.x86_64.rpm (20 kiB) + rsyslog-relp-5.8.10-7.el6_4.x86_64.rpm (20 kiB) + rsyslog-snmp-5.8.10-7.el6_4.x86_64.rpm (21 kiB)

1 0

Cron <root@warehouse13> /usr/bin/mrepo -q -ug
by root＠warehouse13.mcs.anl.gov 10 Sep '13

10 Sep '13

mirror: Access failed: 404 Not Found (/6.3/fasttrack/x86_64/Packages/ http:) mrepo: Mirroring failed for http://vault.centos.org/6.3/fasttrack/x86_64/Packages with message: Failed with return code: 512 mirror: Access failed: 404 Not Found (/6.3/updates/x86_64/Packages/ http:) mrepo: Mirroring failed for http://vault.centos.org/6.3/updates/x86_64/Packages with message: Failed with return code: 512 mirror: Access failed: 404 Not Found (/stable) mrepo: Mirroring failed for http://yum.theforeman.org/stable with message: Failed with return code: 256

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 09 Sep '13

09 Sep '13

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Mon Sep 9 04:02:01 2013 Date Range Processed: yesterday ( 2013-Sep-08 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /H71CmzJYMg81.asp: 1 Time(s) /H71CmzJYMg81.cfm: 1 Time(s) /H71CmzJYMg81.cgi: 1 Time(s) /H71CmzJYMg81.html: 1 Time(s) /H71CmzJYMg81.inc: 1 Time(s) /H71CmzJYMg81.php: 1 Time(s) /H71CmzJYMg81.php3: 1 Time(s) /H71CmzJYMg81.pl: 1 Time(s) /H71CmzJYMg81.sh: 1 Time(s) /H71CmzJYMg81.shtml: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/H71CmzJYMg81.asp: 1 Time(s) /cgi-bin/H71CmzJYMg81.cfm: 1 Time(s) /cgi-bin/H71CmzJYMg81.cgi: 1 Time(s) /cgi-bin/H71CmzJYMg81.html: 1 Time(s) /cgi-bin/H71CmzJYMg81.inc: 1 Time(s) /cgi-bin/H71CmzJYMg81.php: 1 Time(s) /cgi-bin/H71CmzJYMg81.php3: 1 Time(s) /cgi-bin/H71CmzJYMg81.pl: 1 Time(s) /cgi-bin/H71CmzJYMg81.sh: 1 Time(s) /cgi-bin/H71CmzJYMg81.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /robots.txt: 1 Time(s) /scripts/H71CmzJYMg81.asp: 1 Time(s) /scripts/H71CmzJYMg81.cfm: 1 Time(s) /scripts/H71CmzJYMg81.cgi: 1 Time(s) /scripts/H71CmzJYMg81.html: 1 Time(s) /scripts/H71CmzJYMg81.inc: 1 Time(s) /scripts/H71CmzJYMg81.php: 1 Time(s) /scripts/H71CmzJYMg81.php3: 1 Time(s) /scripts/H71CmzJYMg81.pl: 1 Time(s) /scripts/H71CmzJYMg81.sh: 1 Time(s) /scripts/H71CmzJYMg81.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) /xmldata?item=All: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4280 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 10G 3.5G 75% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 141G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

[mrepo] changes to warehouse13.mcs.anl.gov (new: 27, removed: 25)
by mrepo＠warehouse13.mcs.anl.gov 09 Sep '13

09 Sep '13

The following changes to mrepo's repositories on warehouse13.mcs.anl.gov have been made: Dist: CentOS 5.9 (x86_64) (centos-5.9-x86_64) Repo: epel + php-htmLawed-1.1.15-2.el5.noarch.rpm (125 kiB) - php-htmLawed-1.1.12-1.el5.noarch.rpm (115 kiB) Dist: CentOS 6.3 (x86_64) (centos-6.3-x86_64) Repo: epel + ngircd-20.3-1.el6.x86_64.rpm (168 kiB) + php-PHP-CSS-Parser-5.0.8-1.el6.noarch.rpm (28 kiB) + php-htmLawed-1.1.15-2.el6.noarch.rpm (101 kiB) + php-pear-Auth-OpenID-2.2.2-7.el6.noarch.rpm (136 kiB) + php-pecl-propro-1.0.0-1.el6.i686.rpm (12 kiB) + php-pecl-propro-1.0.0-1.el6.x86_64.rpm (11 kiB) + php-pecl-propro-devel-1.0.0-1.el6.i686.rpm (4 kiB) + php-pecl-propro-devel-1.0.0-1.el6.x86_64.rpm (4 kiB) + php-pecl-raphf-1.0.2-1.el6.i686.rpm (13 kiB) + php-pecl-raphf-1.0.2-1.el6.x86_64.rpm (13 kiB) + php-pecl-raphf-devel-1.0.2-1.el6.i686.rpm (4 kiB) + php-pecl-raphf-devel-1.0.2-1.el6.x86_64.rpm (4 kiB) + rabbitmq-server-3.1.5-1.el6.noarch.rpm (3642 kiB) - ngircd-20.2-1.el6.x86_64.rpm (168 kiB) - php-PHP-CSS-Parser-5.0.6-1.el6.noarch.rpm (28 kiB) - php-htmLawed-1.1.12-1.el6.noarch.rpm (92 kiB) - php-pecl-propro-0.1.0-1.el6.i686.rpm (12 kiB) - php-pecl-propro-0.1.0-1.el6.x86_64.rpm (11 kiB) - php-pecl-propro-devel-0.1.0-1.el6.i686.rpm (4 kiB) - php-pecl-propro-devel-0.1.0-1.el6.x86_64.rpm (4 kiB) - php-pecl-raphf-0.1.0-1.el6.i686.rpm (13 kiB) - php-pecl-raphf-0.1.0-1.el6.x86_64.rpm (13 kiB) - php-pecl-raphf-devel-0.1.0-1.el6.i686.rpm (4 kiB) - php-pecl-raphf-devel-0.1.0-1.el6.x86_64.rpm (4 kiB) - rabbitmq-server-2.6.1-1.el6.noarch.rpm (1088 kiB) Dist: CentOS 6.4 (x86_64) (centos-6.4-x86_64) Repo: epel + ngircd-20.3-1.el6.x86_64.rpm (168 kiB) + php-PHP-CSS-Parser-5.0.8-1.el6.noarch.rpm (28 kiB) + php-htmLawed-1.1.15-2.el6.noarch.rpm (101 kiB) + php-pear-Auth-OpenID-2.2.2-7.el6.noarch.rpm (136 kiB) + php-pecl-propro-1.0.0-1.el6.i686.rpm (12 kiB) + php-pecl-propro-1.0.0-1.el6.x86_64.rpm (11 kiB) + php-pecl-propro-devel-1.0.0-1.el6.i686.rpm (4 kiB) + php-pecl-propro-devel-1.0.0-1.el6.x86_64.rpm (4 kiB) + php-pecl-raphf-1.0.2-1.el6.i686.rpm (13 kiB) + php-pecl-raphf-1.0.2-1.el6.x86_64.rpm (13 kiB) + php-pecl-raphf-devel-1.0.2-1.el6.i686.rpm (4 kiB) + php-pecl-raphf-devel-1.0.2-1.el6.x86_64.rpm (4 kiB) + rabbitmq-server-3.1.5-1.el6.noarch.rpm (3642 kiB) - ngircd-20.2-1.el6.x86_64.rpm (168 kiB) - php-PHP-CSS-Parser-5.0.6-1.el6.noarch.rpm (28 kiB) - php-htmLawed-1.1.12-1.el6.noarch.rpm (92 kiB) - php-pecl-propro-0.1.0-1.el6.i686.rpm (12 kiB) - php-pecl-propro-0.1.0-1.el6.x86_64.rpm (11 kiB) - php-pecl-propro-devel-0.1.0-1.el6.i686.rpm (4 kiB) - php-pecl-propro-devel-0.1.0-1.el6.x86_64.rpm (4 kiB) - php-pecl-raphf-0.1.0-1.el6.i686.rpm (13 kiB) - php-pecl-raphf-0.1.0-1.el6.x86_64.rpm (13 kiB) - php-pecl-raphf-devel-0.1.0-1.el6.i686.rpm (4 kiB) - php-pecl-raphf-devel-0.1.0-1.el6.x86_64.rpm (4 kiB) - rabbitmq-server-2.6.1-1.el6.noarch.rpm (1088 kiB)

1 0

Cron <root@warehouse13> /usr/bin/mrepo -q -ug
by root＠warehouse13.mcs.anl.gov 09 Sep '13

09 Sep '13

mirror: Access failed: 404 Not Found (/6.3/fasttrack/x86_64/Packages/ http:) mrepo: Mirroring failed for http://vault.centos.org/6.3/fasttrack/x86_64/Packages with message: Failed with return code: 512 mirror: Access failed: 404 Not Found (/6.3/updates/x86_64/Packages/ http:) mrepo: Mirroring failed for http://vault.centos.org/6.3/updates/x86_64/Packages with message: Failed with return code: 512 mirror: Access failed: 404 Not Found (/stable) mrepo: Mirroring failed for http://yum.theforeman.org/stable with message: Failed with return code: 256

1 0

Cron <root@nagasaki-12> run-parts /etc/cron.weekly
by root＠nagasaki-12.mcs.anl.gov 08 Sep '13

08 Sep '13

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0

Cron <root@nagasaki-15> run-parts /etc/cron.weekly
by root＠nagasaki-15.mcs.anl.gov 08 Sep '13

08 Sep '13

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0

Cron <root@nagasaki-13> run-parts /etc/cron.weekly
by root＠nagasaki-13.mcs.anl.gov 08 Sep '13

08 Sep '13

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 08 Sep '13

08 Sep '13

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sun Sep 8 04:02:01 2013 Date Range Processed: yesterday ( 2013-Sep-07 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /PcE2kXZaNWMU.asp: 1 Time(s) /PcE2kXZaNWMU.cfm: 1 Time(s) /PcE2kXZaNWMU.cgi: 1 Time(s) /PcE2kXZaNWMU.html: 1 Time(s) /PcE2kXZaNWMU.inc: 1 Time(s) /PcE2kXZaNWMU.php: 1 Time(s) /PcE2kXZaNWMU.php3: 1 Time(s) /PcE2kXZaNWMU.pl: 1 Time(s) /PcE2kXZaNWMU.sh: 1 Time(s) /PcE2kXZaNWMU.shtml: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.asp: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.cfm: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.cgi: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.html: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.inc: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.php: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.php3: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.pl: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.sh: 1 Time(s) /cgi-bin/PcE2kXZaNWMU.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /robots.txt: 1 Time(s) /scripts/PcE2kXZaNWMU.asp: 1 Time(s) /scripts/PcE2kXZaNWMU.cfm: 1 Time(s) /scripts/PcE2kXZaNWMU.cgi: 1 Time(s) /scripts/PcE2kXZaNWMU.html: 1 Time(s) /scripts/PcE2kXZaNWMU.inc: 1 Time(s) /scripts/PcE2kXZaNWMU.php: 1 Time(s) /scripts/PcE2kXZaNWMU.php3: 1 Time(s) /scripts/PcE2kXZaNWMU.pl: 1 Time(s) /scripts/PcE2kXZaNWMU.sh: 1 Time(s) /scripts/PcE2kXZaNWMU.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) /xmldata?item=All: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4949 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 11G 3.5G 75% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 141G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0