- Sysadmins - mailman3.cels.anl.gov

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 11 Sep '12

11 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Tue Sep 11 04:02:01 2012 Date Range Processed: yesterday ( 2012-Sep-10 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Automount Begin ------------------------ **Unmatched Entries** key "mc" not found in map source(s).: 2 Time(s) key "up" not found in map source(s).: 3 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.asp: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.cfm: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.cgi: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.html: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.inc: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.php: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.php3: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.pl: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.sh: 1 Time(s) /cgi-bin/uBr0ulVzmtP4.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /favicon.ico: 9 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/uBr0ulVzmtP4.asp: 1 Time(s) /scripts/uBr0ulVzmtP4.cfm: 1 Time(s) /scripts/uBr0ulVzmtP4.cgi: 1 Time(s) /scripts/uBr0ulVzmtP4.html: 1 Time(s) /scripts/uBr0ulVzmtP4.inc: 1 Time(s) /scripts/uBr0ulVzmtP4.php: 1 Time(s) /scripts/uBr0ulVzmtP4.php3: 1 Time(s) /scripts/uBr0ulVzmtP4.pl: 1 Time(s) /scripts/uBr0ulVzmtP4.sh: 1 Time(s) /scripts/uBr0ulVzmtP4.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /uBr0ulVzmtP4.asp: 1 Time(s) /uBr0ulVzmtP4.cfm: 1 Time(s) /uBr0ulVzmtP4.cgi: 1 Time(s) /uBr0ulVzmtP4.html: 1 Time(s) /uBr0ulVzmtP4.inc: 1 Time(s) /uBr0ulVzmtP4.php: 1 Time(s) /uBr0ulVzmtP4.php3: 1 Time(s) /uBr0ulVzmtP4.pl: 1 Time(s) /uBr0ulVzmtP4.sh: 1 Time(s) /uBr0ulVzmtP4.shtml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 4 Time(s) session opened for user mgrastprod by tharriso(uid=0): 3 Time(s) session opened for user mgrastprod by jbischof(uid=0): 1 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 2 Time(s) jbischof(0) -> jbischof: 2 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6393 bytes transferred 4 messages sent 4 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jbischof/publickey: 140.221.9.199: 3 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 2 times jbischof: 140.221.9.199 (login1.mcs.anl.gov) 3 times 130.202.135.150 (mcswl150.mcs.anl.gov) 2 times tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 1 time Received disconnect: 11: disconnected by user : 4 Time(s) **Unmatched Entries** error: /dev/pts/7: No such file or directory : 1 time(s) error: open /dev/tty failed - could not set controlling tty: No such device or address : 1 time(s) error: ioctl(TIOCSCTTY): Input/output error : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh dsouza => root ------------------------------------------------------------------------------ /bin/bash ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.1G 5.4G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 10 Sep '12

10 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Mon Sep 10 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-09 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /ZIHoN05nanAE.asp: 1 Time(s) /ZIHoN05nanAE.cfm: 1 Time(s) /ZIHoN05nanAE.cgi: 1 Time(s) /ZIHoN05nanAE.html: 1 Time(s) /ZIHoN05nanAE.inc: 1 Time(s) /ZIHoN05nanAE.php: 1 Time(s) /ZIHoN05nanAE.php3: 1 Time(s) /ZIHoN05nanAE.pl: 1 Time(s) /ZIHoN05nanAE.sh: 1 Time(s) /ZIHoN05nanAE.shtml: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/ZIHoN05nanAE.asp: 1 Time(s) /cgi-bin/ZIHoN05nanAE.cfm: 1 Time(s) /cgi-bin/ZIHoN05nanAE.cgi: 1 Time(s) /cgi-bin/ZIHoN05nanAE.html: 1 Time(s) /cgi-bin/ZIHoN05nanAE.inc: 1 Time(s) /cgi-bin/ZIHoN05nanAE.php: 1 Time(s) /cgi-bin/ZIHoN05nanAE.php3: 1 Time(s) /cgi-bin/ZIHoN05nanAE.pl: 1 Time(s) /cgi-bin/ZIHoN05nanAE.sh: 1 Time(s) /cgi-bin/ZIHoN05nanAE.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/ZIHoN05nanAE.asp: 1 Time(s) /scripts/ZIHoN05nanAE.cfm: 1 Time(s) /scripts/ZIHoN05nanAE.cgi: 1 Time(s) /scripts/ZIHoN05nanAE.html: 1 Time(s) /scripts/ZIHoN05nanAE.inc: 1 Time(s) /scripts/ZIHoN05nanAE.php: 1 Time(s) /scripts/ZIHoN05nanAE.php3: 1 Time(s) /scripts/ZIHoN05nanAE.pl: 1 Time(s) /scripts/ZIHoN05nanAE.sh: 1 Time(s) /scripts/ZIHoN05nanAE.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 2 Time(s) session opened for user mgrastprod by tharriso(uid=0): 2 Time(s) sudo: Authentication Failures: tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4273 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Users logging in through sshd: tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 1 time **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.0G 5.5G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Cron <root@nagasaki-11> run-parts /etc/cron.weekly
by root＠nagasaki-11.mcs.anl.gov 09 Sep '12

09 Sep '12

/etc/cron.weekly/99-raid-check: WARNING: mismatch_cnt is not 0 on /dev/md1

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 09 Sep '12

09 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sun Sep 9 04:02:01 2012 Date Range Processed: yesterday ( 2012-Sep-08 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /RRipGQrnQGb3.asp: 1 Time(s) /RRipGQrnQGb3.cfm: 1 Time(s) /RRipGQrnQGb3.cgi: 1 Time(s) /RRipGQrnQGb3.html: 1 Time(s) /RRipGQrnQGb3.inc: 1 Time(s) /RRipGQrnQGb3.php: 1 Time(s) /RRipGQrnQGb3.php3: 1 Time(s) /RRipGQrnQGb3.pl: 1 Time(s) /RRipGQrnQGb3.sh: 1 Time(s) /RRipGQrnQGb3.shtml: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/RRipGQrnQGb3.asp: 1 Time(s) /cgi-bin/RRipGQrnQGb3.cfm: 1 Time(s) /cgi-bin/RRipGQrnQGb3.cgi: 1 Time(s) /cgi-bin/RRipGQrnQGb3.html: 1 Time(s) /cgi-bin/RRipGQrnQGb3.inc: 1 Time(s) /cgi-bin/RRipGQrnQGb3.php: 1 Time(s) /cgi-bin/RRipGQrnQGb3.php3: 1 Time(s) /cgi-bin/RRipGQrnQGb3.pl: 1 Time(s) /cgi-bin/RRipGQrnQGb3.sh: 1 Time(s) /cgi-bin/RRipGQrnQGb3.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/RRipGQrnQGb3.asp: 1 Time(s) /scripts/RRipGQrnQGb3.cfm: 1 Time(s) /scripts/RRipGQrnQGb3.cgi: 1 Time(s) /scripts/RRipGQrnQGb3.html: 1 Time(s) /scripts/RRipGQrnQGb3.inc: 1 Time(s) /scripts/RRipGQrnQGb3.php: 1 Time(s) /scripts/RRipGQrnQGb3.php3: 1 Time(s) /scripts/RRipGQrnQGb3.pl: 1 Time(s) /scripts/RRipGQrnQGb3.sh: 1 Time(s) /scripts/RRipGQrnQGb3.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 7084 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.0G 5.5G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 08 Sep '12

08 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Sep 8 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-07 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Automount Begin ------------------------ **Unmatched Entries** key "pro" not found in map source(s).: 3 Time(s) key ".hg" not found in map source(s).: 8 Time(s) key "mg" not found in map source(s).: 1 Time(s) key "p" not found in map source(s).: 1 Time(s) key ".bzr" not found in map source(s).: 8 Time(s) key "jbs" not found in map source(s).: 1 Time(s) key "_MTN" not found in map source(s).: 8 Time(s) key "prod" not found in map source(s).: 1 Time(s) key ".git" not found in map source(s).: 8 Time(s) key "{arch}" not found in map source(s).: 8 Time(s) key "m" not found in map source(s).: 1 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.asp: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.cfm: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.cgi: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.html: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.inc: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.php: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.php3: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.pl: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.sh: 1 Time(s) /cgi-bin/vUaMMtQDpQbT.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /favicon.ico: 22 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/vUaMMtQDpQbT.asp: 1 Time(s) /scripts/vUaMMtQDpQbT.cfm: 1 Time(s) /scripts/vUaMMtQDpQbT.cgi: 1 Time(s) /scripts/vUaMMtQDpQbT.html: 1 Time(s) /scripts/vUaMMtQDpQbT.inc: 1 Time(s) /scripts/vUaMMtQDpQbT.php: 1 Time(s) /scripts/vUaMMtQDpQbT.php3: 1 Time(s) /scripts/vUaMMtQDpQbT.pl: 1 Time(s) /scripts/vUaMMtQDpQbT.sh: 1 Time(s) /scripts/vUaMMtQDpQbT.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /vUaMMtQDpQbT.asp: 1 Time(s) /vUaMMtQDpQbT.cfm: 1 Time(s) /vUaMMtQDpQbT.cgi: 1 Time(s) /vUaMMtQDpQbT.html: 1 Time(s) /vUaMMtQDpQbT.inc: 1 Time(s) /vUaMMtQDpQbT.php: 1 Time(s) /vUaMMtQDpQbT.php3: 1 Time(s) /vUaMMtQDpQbT.pl: 1 Time(s) /vUaMMtQDpQbT.sh: 1 Time(s) /vUaMMtQDpQbT.shtml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su: Sessions Opened: jbischof(uid=0) -> mgrastprod: 1 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 2 Time(s) session opened for user mgrastprod by tharriso(uid=0): 2 Time(s) sudo: Authentication Failures: jared(0) -> jared: 4 Time(s) dsouza(0) -> dsouza: 1 Time(s) jbischof(0) -> jbischof: 1 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 20194 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jared/publickey: 140.221.9.206: 3 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time jared: 140.221.9.206 (login4.mcs.anl.gov) 3 times 140.221.76.11 (anzio-1.mcs.anl.gov) 2 times 140.221.11.239 (jaredwilkening.mcs.anl.gov) 1 time jbischof: 130.202.135.136 (mcswl136.mcs.anl.gov) 2 times root: 192.5.200.126 (warehouse13.mcs.anl.gov) 1 time tharriso: 130.202.135.139 (mcswl139.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 7 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh ============================================================================== jared => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.0G 5.5G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

everyone subscription notification
by mailman＠lists.igsb.anl.gov 07 Sep '12

07 Sep '12

Subscribed: jkoval(a)anl.gov

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 07 Sep '12

07 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Fri Sep 7 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-06 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Selinux Audit Begin ------------------------ Number of audit daemon stops: 1 ---------------------- Selinux Audit End ------------------------- --------------------- Automount Begin ------------------------ **Unmatched Entries** key "pro" not found in map source(s).: 2 Time(s) key ".hg" not found in map source(s).: 6 Time(s) key "p" not found in map source(s).: 1 Time(s) key ".bzr" not found in map source(s).: 6 Time(s) key "_MTN" not found in map source(s).: 6 Time(s) key ".git" not found in map source(s).: 6 Time(s) key "{arch}" not found in map source(s).: 6 Time(s) key "m" not found in map source(s).: 1 Time(s) key "dolson" not found in map source(s).: 3 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 2 Time(s) /ControlManager/default.htm: 2 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s) /admin.back: 2 Time(s) /cgi-bin/haypRO15u9ns.asp: 1 Time(s) /cgi-bin/haypRO15u9ns.cfm: 1 Time(s) /cgi-bin/haypRO15u9ns.cgi: 1 Time(s) /cgi-bin/haypRO15u9ns.html: 1 Time(s) /cgi-bin/haypRO15u9ns.inc: 1 Time(s) /cgi-bin/haypRO15u9ns.php: 1 Time(s) /cgi-bin/haypRO15u9ns.php3: 1 Time(s) /cgi-bin/haypRO15u9ns.pl: 1 Time(s) /cgi-bin/haypRO15u9ns.sh: 1 Time(s) /cgi-bin/haypRO15u9ns.shtml: 1 Time(s) /cgi-bin/vxWneJKDkejT.asp: 1 Time(s) /cgi-bin/vxWneJKDkejT.cfm: 1 Time(s) /cgi-bin/vxWneJKDkejT.cgi: 1 Time(s) /cgi-bin/vxWneJKDkejT.html: 1 Time(s) /cgi-bin/vxWneJKDkejT.inc: 1 Time(s) /cgi-bin/vxWneJKDkejT.php: 1 Time(s) /cgi-bin/vxWneJKDkejT.php3: 1 Time(s) /cgi-bin/vxWneJKDkejT.pl: 1 Time(s) /cgi-bin/vxWneJKDkejT.sh: 1 Time(s) /cgi-bin/vxWneJKDkejT.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s) /file: 2 Time(s) /haypRO15u9ns.asp: 1 Time(s) /haypRO15u9ns.cfm: 1 Time(s) /haypRO15u9ns.cgi: 1 Time(s) /haypRO15u9ns.html: 1 Time(s) /haypRO15u9ns.inc: 1 Time(s) /haypRO15u9ns.php: 1 Time(s) /haypRO15u9ns.php3: 1 Time(s) /haypRO15u9ns.pl: 1 Time(s) /haypRO15u9ns.sh: 1 Time(s) /haypRO15u9ns.shtml: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 2 Time(s) /login.htm: 2 Time(s) /robots.txt: 2 Time(s) /scripts/haypRO15u9ns.asp: 1 Time(s) /scripts/haypRO15u9ns.cfm: 1 Time(s) /scripts/haypRO15u9ns.cgi: 1 Time(s) /scripts/haypRO15u9ns.html: 1 Time(s) /scripts/haypRO15u9ns.inc: 1 Time(s) /scripts/haypRO15u9ns.php: 1 Time(s) /scripts/haypRO15u9ns.php3: 1 Time(s) /scripts/haypRO15u9ns.pl: 1 Time(s) /scripts/haypRO15u9ns.sh: 1 Time(s) /scripts/haypRO15u9ns.shtml: 1 Time(s) /scripts/vxWneJKDkejT.asp: 1 Time(s) /scripts/vxWneJKDkejT.cfm: 1 Time(s) /scripts/vxWneJKDkejT.cgi: 1 Time(s) /scripts/vxWneJKDkejT.html: 1 Time(s) /scripts/vxWneJKDkejT.inc: 1 Time(s) /scripts/vxWneJKDkejT.php: 1 Time(s) /scripts/vxWneJKDkejT.php3: 1 Time(s) /scripts/vxWneJKDkejT.pl: 1 Time(s) /scripts/vxWneJKDkejT.sh: 1 Time(s) /scripts/vxWneJKDkejT.shtml: 1 Time(s) /sdk: 2 Time(s) /sitemap.xml: 2 Time(s) /vxWneJKDkejT.asp: 1 Time(s) /vxWneJKDkejT.cfm: 1 Time(s) /vxWneJKDkejT.cgi: 1 Time(s) /vxWneJKDkejT.html: 1 Time(s) /vxWneJKDkejT.inc: 1 Time(s) /vxWneJKDkejT.php: 1 Time(s) /vxWneJKDkejT.php3: 1 Time(s) /vxWneJKDkejT.pl: 1 Time(s) /vxWneJKDkejT.sh: 1 Time(s) /vxWneJKDkejT.shtml: 1 Time(s) /wavemaster.internal: 2 Time(s) 501 Not Implemented /: 2 Time(s) ---------------------- httpd End ------------------------- --------------------- OpenVPN Begin ------------------------ Version Information: OpenVPN 2.1.4 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Apr 24 2011 **Unmatched Entries** allow_pull_fqdn = DISABLED: 1 Time(s) auth_user_pass_file = '[UNDEF]': 1 Time(s) auth_user_pass_verify_script = '[UNDEF]': 1 Time(s) auth_user_pass_verify_script_via_file = DISABLED: 1 Time(s) authname = 'SHA1': 1 Time(s) authname_defined = ENABLED: 1 Time(s) bind_defined = DISABLED: 1 Time(s) bind_local = ENABLED: 1 Time(s) ca_file = 'keys/ca.crt': 1 Time(s) ca_path = '[UNDEF]': 1 Time(s) ccd_exclusive = DISABLED: 1 Time(s) cd_dir = '/etc/openvpn': 1 Time(s) cert_file = 'keys/berlin.crt': 1 Time(s) cf_max = 0: 1 Time(s) cf_per = 0: 1 Time(s) chroot_dir = '[UNDEF]': 1 Time(s) cipher_list = '[UNDEF]': 1 Time(s) ciphername = 'BF-CBC': 1 Time(s) ciphername_defined = ENABLED: 1 Time(s) client = DISABLED: 1 Time(s) client_config_dir = '[UNDEF]': 1 Time(s) client_connect_script = '[UNDEF]': 1 Time(s) client_disconnect_script = '[UNDEF]': 1 Time(s) config = 'openvpn.conf': 1 Time(s) connect_retry_max = 0: 1 Time(s) connect_retry_seconds = 5: 1 Time(s) connect_timeout = 10: 1 Time(s) crl_file = '[UNDEF]': 1 Time(s) daemon = ENABLED: 1 Time(s) dev = 'tun': 1 Time(s) dev_node = '[UNDEF]': 1 Time(s) dev_type = '[UNDEF]': 1 Time(s) dh_file = 'keys/dh1024.pem': 1 Time(s) down_pre = DISABLED: 1 Time(s) down_script = '[UNDEF]': 1 Time(s) duplicate_cn = ENABLED: 1 Time(s) enable_c2c = ENABLED: 1 Time(s) engine = DISABLED: 1 Time(s) explicit_exit_notification = 0: 1 Time(s) fast_io = DISABLED: 1 Time(s) fragment = 0: 1 Time(s) genkey = DISABLED: 1 Time(s) gremlin = 0: 1 Time(s) groupname = 'users': 1 Time(s) handshake_window = 60: 1 Time(s) ifconfig_local = '172.16.100.1': 1 Time(s) ifconfig_noexec = DISABLED: 1 Time(s) ifconfig_nowarn = DISABLED: 1 Time(s) ifconfig_pool_defined = ENABLED: 1 Time(s) ifconfig_pool_end = 172.16.101.251: 1 Time(s) ifconfig_pool_netmask = 0.0.0.0: 1 Time(s) ifconfig_pool_persist_filename = 'ipp.txt': 1 Time(s) ifconfig_pool_persist_refresh_freq = 600: 1 Time(s) ifconfig_pool_start = 172.16.100.4: 1 Time(s) ifconfig_remote_netmask = '172.16.100.2': 1 Time(s) inactivity_timeout = 0: 1 Time(s) inetd = 0: 1 Time(s) ipchange = '[UNDEF]': 1 Time(s) keepalive_ping = 10: 1 Time(s) keepalive_timeout = 120: 1 Time(s) key_direction = 0: 1 Time(s) key_method = 2: 1 Time(s) key_pass_file = '[UNDEF]': 1 Time(s) keysize = 0: 1 Time(s) learn_address_script = '[UNDEF]': 1 Time(s) link_mtu = 1500: 1 Time(s) link_mtu_defined = DISABLED: 1 Time(s) lladdr = '[UNDEF]': 1 Time(s) local = '[UNDEF]': 1 Time(s) local_port = 1194: 1 Time(s) log = DISABLED: 1 Time(s) lzo = 7: 1 Time(s) management_addr = '[UNDEF]': 1 Time(s) management_client_group = '[UNDEF]': 1 Time(s) management_client_user = '[UNDEF]': 1 Time(s) management_echo_buffer_size = 100: 1 Time(s) management_flags = 0: 1 Time(s) management_log_history_cache = 250: 1 Time(s) management_port = 0: 1 Time(s) management_user_pass = '[UNDEF]': 1 Time(s) management_write_peer_info_file = '[UNDEF]': 1 Time(s) max_clients = 1024: 1 Time(s) max_routes = 100: 1 Time(s) max_routes_per_client = 256: 1 Time(s) mlock = DISABLED: 1 Time(s) mode = 1: 1 Time(s) mssfix = 1450: 1 Time(s) mtu_discover_type = -1: 1 Time(s) mtu_test = 0: 1 Time(s) mute = 0: 1 Time(s) mute_replay_warnings = DISABLED: 1 Time(s) n_bcast_buf = 256: 1 Time(s) nice = 0: 1 Time(s) ns_cert_type = 0: 1 Time(s) occ = ENABLED: 1 Time(s) packet_id_file = '[UNDEF]': 1 Time(s) passtos = DISABLED: 1 Time(s) persist_config = DISABLED: 1 Time(s) persist_key = ENABLED: 1 Time(s) persist_local_ip = DISABLED: 1 Time(s) persist_mode = 1: 1 Time(s) persist_remote_ip = DISABLED: 1 Time(s) persist_tun = ENABLED: 1 Time(s) ping_rec_timeout = 240: 1 Time(s) ping_rec_timeout_action = 2: 1 Time(s) ping_send_timeout = 10: 1 Time(s) ping_timer_remote = DISABLED: 1 Time(s) pkcs11_cert_private = DISABLED: 7 Time(s) pkcs11_id = '[UNDEF]': 1 Time(s) pkcs11_id_management = DISABLED: 1 Time(s) pkcs11_pin_cache_period = -1: 1 Time(s) pkcs11_private_mode = 00000000: 14 Time(s) pkcs11_protected_authentication = DISABLED: 13 Time(s) pkcs12_file = '[UNDEF]': 1 Time(s) port_share_host = '[UNDEF]': 1 Time(s) port_share_port = 0: 1 Time(s) priv_key_file = 'keys/berlin.key': 1 Time(s) prng_hash = 'SHA1': 1 Time(s) prng_nonce_secret_len = 16: 1 Time(s) proto = tcp-server: 1 Time(s) pull = DISABLED: 1 Time(s) push_entry = 'ping 10': 1 Time(s) push_entry = 'ping-restart 120': 1 Time(s) push_entry = 'route 140.221.76.7 255.255.255.255': 1 Time(s) push_entry = 'route 140.221.8.60 255.255.255.255': 1 Time(s) push_entry = 'route 172.16.100.0 255.255.254.0': 1 Time(s) push_entry = 'topology p2p': 1 Time(s) push_ifconfig_defined = DISABLED: 1 Time(s) push_ifconfig_local = 0.0.0.0: 1 Time(s) push_ifconfig_remote_netmask = 0.0.0.0: 1 Time(s) push_peer_info = DISABLED: 1 Time(s) rcvbuf = 65536: 1 Time(s) real_hash_size = 256: 1 Time(s) remap_sigusr1 = 0: 1 Time(s) remote = '[UNDEF]': 1 Time(s) remote_cert_eku = '[UNDEF]': 1 Time(s) remote_cert_ku[i] = 0: 13 Time(s) remote_float = DISABLED: 1 Time(s) remote_port = 1194: 1 Time(s) remote_random = DISABLED: 1 Time(s) renegotiate_bytes = 0: 1 Time(s) renegotiate_packets = 0: 1 Time(s) renegotiate_seconds = 3600: 1 Time(s) replay = ENABLED: 1 Time(s) replay_time = 15: 1 Time(s) replay_window = 64: 1 Time(s) resolve_retry_seconds = 1000000000: 1 Time(s) route 172.16.100.0/255.255.254.0/nil/nil: 1 Time(s) route_default_gateway = '[UNDEF]': 1 Time(s) route_default_metric = 0: 1 Time(s) route_delay = 0: 1 Time(s) route_delay_defined = DISABLED: 1 Time(s) route_delay_window = 30: 1 Time(s) route_gateway_via_dhcp = DISABLED: 1 Time(s) route_noexec = DISABLED: 1 Time(s) route_nopull = DISABLED: 1 Time(s) route_script = '[UNDEF]': 1 Time(s) selinux_context = '[UNDEF]': 1 Time(s) server_bridge_ip = 0.0.0.0: 1 Time(s) server_bridge_netmask = 0.0.0.0: 1 Time(s) server_bridge_pool_end = 0.0.0.0: 1 Time(s) server_bridge_pool_start = 0.0.0.0: 1 Time(s) server_netmask = 255.255.254.0: 1 Time(s) server_network = 172.16.100.0: 1 Time(s) shaper = 0: 1 Time(s) shared_secret_file = '[UNDEF]': 1 Time(s) show_ciphers = DISABLED: 1 Time(s) show_digests = DISABLED: 1 Time(s) show_engines = DISABLED: 1 Time(s) show_tls_ciphers = DISABLED: 1 Time(s) single_session = DISABLED: 1 Time(s) sndbuf = 65536: 1 Time(s) sockflags = 0: 1 Time(s) socks_proxy_port = 0: 1 Time(s) socks_proxy_retry = DISABLED: 1 Time(s) socks_proxy_server = '[UNDEF]': 1 Time(s) ssl_flags = 0: 1 Time(s) status_file = '/var/log/openvpn-status.log': 1 Time(s) status_file_update_freq = 60: 1 Time(s) status_file_version = 1: 1 Time(s) suppress_timestamps = DISABLED: 1 Time(s) tcp_queue_limit = 64: 1 Time(s) test_crypto = DISABLED: 1 Time(s) tls_auth_file = '[UNDEF]': 1 Time(s) tls_client = DISABLED: 1 Time(s) tls_exit = DISABLED: 1 Time(s) tls_remote = '[UNDEF]': 1 Time(s) tls_server = ENABLED: 1 Time(s) tls_timeout = 2: 1 Time(s) tls_verify = '[UNDEF]': 1 Time(s) tmp_dir = '[UNDEF]': 1 Time(s) topology = 2: 1 Time(s) transition_window = 3600: 1 Time(s) tun_ipv6 = DISABLED: 1 Time(s) tun_mtu = 1500: 1 Time(s) tun_mtu_defined = ENABLED: 1 Time(s) tun_mtu_extra = 0: 1 Time(s) tun_mtu_extra_defined = DISABLED: 1 Time(s) up_delay = DISABLED: 1 Time(s) up_restart = DISABLED: 1 Time(s) up_script = '[UNDEF]': 1 Time(s) use_iv = ENABLED: 1 Time(s) username = 'nobody': 1 Time(s) verbosity = 5: 1 Time(s) virtual_hash_size = 256: 1 Time(s) writepid = '/var/run/openvpn/openvpn.pid': 1 Time(s) Connection profiles END: 1 Time(s) Connection profiles [default]:: 1 Time(s) Current Parameter Settings:: 1 Time(s) ERROR: Linux route delete command failed: external program exited with error status: 2: 1 Time(s) Linux ip addr del failed: external program exited with error status: 2: 1 Time(s) Listening for incoming TCP connection on [undef]:1194: 1 Time(s) MULTI: TCP INIT maxclients=1024 maxevents=1028: 1 Time(s) NOTE: the current --script-security setting may allow this configuration to call user-defined scripts: 1 Time(s) ROUTE default_gateway=140.221.76.1: 1 Time(s) SIGTERM[hard,] received, process exiting: 1 Time(s) Socket Buffers: R=[87380->131072] S=[16384->131072]: 1 Time(s) TCPv4_SERVER link local (bound): [undef]:1194: 1 Time(s) TCPv4_SERVER link remote: [undef]: 1 Time(s) TUN/TAP TX queue length set to 100: 1 Time(s) WARNING: --ifconfig-pool-persist will not work with --duplicate-cn: 1 Time(s) ---------------------- OpenVPN End ------------------------- --------------------- pam_unix Begin ------------------------ runuser: Unknown Entries: session closed for user root: 1 Time(s) session opened for user root by (uid=0): 1 Time(s) sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 4 Time(s) dolson (mcswl012.mcs.anl.gov) 1 Time(s) dolson (namby.mcs.anl.gov) 1 Time(s) Invalid Users: Unknown Account: 4 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 6 Time(s) session opened for user mgrastprod by tharriso(uid=0): 6 Time(s) session closed for user jared: 1 Time(s) session opened for user jared by root(uid=0): 1 Time(s) sudo: Authentication Failures: jared(0) -> jared: 7 Time(s) dsouza(0) -> dsouza: 3 Time(s) tharriso(0) -> tharriso: 3 Time(s) jbischof(0) -> jbischof: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 350086 bytes transferred 721 messages sent 721 messages removed from queue ---------------------- postfix End ------------------------- --------------------- Smartd Begin ------------------------ **Unmatched Entries** Problem creating device name scan list Device /dev/sda: using '-d sat' for ATA disk behind SAT layer. Device /dev/sdb: using '-d sat' for ATA disk behind SAT layer. ---------------------- Smartd End ------------------------- --------------------- SSHD Begin ------------------------ SSHD Killed: 1 Time(s) SSHD Started: 2 Time(s) Failed logins from: 130.202.135.12 (mcswl012.mcs.anl.gov) 1 time Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 4 times Users logging in through sshd: dolson: 140.221.9.203 (namby.mcs.anl.gov) 1 time dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 2 times 130.202.232.249 (anlvpn249.mcs.anl.gov) 1 time jared: 140.221.11.239 (jaredwilkening.mcs.anl.gov) 3 times jbischof: 130.202.135.144 (mcswl144.mcs.anl.gov) 8 times root: 192.5.200.126 (warehouse13.mcs.anl.gov) 1 time tharriso: 130.202.135.159 (mcswl159.mcs.anl.gov) 3 times Received disconnect: 11: disconnected by user : 11 Time(s) **Unmatched Entries** Rhosts authentication refused for dolson: no home directory /homes/dolson : 2 time(s) pam_krb5[9333]: TGT verified : 1 time(s) pam_krb5[9175]: error reading keytab 'FILE:/etc/krb5.keytab' : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s) pam_krb5[9175]: TGT verified : 1 time(s) fatal: Access denied for user dolson by PAM account configuration : 1 time(s) pam_krb5[9333]: error reading keytab 'FILE:/etc/krb5.keytab' : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s) pam_access(sshd:account): access denied for user `dolson' from `mcswl012.mcs.anl.gov' : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh dsouza => root ------------------------------------------------------------------------------ /bin/bash /bin/bash ============================================================================== jared => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh /bin/zsh ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- XNTPD Begin ------------------------ XNTPD Killed: 1 Time(s) XNTPD Started: 1 Time(s) Time Reset 1 times (total: -0.495888 s average: -0.495888 s) Total interfaces 7 (non-local: 3) Total synchronizations 2 (hosts: 1) ---------------------- XNTPD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 8.1G 5.5G 60% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 06 Sep '12

06 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Thu Sep 6 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-05 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Automount Begin ------------------------ **Unmatched Entries** key "pro" not found in map source(s).: 2 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /KjEsGjD5Kthp.asp: 1 Time(s) /KjEsGjD5Kthp.cfm: 1 Time(s) /KjEsGjD5Kthp.cgi: 1 Time(s) /KjEsGjD5Kthp.html: 1 Time(s) /KjEsGjD5Kthp.inc: 1 Time(s) /KjEsGjD5Kthp.php: 1 Time(s) /KjEsGjD5Kthp.php3: 1 Time(s) /KjEsGjD5Kthp.pl: 1 Time(s) /KjEsGjD5Kthp.sh: 1 Time(s) /KjEsGjD5Kthp.shtml: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.asp: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.cfm: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.cgi: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.html: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.inc: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.php: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.php3: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.pl: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.sh: 1 Time(s) /cgi-bin/KjEsGjD5Kthp.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/KjEsGjD5Kthp.asp: 1 Time(s) /scripts/KjEsGjD5Kthp.cfm: 1 Time(s) /scripts/KjEsGjD5Kthp.cgi: 1 Time(s) /scripts/KjEsGjD5Kthp.html: 1 Time(s) /scripts/KjEsGjD5Kthp.inc: 1 Time(s) /scripts/KjEsGjD5Kthp.php: 1 Time(s) /scripts/KjEsGjD5Kthp.php3: 1 Time(s) /scripts/KjEsGjD5Kthp.pl: 1 Time(s) /scripts/KjEsGjD5Kthp.sh: 1 Time(s) /scripts/KjEsGjD5Kthp.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 1 Time(s) session opened for user mgrastprod by tharriso(uid=0): 1 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 3 Time(s) tharriso(0) -> tharriso: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 6077 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time 140.221.76.12 (anzio-2.mcs.anl.gov) 1 time jbischof: 130.202.135.164 (mcswl164.mcs.anl.gov) 3 times tharriso: 192.5.200.107 (dpse.igsb.anl.gov) 1 time Received disconnect: 11: disconnected by user : 3 Time(s) **Unmatched Entries** fatal: Access denied for user trimble by PAM account configuration : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_access(sshd:account): access denied for user `trimble' from `dpse.igsb.anl.gov' : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh /bin/zsh dsouza => root ------------------------------------------------------------------------------ /bin/bash ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.7G 5.8G 57% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

dionlab subscription notification
by mailman＠lists.igsb.anl.gov 05 Sep '12

05 Sep '12

Subscribed: jkoval(a)anl.gov

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 05 Sep '12

05 Sep '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Wed Sep 5 04:02:02 2012 Date Range Processed: yesterday ( 2012-Sep-04 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Automount Begin ------------------------ **Unmatched Entries** key "pro" not found in map source(s).: 3 Time(s) key ".hg" not found in map source(s).: 12 Time(s) key ".bzr" not found in map source(s).: 12 Time(s) key "_MTN" not found in map source(s).: 12 Time(s) key "prob" not found in map source(s).: 1 Time(s) key "pip" not found in map source(s).: 1 Time(s) key ".git" not found in map source(s).: 12 Time(s) key "{arch}" not found in map source(s).: 12 Time(s) ---------------------- Automount End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /AxcINdlzohPa.asp: 1 Time(s) /AxcINdlzohPa.cfm: 1 Time(s) /AxcINdlzohPa.cgi: 1 Time(s) /AxcINdlzohPa.html: 1 Time(s) /AxcINdlzohPa.inc: 1 Time(s) /AxcINdlzohPa.php: 1 Time(s) /AxcINdlzohPa.php3: 1 Time(s) /AxcINdlzohPa.pl: 1 Time(s) /AxcINdlzohPa.sh: 1 Time(s) /AxcINdlzohPa.shtml: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/AxcINdlzohPa.asp: 1 Time(s) /cgi-bin/AxcINdlzohPa.cfm: 1 Time(s) /cgi-bin/AxcINdlzohPa.cgi: 1 Time(s) /cgi-bin/AxcINdlzohPa.html: 1 Time(s) /cgi-bin/AxcINdlzohPa.inc: 1 Time(s) /cgi-bin/AxcINdlzohPa.php: 1 Time(s) /cgi-bin/AxcINdlzohPa.php3: 1 Time(s) /cgi-bin/AxcINdlzohPa.pl: 1 Time(s) /cgi-bin/AxcINdlzohPa.sh: 1 Time(s) /cgi-bin/AxcINdlzohPa.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/AxcINdlzohPa.asp: 1 Time(s) /scripts/AxcINdlzohPa.cfm: 1 Time(s) /scripts/AxcINdlzohPa.cgi: 1 Time(s) /scripts/AxcINdlzohPa.html: 1 Time(s) /scripts/AxcINdlzohPa.inc: 1 Time(s) /scripts/AxcINdlzohPa.php: 1 Time(s) /scripts/AxcINdlzohPa.php3: 1 Time(s) /scripts/AxcINdlzohPa.pl: 1 Time(s) /scripts/AxcINdlzohPa.sh: 1 Time(s) /scripts/AxcINdlzohPa.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) su-l: Unknown Entries: session closed for user mgrastprod: 3 Time(s) session opened for user mgrastprod by tharriso(uid=0): 3 Time(s) sudo: Authentication Failures: jbischof(0) -> jbischof: 2 Time(s) tharriso(0) -> tharriso: 1 Time(s) Unknown Entries: auth could not identify password for [jbischof]: 1 Time(s) conversation failed: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4273 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Users logging in through sshd: jbischof: 130.202.135.164 (mcswl164.mcs.anl.gov) 1 time tharriso: 130.202.135.172 (mcswl172.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 1 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== jbischof => root ------------------------------------------------------------------------------ /bin/zsh /bin/zsh ============================================================================== tharriso => root ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 5.9G 57% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0