- Sysadmins - mailman3.cels.anl.gov

test for hold
by root＠berlin.mcs.anl.gov 21 Aug '12

21 Aug '12

come in major tom, come in

1 0

Your new mailing list: jacklab
by mailman-owner＠lists.igsb.anl.gov 21 Aug '12

21 Aug '12

The mailing list `jacklab' has just been created for you. The following is some basic information about your mailing list. Your mailing list password is: ekgeheziip You need this password to configure your mailing list. You also need it to handle administrative requests, such as approving mail if you choose to run a moderated list. You can configure your mailing list at the following web page: https://lists.igsb.anl.gov/mailman/admin/jacklab The web page for users of your mailing list is: https://lists.igsb.anl.gov/mailman/listinfo/jacklab You can even customize these web pages from the list configuration page. However, you do need to know HTML to be able to do this. There is also an email-based interface for users (not administrators) of your list; you can get info about using it by sending a message with just the word `help' as subject or in the body, to: jacklab-request(a)lists.igsb.anl.gov To unsubscribe a user: from the mailing list 'listinfo' web page, click on or enter the user's email address as if you were that user. Where that user would put in their password to unsubscribe, put in your admin password. You can also use your password to change member's options, including digestification, delivery disabling, etc. Please address all questions to mailman-owner(a)lists.igsb.anl.gov.

1 0

Your new mailing list: dionlab
by mailman-owner＠lists.igsb.anl.gov 21 Aug '12

21 Aug '12

The mailing list `dionlab' has just been created for you. The following is some basic information about your mailing list. Your mailing list password is: kaumasdoux You need this password to configure your mailing list. You also need it to handle administrative requests, such as approving mail if you choose to run a moderated list. You can configure your mailing list at the following web page: https://lists.igsb.anl.gov/mailman/admin/dionlab The web page for users of your mailing list is: https://lists.igsb.anl.gov/mailman/listinfo/dionlab You can even customize these web pages from the list configuration page. However, you do need to know HTML to be able to do this. There is also an email-based interface for users (not administrators) of your list; you can get info about using it by sending a message with just the word `help' as subject or in the body, to: dionlab-request(a)lists.igsb.anl.gov To unsubscribe a user: from the mailing list 'listinfo' web page, click on or enter the user's email address as if you were that user. Where that user would put in their password to unsubscribe, put in your admin password. You can also use your password to change member's options, including digestification, delivery disabling, etc. Please address all questions to mailman-owner(a)lists.igsb.anl.gov.

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 21 Aug '12

21 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Tue Aug 21 04:02:02 2012 Date Range Processed: yesterday ( 2012-Aug-20 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 2 Time(s) /ControlManager/default.htm: 2 Time(s) /CtVxlXIDsBme.asp: 1 Time(s) /CtVxlXIDsBme.cfm: 1 Time(s) /CtVxlXIDsBme.cgi: 1 Time(s) /CtVxlXIDsBme.html: 1 Time(s) /CtVxlXIDsBme.inc: 1 Time(s) /CtVxlXIDsBme.php: 1 Time(s) /CtVxlXIDsBme.php3: 1 Time(s) /CtVxlXIDsBme.pl: 1 Time(s) /CtVxlXIDsBme.sh: 1 Time(s) /CtVxlXIDsBme.shtml: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s) /admin.back: 2 Time(s) /cgi-bin/CtVxlXIDsBme.asp: 1 Time(s) /cgi-bin/CtVxlXIDsBme.cfm: 1 Time(s) /cgi-bin/CtVxlXIDsBme.cgi: 1 Time(s) /cgi-bin/CtVxlXIDsBme.html: 1 Time(s) /cgi-bin/CtVxlXIDsBme.inc: 1 Time(s) /cgi-bin/CtVxlXIDsBme.php: 1 Time(s) /cgi-bin/CtVxlXIDsBme.php3: 1 Time(s) /cgi-bin/CtVxlXIDsBme.pl: 1 Time(s) /cgi-bin/CtVxlXIDsBme.sh: 1 Time(s) /cgi-bin/CtVxlXIDsBme.shtml: 1 Time(s) /cgi-bin/s5zapf4YhKfX.asp: 1 Time(s) /cgi-bin/s5zapf4YhKfX.cfm: 1 Time(s) /cgi-bin/s5zapf4YhKfX.cgi: 1 Time(s) /cgi-bin/s5zapf4YhKfX.html: 1 Time(s) /cgi-bin/s5zapf4YhKfX.inc: 1 Time(s) /cgi-bin/s5zapf4YhKfX.php: 1 Time(s) /cgi-bin/s5zapf4YhKfX.php3: 1 Time(s) /cgi-bin/s5zapf4YhKfX.pl: 1 Time(s) /cgi-bin/s5zapf4YhKfX.sh: 1 Time(s) /cgi-bin/s5zapf4YhKfX.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s) /file: 2 Time(s) /intruvert/jsp/admin/Login.jsp: 2 Time(s) /login.htm: 2 Time(s) /robots.txt: 2 Time(s) /s5zapf4YhKfX.asp: 1 Time(s) /s5zapf4YhKfX.cfm: 1 Time(s) /s5zapf4YhKfX.cgi: 1 Time(s) /s5zapf4YhKfX.html: 1 Time(s) /s5zapf4YhKfX.inc: 1 Time(s) /s5zapf4YhKfX.php: 1 Time(s) /s5zapf4YhKfX.php3: 1 Time(s) /s5zapf4YhKfX.pl: 1 Time(s) /s5zapf4YhKfX.sh: 1 Time(s) /s5zapf4YhKfX.shtml: 1 Time(s) /scripts/CtVxlXIDsBme.asp: 1 Time(s) /scripts/CtVxlXIDsBme.cfm: 1 Time(s) /scripts/CtVxlXIDsBme.cgi: 1 Time(s) /scripts/CtVxlXIDsBme.html: 1 Time(s) /scripts/CtVxlXIDsBme.inc: 1 Time(s) /scripts/CtVxlXIDsBme.php: 1 Time(s) /scripts/CtVxlXIDsBme.php3: 1 Time(s) /scripts/CtVxlXIDsBme.pl: 1 Time(s) /scripts/CtVxlXIDsBme.sh: 1 Time(s) /scripts/CtVxlXIDsBme.shtml: 1 Time(s) /scripts/s5zapf4YhKfX.asp: 1 Time(s) /scripts/s5zapf4YhKfX.cfm: 1 Time(s) /scripts/s5zapf4YhKfX.cgi: 1 Time(s) /scripts/s5zapf4YhKfX.html: 1 Time(s) /scripts/s5zapf4YhKfX.inc: 1 Time(s) /scripts/s5zapf4YhKfX.php: 1 Time(s) /scripts/s5zapf4YhKfX.php3: 1 Time(s) /scripts/s5zapf4YhKfX.pl: 1 Time(s) /scripts/s5zapf4YhKfX.sh: 1 Time(s) /scripts/s5zapf4YhKfX.shtml: 1 Time(s) /sdk: 2 Time(s) /sitemap.xml: 2 Time(s) /wavemaster.internal: 2 Time(s) 501 Not Implemented /: 2 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 4 Time(s) Invalid Users: Unknown Account: 4 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 19171 bytes transferred 27 messages sent 27 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 4 times Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 2 times jared: 140.221.11.239 (jaredwilkening.mcs.anl.gov) 1 time jbischof: 192.5.200.107 (dpse.igsb.anl.gov) 3 times 130.202.135.156 (mcswl156.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 3 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 20 Aug '12

20 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Mon Aug 20 04:02:01 2012 Date Range Processed: yesterday ( 2012-Aug-19 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /73kB0m88abrs.asp: 1 Time(s) /73kB0m88abrs.cfm: 1 Time(s) /73kB0m88abrs.cgi: 1 Time(s) /73kB0m88abrs.html: 1 Time(s) /73kB0m88abrs.inc: 1 Time(s) /73kB0m88abrs.php: 1 Time(s) /73kB0m88abrs.php3: 1 Time(s) /73kB0m88abrs.pl: 1 Time(s) /73kB0m88abrs.sh: 1 Time(s) /73kB0m88abrs.shtml: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/73kB0m88abrs.asp: 1 Time(s) /cgi-bin/73kB0m88abrs.cfm: 1 Time(s) /cgi-bin/73kB0m88abrs.cgi: 1 Time(s) /cgi-bin/73kB0m88abrs.html: 1 Time(s) /cgi-bin/73kB0m88abrs.inc: 1 Time(s) /cgi-bin/73kB0m88abrs.php: 1 Time(s) /cgi-bin/73kB0m88abrs.php3: 1 Time(s) /cgi-bin/73kB0m88abrs.pl: 1 Time(s) /cgi-bin/73kB0m88abrs.sh: 1 Time(s) /cgi-bin/73kB0m88abrs.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /robots.txt: 1 Time(s) /scripts/73kB0m88abrs.asp: 1 Time(s) /scripts/73kB0m88abrs.cfm: 1 Time(s) /scripts/73kB0m88abrs.cgi: 1 Time(s) /scripts/73kB0m88abrs.html: 1 Time(s) /scripts/73kB0m88abrs.inc: 1 Time(s) /scripts/73kB0m88abrs.php: 1 Time(s) /scripts/73kB0m88abrs.php3: 1 Time(s) /scripts/73kB0m88abrs.pl: 1 Time(s) /scripts/73kB0m88abrs.sh: 1 Time(s) /scripts/73kB0m88abrs.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 4529 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.5G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 19 Aug '12

19 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sun Aug 19 04:02:01 2012 Date Range Processed: yesterday ( 2012-Aug-18 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/ojKwdJN5omkL.asp: 1 Time(s) /cgi-bin/ojKwdJN5omkL.cfm: 1 Time(s) /cgi-bin/ojKwdJN5omkL.cgi: 1 Time(s) /cgi-bin/ojKwdJN5omkL.html: 1 Time(s) /cgi-bin/ojKwdJN5omkL.inc: 1 Time(s) /cgi-bin/ojKwdJN5omkL.php: 1 Time(s) /cgi-bin/ojKwdJN5omkL.php3: 1 Time(s) /cgi-bin/ojKwdJN5omkL.pl: 1 Time(s) /cgi-bin/ojKwdJN5omkL.sh: 1 Time(s) /cgi-bin/ojKwdJN5omkL.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /ojKwdJN5omkL.asp: 1 Time(s) /ojKwdJN5omkL.cfm: 1 Time(s) /ojKwdJN5omkL.cgi: 1 Time(s) /ojKwdJN5omkL.html: 1 Time(s) /ojKwdJN5omkL.inc: 1 Time(s) /ojKwdJN5omkL.php: 1 Time(s) /ojKwdJN5omkL.php3: 1 Time(s) /ojKwdJN5omkL.pl: 1 Time(s) /ojKwdJN5omkL.sh: 1 Time(s) /ojKwdJN5omkL.shtml: 1 Time(s) /robots.txt: 1 Time(s) /scripts/ojKwdJN5omkL.asp: 1 Time(s) /scripts/ojKwdJN5omkL.cfm: 1 Time(s) /scripts/ojKwdJN5omkL.cgi: 1 Time(s) /scripts/ojKwdJN5omkL.html: 1 Time(s) /scripts/ojKwdJN5omkL.inc: 1 Time(s) /scripts/ojKwdJN5omkL.php: 1 Time(s) /scripts/ojKwdJN5omkL.php3: 1 Time(s) /scripts/ojKwdJN5omkL.pl: 1 Time(s) /scripts/ojKwdJN5omkL.sh: 1 Time(s) /scripts/ojKwdJN5omkL.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 5011 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Postponed authentication: jared/publickey: 140.221.9.205: 1 Time(s) Users logging in through sshd: jared: 140.221.9.205 (login3.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 1 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 18 Aug '12

18 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Sat Aug 18 04:02:01 2012 Date Range Processed: yesterday ( 2012-Aug-17 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 1 Time(s) /ControlManager/default.htm: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s) /admin.back: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.asp: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.cfm: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.cgi: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.html: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.inc: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.php: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.php3: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.pl: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.sh: 1 Time(s) /cgi-bin/rFHrVNhWjdjj.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s) /file: 1 Time(s) /intruvert/jsp/admin/Login.jsp: 1 Time(s) /login.htm: 1 Time(s) /rFHrVNhWjdjj.asp: 1 Time(s) /rFHrVNhWjdjj.cfm: 1 Time(s) /rFHrVNhWjdjj.cgi: 1 Time(s) /rFHrVNhWjdjj.html: 1 Time(s) /rFHrVNhWjdjj.inc: 1 Time(s) /rFHrVNhWjdjj.php: 1 Time(s) /rFHrVNhWjdjj.php3: 1 Time(s) /rFHrVNhWjdjj.pl: 1 Time(s) /rFHrVNhWjdjj.sh: 1 Time(s) /rFHrVNhWjdjj.shtml: 1 Time(s) /robots.txt: 1 Time(s) /scripts/rFHrVNhWjdjj.asp: 1 Time(s) /scripts/rFHrVNhWjdjj.cfm: 1 Time(s) /scripts/rFHrVNhWjdjj.cgi: 1 Time(s) /scripts/rFHrVNhWjdjj.html: 1 Time(s) /scripts/rFHrVNhWjdjj.inc: 1 Time(s) /scripts/rFHrVNhWjdjj.php: 1 Time(s) /scripts/rFHrVNhWjdjj.php3: 1 Time(s) /scripts/rFHrVNhWjdjj.pl: 1 Time(s) /scripts/rFHrVNhWjdjj.sh: 1 Time(s) /scripts/rFHrVNhWjdjj.shtml: 1 Time(s) /sdk: 1 Time(s) /sitemap.xml: 1 Time(s) /wavemaster.internal: 1 Time(s) 501 Not Implemented /: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 2 Time(s) Invalid Users: Unknown Account: 2 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 5875 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 2 times Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time jbischof: 130.202.135.146 (mcswl146.mcs.anl.gov) 2 times 192.5.200.107 (dpse.igsb.anl.gov) 1 time Received disconnect: 11: disconnected by user : 2 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/bash /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 17 Aug '12

17 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Fri Aug 17 04:02:02 2012 Date Range Processed: yesterday ( 2012-Aug-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 2 Time(s) /ControlManager/default.htm: 2 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s) /admin.back: 2 Time(s) /cgi-bin/tjLmdavBLnUY.asp: 1 Time(s) /cgi-bin/tjLmdavBLnUY.cfm: 1 Time(s) /cgi-bin/tjLmdavBLnUY.cgi: 1 Time(s) /cgi-bin/tjLmdavBLnUY.html: 1 Time(s) /cgi-bin/tjLmdavBLnUY.inc: 1 Time(s) /cgi-bin/tjLmdavBLnUY.php: 1 Time(s) /cgi-bin/tjLmdavBLnUY.php3: 1 Time(s) /cgi-bin/tjLmdavBLnUY.pl: 1 Time(s) /cgi-bin/tjLmdavBLnUY.sh: 1 Time(s) /cgi-bin/tjLmdavBLnUY.shtml: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.asp: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.cfm: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.cgi: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.html: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.inc: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.php: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.php3: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.pl: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.sh: 1 Time(s) /cgi-bin/u3xfMDhg9_TE.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s) /file: 2 Time(s) /intruvert/jsp/admin/Login.jsp: 2 Time(s) /login.htm: 2 Time(s) /robots.txt: 2 Time(s) /scripts/tjLmdavBLnUY.asp: 1 Time(s) /scripts/tjLmdavBLnUY.cfm: 1 Time(s) /scripts/tjLmdavBLnUY.cgi: 1 Time(s) /scripts/tjLmdavBLnUY.html: 1 Time(s) /scripts/tjLmdavBLnUY.inc: 1 Time(s) /scripts/tjLmdavBLnUY.php: 1 Time(s) /scripts/tjLmdavBLnUY.php3: 1 Time(s) /scripts/tjLmdavBLnUY.pl: 1 Time(s) /scripts/tjLmdavBLnUY.sh: 1 Time(s) /scripts/tjLmdavBLnUY.shtml: 1 Time(s) /scripts/u3xfMDhg9_TE.asp: 1 Time(s) /scripts/u3xfMDhg9_TE.cfm: 1 Time(s) /scripts/u3xfMDhg9_TE.cgi: 1 Time(s) /scripts/u3xfMDhg9_TE.html: 1 Time(s) /scripts/u3xfMDhg9_TE.inc: 1 Time(s) /scripts/u3xfMDhg9_TE.php: 1 Time(s) /scripts/u3xfMDhg9_TE.php3: 1 Time(s) /scripts/u3xfMDhg9_TE.pl: 1 Time(s) /scripts/u3xfMDhg9_TE.sh: 1 Time(s) /scripts/u3xfMDhg9_TE.shtml: 1 Time(s) /sdk: 2 Time(s) /sitemap.xml: 2 Time(s) /tjLmdavBLnUY.asp: 1 Time(s) /tjLmdavBLnUY.cfm: 1 Time(s) /tjLmdavBLnUY.cgi: 1 Time(s) /tjLmdavBLnUY.html: 1 Time(s) /tjLmdavBLnUY.inc: 1 Time(s) /tjLmdavBLnUY.php: 1 Time(s) /tjLmdavBLnUY.php3: 1 Time(s) /tjLmdavBLnUY.pl: 1 Time(s) /tjLmdavBLnUY.sh: 1 Time(s) /tjLmdavBLnUY.shtml: 1 Time(s) /u3xfMDhg9_TE.asp: 1 Time(s) /u3xfMDhg9_TE.cfm: 1 Time(s) /u3xfMDhg9_TE.cgi: 1 Time(s) /u3xfMDhg9_TE.html: 1 Time(s) /u3xfMDhg9_TE.inc: 1 Time(s) /u3xfMDhg9_TE.php: 1 Time(s) /u3xfMDhg9_TE.php3: 1 Time(s) /u3xfMDhg9_TE.pl: 1 Time(s) /u3xfMDhg9_TE.sh: 1 Time(s) /u3xfMDhg9_TE.shtml: 1 Time(s) /wavemaster.internal: 2 Time(s) 501 Not Implemented /: 2 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 4 Time(s) Invalid Users: Unknown Account: 4 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 7362 bytes transferred 1 messages sent 1 messages removed from queue ---------------------- postfix End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 4 times Postponed authentication: jared/publickey: 140.221.9.206: 1 Time(s) Users logging in through sshd: jared: 140.221.9.206 (login4.mcs.anl.gov) 1 time jbischof: 130.202.135.168 (mcswl168.mcs.anl.gov) 1 time Received disconnect: 11: disconnected by user : 2 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

Logwatch for berlin.mcs.anl.gov (Linux)
by logwatch＠mcs.anl.gov 16 Aug '12

16 Aug '12

################### Logwatch 7.3 (03/24/06) #################### Processing Initiated: Thu Aug 16 04:02:01 2012 Date Range Processed: yesterday ( 2012-Aug-15 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: berlin.mcs.anl.gov ################################################################## --------------------- Cron Begin ------------------------ MAIL sending errors 1 Time(s) ---------------------- Cron End ------------------------- --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /.cobalt: 2 Time(s) /ControlManager/default.htm: 2 Time(s) /FglOquIjrglM.asp: 1 Time(s) /FglOquIjrglM.cfm: 1 Time(s) /FglOquIjrglM.cgi: 1 Time(s) /FglOquIjrglM.html: 1 Time(s) /FglOquIjrglM.inc: 1 Time(s) /FglOquIjrglM.php: 1 Time(s) /FglOquIjrglM.php3: 1 Time(s) /FglOquIjrglM.pl: 1 Time(s) /FglOquIjrglM.sh: 1 Time(s) /FglOquIjrglM.shtml: 1 Time(s) /HPOoYQa7RZHf.asp: 1 Time(s) /HPOoYQa7RZHf.cfm: 1 Time(s) /HPOoYQa7RZHf.cgi: 1 Time(s) /HPOoYQa7RZHf.html: 1 Time(s) /HPOoYQa7RZHf.inc: 1 Time(s) /HPOoYQa7RZHf.php: 1 Time(s) /HPOoYQa7RZHf.php3: 1 Time(s) /HPOoYQa7RZHf.pl: 1 Time(s) /HPOoYQa7RZHf.sh: 1 Time(s) /HPOoYQa7RZHf.shtml: 1 Time(s) /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s) /admin.back: 2 Time(s) /cgi-bin/FglOquIjrglM.asp: 1 Time(s) /cgi-bin/FglOquIjrglM.cfm: 1 Time(s) /cgi-bin/FglOquIjrglM.cgi: 1 Time(s) /cgi-bin/FglOquIjrglM.html: 1 Time(s) /cgi-bin/FglOquIjrglM.inc: 1 Time(s) /cgi-bin/FglOquIjrglM.php: 1 Time(s) /cgi-bin/FglOquIjrglM.php3: 1 Time(s) /cgi-bin/FglOquIjrglM.pl: 1 Time(s) /cgi-bin/FglOquIjrglM.sh: 1 Time(s) /cgi-bin/FglOquIjrglM.shtml: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.asp: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.cfm: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.cgi: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.html: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.inc: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.php: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.php3: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.pl: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.sh: 1 Time(s) /cgi-bin/HPOoYQa7RZHf.shtml: 1 Time(s) /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s) /file: 2 Time(s) /intruvert/jsp/admin/Login.jsp: 2 Time(s) /login.htm: 2 Time(s) /robots.txt: 2 Time(s) /scripts/FglOquIjrglM.asp: 1 Time(s) /scripts/FglOquIjrglM.cfm: 1 Time(s) /scripts/FglOquIjrglM.cgi: 1 Time(s) /scripts/FglOquIjrglM.html: 1 Time(s) /scripts/FglOquIjrglM.inc: 1 Time(s) /scripts/FglOquIjrglM.php: 1 Time(s) /scripts/FglOquIjrglM.php3: 1 Time(s) /scripts/FglOquIjrglM.pl: 1 Time(s) /scripts/FglOquIjrglM.sh: 1 Time(s) /scripts/FglOquIjrglM.shtml: 1 Time(s) /scripts/HPOoYQa7RZHf.asp: 1 Time(s) /scripts/HPOoYQa7RZHf.cfm: 1 Time(s) /scripts/HPOoYQa7RZHf.cgi: 1 Time(s) /scripts/HPOoYQa7RZHf.html: 1 Time(s) /scripts/HPOoYQa7RZHf.inc: 1 Time(s) /scripts/HPOoYQa7RZHf.php: 1 Time(s) /scripts/HPOoYQa7RZHf.php3: 1 Time(s) /scripts/HPOoYQa7RZHf.pl: 1 Time(s) /scripts/HPOoYQa7RZHf.sh: 1 Time(s) /scripts/HPOoYQa7RZHf.shtml: 1 Time(s) /sdk: 2 Time(s) /sitemap.xml: 2 Time(s) /wavemaster.internal: 2 Time(s) 501 Not Implemented /: 2 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (anlscan8.cspo.anl.gov) 4 Time(s) Invalid Users: Unknown Account: 4 Time(s) su-l: Unknown Entries: session closed for user hunter: 1 Time(s) session opened for user hunter by root(uid=0): 1 Time(s) sudo: Authentication Failures: dsouza(0) -> dsouza: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- postfix Begin ------------------------ 354 bytes transferred 1 messages sent 1 messages removed from queue **Unmatched Entries** fatal: usage: postqueue -f | postqueue -p | postqueue -s site ---------------------- postfix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** useradd[19374]: failed adding user `postfix', data deleted useradd[20177]: failed adding user `postfix', data deleted ---------------------- Connections (secure-log) End ------------------------- --------------------- SSHD Begin ------------------------ Illegal users from: 146.137.70.8 (anlscan8.cspo.anl.gov) 4 times Postponed authentication: hunter/publickey: 140.221.8.8: 1 Time(s) Users logging in through sshd: dsouza: 140.221.10.82 (dsouza.mcs.anl.gov) 1 time hunter: 140.221.8.8 (pamby.mcs.anl.gov) 1 time jbischof: 130.202.135.188 (mcswl188.mcs.anl.gov) 1 time root: 192.5.200.126 (warehouse13.mcs.anl.gov) 5 times Received disconnect: 11: disconnected by user : 1 Time(s) **Unmatched Entries** pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s) pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dsouza => mgrastprod ------------------------------------------------------------------------------ /bin/zsh ---------------------- Sudo (secure-log) End ------------------------- --------------------- yum Begin ------------------------ Packages Installed: 2:postfix-2.3.3-2.3.el5_6.x86_64 ---------------------- yum End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/Vol0-LV00 15G 7.6G 6.0G 56% / /dev/md0 99M 39M 55M 42% /boot /dev/mapper/Vol0-local 1.8T 138G 1.7T 8% /local ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

1 0

another test after removing crap
by root＠berlin.mcs.anl.gov 15 Aug '12

15 Aug '12

john is heping yaya

1 0