[sysadmins] Logwatch for berlin.mcs.anl.gov (Linux)

13 Sep 2013

      ################### Logwatch 7.3 (03/24/06) #################### 
        Processing Initiated: Fri Sep 13 04:02:03 2013
        Date Range Processed: yesterday
                              ( 2013-Sep-12 )
                              Period is day.
      Detail Level of Output: 0
              Type of Output: unformatted
           Logfiles for Host: berlin.mcs.anl.gov
  ################################################################## 

 --------------------- Selinux Audit Begin ------------------------ 

 **Unmatched Entries** 
  Audit daemon has no space left on logging partition
  Audit daemon is suspending logging due to no space left on logging partition.

 ---------------------- Selinux Audit End ------------------------- 

 --------------------- httpd Begin ------------------------ 

 Requests with error response codes
    404 Not Found
       /.cobalt: 1 Time(s)
       /ControlManager/default.htm: 1 Time(s)
       /I_eFhfmBhClx.asp: 1 Time(s)
       /I_eFhfmBhClx.cfm: 1 Time(s)
       /I_eFhfmBhClx.cgi: 1 Time(s)
       /I_eFhfmBhClx.html: 1 Time(s)
       /I_eFhfmBhClx.inc: 1 Time(s)
       /I_eFhfmBhClx.php: 1 Time(s)
       /I_eFhfmBhClx.php3: 1 Time(s)
       /I_eFhfmBhClx.pl: 1 Time(s)
       /I_eFhfmBhClx.sh: 1 Time(s)
       /I_eFhfmBhClx.shtml: 1 Time(s)
       /MSWSMTP/Common/Authentication/Logon.aspx: 1 Time(s)
       /admin.back: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.asp: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.cfm: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.cgi: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.html: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.inc: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.php: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.php3: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.pl: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.sh: 1 Time(s)
       /cgi-bin/I_eFhfmBhClx.shtml: 1 Time(s)
       /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 1 Time(s)
       /favicon.ico: 1 Time(s)
       /file: 1 Time(s)
       /intruvert/jsp/admin/Login.jsp: 1 Time(s)
       /robots.txt: 1 Time(s)
       /scripts/I_eFhfmBhClx.asp: 1 Time(s)
       /scripts/I_eFhfmBhClx.cfm: 1 Time(s)
       /scripts/I_eFhfmBhClx.cgi: 1 Time(s)
       /scripts/I_eFhfmBhClx.html: 1 Time(s)
       /scripts/I_eFhfmBhClx.inc: 1 Time(s)
       /scripts/I_eFhfmBhClx.php: 1 Time(s)
       /scripts/I_eFhfmBhClx.php3: 1 Time(s)
       /scripts/I_eFhfmBhClx.pl: 1 Time(s)
       /scripts/I_eFhfmBhClx.sh: 1 Time(s)
       /scripts/I_eFhfmBhClx.shtml: 1 Time(s)
       /sdk: 1 Time(s)
       /sitemap.xml: 1 Time(s)
       /wavemaster.internal: 1 Time(s)
       /xmldata?item=All: 1 Time(s)
    501 Not Implemented
       /: 1 Time(s)

 ---------------------- httpd End ------------------------- 

 --------------------- pam_unix Begin ------------------------ 

 sshd:
    Authentication Failures:
       unknown (anlscan8.cspo.anl.gov): 2 Time(s)
    Invalid Users:
       Unknown Account: 2 Time(s)

 sudo:
    Authentication Failures:
       dsouza(0) -> dsouza: 2 Time(s)
       jbischof(0) -> jbischof: 2 Time(s)

 ---------------------- pam_unix End ------------------------- 

 --------------------- postfix Begin ------------------------ 

 1173796 bytes transferred
 1979 messages sent
 1979 messages removed from queue 
 ---------------------- postfix End ------------------------- 

 --------------------- SSHD Begin ------------------------ 

 Illegal users from:
    146.137.70.8 (anlscan8.cspo.anl.gov): 2 times

 Users logging in through sshd:
    dsouza:
       140.221.10.82 (dsouza.mcs.anl.gov): 2 times
    jbischof:
       140.221.11.19 (jbischof.mcs.anl.gov): 2 times

 Received disconnect:
    11: disconnected by user : 2 Time(s)

 **Unmatched Entries**
 pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 1 time(s)
 pam_succeed_if(sshd:auth): error retrieving information about user cisco : 1 time(s)

 ---------------------- SSHD End ------------------------- 

 --------------------- Sudo (secure-log) Begin ------------------------ 

 ==============================================================================
 dsouza => root
 ------------------------------------------------------------------------------
 /bin/bash
 /bin/bash
 ==============================================================================
 jbischof => root
 ------------------------------------------------------------------------------
 /bin/zsh
 /bin/zsh -c ssh root\@dunkirk\.mcs\.anl\.gov \
     \/homes\/jbischof\/MCP\/bin\/edit_nginx_config \
     \/etc\/nginx\/conf\.d\/metagenomics\.conf \
     \/etc\/nginx\/conf\.d\/metagenomics\.down
 /bin/zsh -c ssh root\@dunkirk\.mcs\.anl\.gov \
     \/homes\/jbischof\/MCP\/bin\/edit_nginx_config \
     \/etc\/nginx\/conf\.d\/api\.metagenomics\.conf \
     \/etc\/nginx\/conf\.d\/api\.metagenomics\.down
 /bin/zsh
 /bin/zsh -c ssh root\@dunkirk\.mcs\.anl\.gov \
     \/homes\/jbischof\/MCP\/bin\/edit_nginx_config \
     \/etc\/nginx\/conf\.d\/metagenomics\.conf \
     \/etc\/nginx\/conf\.d\/metagenomics\.up
 /bin/zsh -c ssh root\@dunkirk\.mcs\.anl\.gov \
     \/homes\/jbischof\/MCP\/bin\/edit_nginx_config \
     \/etc\/nginx\/conf\.d\/api\.metagenomics\.conf \
     \/etc\/nginx\/conf\.d\/api\.metagenomics\.up

 ---------------------- Sudo (secure-log) End ------------------------- 

 --------------------- Disk Space Begin ------------------------ 

 Filesystem            Size  Used Avail Use% Mounted on
 /dev/mapper/Vol0-LV00
                        15G   12G  2.0G  86% /
 /dev/md0               99M   39M   55M  42% /boot
 /dev/mapper/Vol0-local
                       1.8T  141G  1.7T   8% /local

 ---------------------- Disk Space End ------------------------- 

 ###################### Logwatch End #########################

[sysadmins] Logwatch for berlin.mcs.anl.gov (Linux)

logwatch＠mcs.anl.gov