[sysadmins] Logwatch for berlin.mcs.anl.gov (Linux)

17 Aug 2012


      ################### Logwatch 7.3 (03/24/06) #################### 
        Processing Initiated: Fri Aug 17 04:02:02 2012
        Date Range Processed: yesterday
                              ( 2012-Aug-16 )
                              Period is day.
      Detail Level of Output: 0
              Type of Output: unformatted
           Logfiles for Host: berlin.mcs.anl.gov
  ################################################################## 
 
 --------------------- httpd Begin ------------------------ 

 Requests with error response codes
    404 Not Found
       /.cobalt: 2 Time(s)
       /ControlManager/default.htm: 2 Time(s)
       /MSWSMTP/Common/Authentication/Logon.aspx: 2 Time(s)
       /admin.back: 2 Time(s)
       /cgi-bin/tjLmdavBLnUY.asp: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.cfm: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.cgi: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.html: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.inc: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.php: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.php3: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.pl: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.sh: 1 Time(s)
       /cgi-bin/tjLmdavBLnUY.shtml: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.asp: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.cfm: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.cgi: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.html: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.inc: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.php: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.php3: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.pl: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.sh: 1 Time(s)
       /cgi-bin/u3xfMDhg9_TE.shtml: 1 Time(s)
       /commoncgi/servlet/CCGIServlet?ApHost=PDT_ ... File=logout.htm: 2 Time(s)
       /file: 2 Time(s)
       /intruvert/jsp/admin/Login.jsp: 2 Time(s)
       /login.htm: 2 Time(s)
       /robots.txt: 2 Time(s)
       /scripts/tjLmdavBLnUY.asp: 1 Time(s)
       /scripts/tjLmdavBLnUY.cfm: 1 Time(s)
       /scripts/tjLmdavBLnUY.cgi: 1 Time(s)
       /scripts/tjLmdavBLnUY.html: 1 Time(s)
       /scripts/tjLmdavBLnUY.inc: 1 Time(s)
       /scripts/tjLmdavBLnUY.php: 1 Time(s)
       /scripts/tjLmdavBLnUY.php3: 1 Time(s)
       /scripts/tjLmdavBLnUY.pl: 1 Time(s)
       /scripts/tjLmdavBLnUY.sh: 1 Time(s)
       /scripts/tjLmdavBLnUY.shtml: 1 Time(s)
       /scripts/u3xfMDhg9_TE.asp: 1 Time(s)
       /scripts/u3xfMDhg9_TE.cfm: 1 Time(s)
       /scripts/u3xfMDhg9_TE.cgi: 1 Time(s)
       /scripts/u3xfMDhg9_TE.html: 1 Time(s)
       /scripts/u3xfMDhg9_TE.inc: 1 Time(s)
       /scripts/u3xfMDhg9_TE.php: 1 Time(s)
       /scripts/u3xfMDhg9_TE.php3: 1 Time(s)
       /scripts/u3xfMDhg9_TE.pl: 1 Time(s)
       /scripts/u3xfMDhg9_TE.sh: 1 Time(s)
       /scripts/u3xfMDhg9_TE.shtml: 1 Time(s)
       /sdk: 2 Time(s)
       /sitemap.xml: 2 Time(s)
       /tjLmdavBLnUY.asp: 1 Time(s)
       /tjLmdavBLnUY.cfm: 1 Time(s)
       /tjLmdavBLnUY.cgi: 1 Time(s)
       /tjLmdavBLnUY.html: 1 Time(s)
       /tjLmdavBLnUY.inc: 1 Time(s)
       /tjLmdavBLnUY.php: 1 Time(s)
       /tjLmdavBLnUY.php3: 1 Time(s)
       /tjLmdavBLnUY.pl: 1 Time(s)
       /tjLmdavBLnUY.sh: 1 Time(s)
       /tjLmdavBLnUY.shtml: 1 Time(s)
       /u3xfMDhg9_TE.asp: 1 Time(s)
       /u3xfMDhg9_TE.cfm: 1 Time(s)
       /u3xfMDhg9_TE.cgi: 1 Time(s)
       /u3xfMDhg9_TE.html: 1 Time(s)
       /u3xfMDhg9_TE.inc: 1 Time(s)
       /u3xfMDhg9_TE.php: 1 Time(s)
       /u3xfMDhg9_TE.php3: 1 Time(s)
       /u3xfMDhg9_TE.pl: 1 Time(s)
       /u3xfMDhg9_TE.sh: 1 Time(s)
       /u3xfMDhg9_TE.shtml: 1 Time(s)
       /wavemaster.internal: 2 Time(s)
    501 Not Implemented
       /: 2 Time(s)
 
 ---------------------- httpd End ------------------------- 

 
 --------------------- pam_unix Begin ------------------------ 

 sshd:
    Authentication Failures:
       unknown (anlscan8.cspo.anl.gov): 4 Time(s)
    Invalid Users:
       Unknown Account: 4 Time(s)
 
 
 ---------------------- pam_unix End ------------------------- 

 
 --------------------- postfix Begin ------------------------ 

 
 
 7362 bytes transferred
 1 messages sent
 1 messages removed from queue 
 ---------------------- postfix End ------------------------- 

 
 --------------------- SSHD Begin ------------------------ 

 
 Illegal users from:
    146.137.70.8 (anlscan8.cspo.anl.gov): 4 times
 
 Postponed authentication:
    jared/publickey:
       140.221.9.206: 1 Time(s)
 
 Users logging in through sshd:
    jared:
       140.221.9.206 (login4.mcs.anl.gov): 1 time
    jbischof:
       130.202.135.168 (mcswl168.mcs.anl.gov): 1 time
 
 
 Received disconnect:
    11: disconnected by user : 2 Time(s)
 
 **Unmatched Entries**
 pam_succeed_if(sshd:auth): error retrieving information about user Cisco : 2 time(s)
 pam_succeed_if(sshd:auth): error retrieving information about user cisco : 2 time(s)
 
 ---------------------- SSHD End ------------------------- 

 
 --------------------- Disk Space Begin ------------------------ 

 Filesystem            Size  Used Avail Use% Mounted on
 /dev/mapper/Vol0-LV00
                        15G  7.6G  6.0G  56% /
 /dev/md0               99M   39M   55M  42% /boot
 /dev/mapper/Vol0-local
                       1.8T  138G  1.7T   8% /local
 
 
 ---------------------- Disk Space End ------------------------- 

 
 ###################### Logwatch End #########################

[sysadmins] Logwatch for berlin.mcs.anl.gov (Linux)

logwatch＠mcs.anl.gov