Nov 17 17:27:34 sodium portmap[4019]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 17 17:27:38 sodium portmap[4020]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 17 17:28:13 sodium portmap[4021]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 17 17:28:17 sodium portmap[4022]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 17 17:49:29 sodium portmap[4023]: connect from 131.225.166.102 to callit(ypserv): request from unauthorized host
Nov 17 17:49:33 sodium portmap[4024]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 17 17:49:33 sodium portmap[4025]: connect from 131.225.166.102 to callit(ypserv): request from unauthorized host
Nov 18 01:02:00 sodium PAM_pwdb[4125]: (su) session opened for user nobody by (uid=99)
Nov 18 01:02:06 sodium PAM_pwdb[4125]: (su) session closed for user nobody
Nov 18 10:35:25 sodium portmap[4304]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Nov 18 10:35:48 sodium login: FAILED LOGIN 1 FROM (null) FOR root, Authentication failure
Nov 18 10:35:53 sodium login: FAILED LOGIN 2 FROM (null) FOR root, Authentication failure
Nov 18 11:47:29 sodium portmap[4309]: connect from 131.225.166.102 to callit(ypserv): request from unauthorized host
Nov 18 16:55:46 sodium in.rshd[4435]: refused connect from sodium.fnal.gov
Nov 18 16:55:52 sodium in.rshd[4440]: refused connect from sodium.fnal.gov
Nov 18 16:55:53 sodium in.rshd[4445]: refused connect from sodium.fnal.gov
Nov 18 16:55:55 sodium in.rshd[4450]: refused connect from sodium.fnal.gov
Nov 18 16:55:58 sodium in.rshd[4459]: refused connect from sodium.fnal.gov
Nov 18 16:55:58 sodium in.rshd[4460]: refused connect from sodium.fnal.gov
Nov 18 16:55:58 sodium in.rshd[4465]: refused connect from sodium.fnal.gov
Nov 18 16:55:59 sodium in.rshd[4470]: refused connect from sodium.fnal.gov
Nov 18 16:55:59 sodium in.rshd[4475]: refused connect from sodium.fnal.gov
Nov 18 16:56:01 sodium in.rshd[4488]: refused connect from sodium.fnal.gov
Nov 18 16:56:01 sodium in.rshd[4489]: refused connect from sodium.fnal.gov
Nov 18 16:56:01 sodium in.rshd[4490]: refused connect from sodium.fnal.gov
Nov 18 16:56:01 sodium in.rshd[4495]: refused connect from sodium.fnal.gov
Nov 18 16:56:02 sodium in.rshd[4500]: refused connect from sodium.fnal.gov
Nov 18 16:56:31 sodium in.rshd[4505]: refused connect from sodium.fnal.gov
Nov 18 16:56:37 sodium in.rshd[4510]: refused connect from sodium.fnal.gov
Nov 18 16:56:43 sodium in.rshd[4515]: refused connect from sodium.fnal.gov
Nov 18 16:56:49 sodium in.rshd[4520]: refused connect from sodium.fnal.gov
Nov 18 16:56:55 sodium in.rshd[4525]: refused connect from sodium.fnal.gov
Nov 18 16:57:01 sodium in.rshd[4530]: refused connect from sodium.fnal.gov
Nov 18 16:57:07 sodium in.rshd[4539]: refused connect from sodium.fnal.gov
Nov 18 16:57:07 sodium in.rshd[4540]: refused connect from sodium.fnal.gov
Nov 18 16:57:09 sodium in.rshd[4545]: refused connect from sodium.fnal.gov
Nov 18 16:57:09 sodium in.rshd[4550]: refused connect from sodium.fnal.gov
Nov 18 16:57:10 sodium in.rshd[4555]: refused connect from sodium.fnal.gov
Nov 18 16:57:10 sodium in.rshd[4560]: refused connect from sodium.fnal.gov
Nov 18 16:57:13 sodium in.rshd[4565]: refused connect from sodium.fnal.gov
Nov 18 16:57:13 sodium in.rshd[4570]: refused connect from sodium.fnal.gov
Nov 19 01:02:00 sodium PAM_pwdb[4777]: (su) session opened for user nobody by (uid=99)
Nov 19 01:02:07 sodium PAM_pwdb[4777]: (su) session closed for user nobody
Nov 19 13:43:37 sodium portmap[4858]: connect from 131.225.166.103 to callit(ypserv): request from unauthorized host
Nov 20 01:02:00 sodium PAM_pwdb[4973]: (su) session opened for user nobody by (uid=99)
Nov 20 01:02:07 sodium PAM_pwdb[4973]: (su) session closed for user nobody
Nov 20 13:06:21 sodium PAM_pwdb[4305]: (login) session opened for user root by (uid=0)
Nov 20 13:06:21 sodium login[4305]: ROOT LOGIN ON tty1
Nov 20 13:24:43 sodium portmap[5073]: connect from 131.225.166.103 to callit(ypserv): request from unauthorized host
Nov 20 13:27:08 sodium PAM_pwdb[4305]: (login) session closed for user root
Nov 21 01:02:00 sodium PAM_pwdb[5251]: (su) session opened for user nobody by (uid=99)
Nov 21 01:02:07 sodium PAM_pwdb[5251]: (su) session closed for user nobody
Nov 22 01:02:00 sodium PAM_pwdb[5443]: (su) session opened for user nobody by (uid=99)
Nov 22 01:02:07 sodium PAM_pwdb[5443]: (su) session closed for user nobody
Nov 23 01:02:01 sodium PAM_pwdb[5724]: (su) session opened for user nobody by (uid=99)
Nov 23 01:02:26 sodium PAM_pwdb[5724]: (su) session closed for user nobody
Nov 23 12:57:21 sodium portmap[5804]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Nov 23 12:57:21 sodium portmap[5805]: connect from 131.225.166.99 to callit(ypserv): request from unauthorized host
Nov 23 12:57:21 sodium portmap[5806]: connect from 131.225.166.106 to callit(ypserv): request from unauthorized host
Nov 23 12:57:23 sodium portmap[5807]: connect from 131.225.166.112 to callit(ypserv): request from unauthorized host
Nov 23 12:57:23 sodium portmap[5808]: connect from 131.225.166.100 to callit(ypserv): request from unauthorized host
Nov 23 12:57:25 sodium portmap[5809]: connect from 131.225.166.104 to callit(ypserv): request from unauthorized host
Nov 23 12:57:26 sodium portmap[5810]: connect from 131.225.166.111 to callit(ypserv): request from unauthorized host
Nov 23 12:57:27 sodium portmap[5811]: connect from 131.225.166.105 to callit(ypserv): request from unauthorized host
Nov 23 12:57:28 sodium portmap[5812]: connect from 131.225.166.108 to callit(ypserv): request from unauthorized host
Nov 23 12:57:31 sodium portmap[5814]: connect from 131.225.166.113 to callit(ypserv): request from unauthorized host
Nov 23 12:57:32 sodium portmap[5815]: connect from 131.225.166.109 to callit(ypserv): request from unauthorized host
Nov 23 12:57:33 sodium portmap[5816]: connect from 131.225.166.103 to callit(ypserv): request from unauthorized host
Nov 23 13:29:23 sodium portmap[5819]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Nov 23 13:36:58 sodium portmap[5820]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Nov 23 17:01:34 sodium in.rshd[5850]: twist 131.225.81.254 to /bin/echo "Noisy line.  Please check connection."
Nov 23 17:02:23 sodium in.rshd[5868]: refused connect from 131.225.81.254
Nov 23 17:03:16 sodium in.rshd[5885]: connect from 131.225.81.254
Nov 23 17:03:16 sodium pam_rhosts_auth[5885]: allowed to root@131.225.81.254 as root
Nov 23 17:03:16 sodium PAM_pwdb[5885]: (rsh) session opened for user root by (uid=0)
Nov 23 17:03:16 sodium in.rshd[5886]: root@131.225.81.254 as root: cmd='date'
Nov 23 17:03:16 sodium PAM_pwdb[5885]: (rsh) session closed for user root
Nov 23 17:04:21 sodium in.rshd[5889]: connect from 131.225.81.254
Nov 23 17:04:21 sodium pam_rhosts_auth[5889]: allowed to root@131.225.81.254 as root
Nov 23 17:04:21 sodium PAM_pwdb[5889]: (rsh) session opened for user root by (uid=0)
Nov 23 17:04:21 sodium in.rshd[5890]: root@131.225.81.254 as root: cmd='(cd /usr; tar cf - ./farm)'
Nov 23 17:05:18 sodium PAM_pwdb[5889]: (rsh) session closed for user root
Nov 24 01:02:01 sodium PAM_pwdb[5989]: (su) session opened for user nobody by (uid=99)
Nov 24 01:02:19 sodium PAM_pwdb[5989]: (su) session closed for user nobody
Nov 25 01:02:01 sodium PAM_pwdb[6222]: (su) session opened for user nobody by (uid=99)
Nov 25 01:02:19 sodium PAM_pwdb[6222]: (su) session closed for user nobody
Nov 26 01:02:01 sodium PAM_pwdb[6403]: (su) session opened for user nobody by (uid=99)
Nov 26 01:02:20 sodium PAM_pwdb[6403]: (su) session closed for user nobody
Nov 27 01:02:00 sodium PAM_pwdb[6583]: (su) session opened for user nobody by (uid=99)
Nov 27 01:02:18 sodium PAM_pwdb[6583]: (su) session closed for user nobody
Nov 28 01:02:01 sodium PAM_pwdb[6763]: (su) session opened for user nobody by (uid=99)
Nov 28 01:02:20 sodium PAM_pwdb[6763]: (su) session closed for user nobody
Nov 29 01:02:00 sodium PAM_pwdb[6953]: (su) session opened for user nobody by (uid=99)
Nov 29 01:02:19 sodium PAM_pwdb[6953]: (su) session closed for user nobody
Nov 30 01:02:00 sodium PAM_pwdb[7234]: (su) session opened for user nobody by (uid=99)
Nov 30 01:02:21 sodium PAM_pwdb[7234]: (su) session closed for user nobody
Dec  1 01:02:00 sodium PAM_pwdb[7432]: (su) session opened for user nobody by (uid=99)
Dec  1 01:02:18 sodium PAM_pwdb[7432]: (su) session closed for user nobody
Dec  1 15:25:42 sodium in.ftpd[7526]: refused connect from nova.fnal.gov
Dec  1 17:07:21 sodium in.ftpd[7542]: refused connect from nova.fnal.gov
Dec  1 18:04:51 sodium portmap[7549]: connect from 131.225.166.109 to callit(ypserv): request from unauthorized host
Dec  1 18:04:56 sodium portmap[7550]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Dec  1 18:05:04 sodium portmap[7551]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Dec  1 18:05:08 sodium portmap[7552]: connect from 131.225.166.105 to callit(ypserv): request from unauthorized host
Dec  1 18:05:08 sodium portmap[7553]: connect from 131.225.166.97 to callit(ypserv): request from unauthorized host
Dec  1 18:07:02 sodium portmap[7554]: connect from 131.225.166.99 to callit(ypserv): request from unauthorized host
Dec  1 18:07:02 sodium portmap[7555]: connect from 131.225.166.104 to callit(ypserv): request from unauthorized host
Dec  1 18:18:52 sodium in.rshd[7556]: connect from fnop.fnal.gov
Dec  1 18:18:52 sodium pam_rhosts_auth[7556]: allowed to root@fnop.fnal.gov as root
Dec  1 18:18:52 sodium PAM_pwdb[7556]: (rsh) session opened for user root by (uid=0)
Dec  1 18:18:52 sodium in.rshd[7556]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec  1 18:19:31 sodium in.rshd[7557]: connect from fnop.fnal.gov
Dec  1 18:19:31 sodium pam_rhosts_auth[7557]: allowed to root@fnop.fnal.gov as root
Dec  1 18:19:31 sodium PAM_pwdb[7557]: (rsh) session opened for user root by (uid=0)
Dec  1 18:19:31 sodium in.rshd[7557]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec  2 01:02:00 sodium PAM_pwdb[7646]: (su) session opened for user nobody by (uid=99)
Dec  2 01:02:19 sodium PAM_pwdb[7646]: (su) session closed for user nobody
Dec  2 17:34:11 sodium portmap[7735]: connect from 131.225.166.100 to callit(ypserv): request from unauthorized host
Dec  2 17:34:35 sodium portmap[7736]: connect from 131.225.166.102 to callit(ypserv): request from unauthorized host
Dec  2 17:34:44 sodium portmap[7737]: connect from 131.225.166.104 to callit(ypserv): request from unauthorized host
Dec  2 17:34:45 sodium portmap[7738]: connect from 131.225.166.106 to callit(ypserv): request from unauthorized host
Dec  2 17:34:49 sodium portmap[7739]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Dec  2 17:34:52 sodium portmap[7740]: connect from 131.225.166.105 to callit(ypserv): request from unauthorized host
Dec  2 17:34:56 sodium portmap[7741]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Dec  2 17:35:32 sodium portmap[7742]: connect from 131.225.166.112 to callit(ypserv): request from unauthorized host
Dec  2 17:35:48 sodium portmap[7743]: connect from 131.225.166.111 to callit(ypserv): request from unauthorized host
Dec  2 17:35:52 sodium portmap[7744]: connect from 131.225.166.108 to callit(ypserv): request from unauthorized host
Dec  2 17:35:54 sodium portmap[7745]: connect from 131.225.166.113 to callit(ypserv): request from unauthorized host
Dec  2 17:35:56 sodium portmap[7746]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Dec  2 17:35:58 sodium portmap[7747]: connect from 131.225.166.103 to callit(ypserv): request from unauthorized host
Dec  2 17:35:59 sodium portmap[7748]: connect from 131.225.166.109 to callit(ypserv): request from unauthorized host
Dec  2 17:39:25 sodium portmap[7749]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Dec  3 01:02:01 sodium PAM_pwdb[7841]: (su) session opened for user nobody by (uid=99)
Dec  3 01:02:20 sodium PAM_pwdb[7841]: (su) session closed for user nobody
Dec  4 01:02:01 sodium PAM_pwdb[8024]: (su) session opened for user nobody by (uid=99)
Dec  4 01:02:19 sodium PAM_pwdb[8024]: (su) session closed for user nobody
Dec  5 01:02:00 sodium PAM_pwdb[8232]: (su) session opened for user nobody by (uid=99)
Dec  5 01:02:19 sodium PAM_pwdb[8232]: (su) session closed for user nobody
Dec  6 01:02:00 sodium PAM_pwdb[8422]: (su) session opened for user nobody by (uid=99)
Dec  6 01:02:20 sodium PAM_pwdb[8422]: (su) session closed for user nobody
Dec  7 01:02:00 sodium PAM_pwdb[8703]: (su) session opened for user nobody by (uid=99)
Dec  7 01:02:20 sodium PAM_pwdb[8703]: (su) session closed for user nobody
Dec  8 01:02:00 sodium PAM_pwdb[8883]: (su) session opened for user nobody by (uid=99)
Dec  8 01:02:19 sodium PAM_pwdb[8883]: (su) session closed for user nobody
Dec  9 01:02:00 sodium PAM_pwdb[9063]: (su) session opened for user nobody by (uid=99)
Dec  9 01:02:20 sodium PAM_pwdb[9063]: (su) session closed for user nobody
Dec 10 01:02:00 sodium PAM_pwdb[9249]: (su) session opened for user nobody by (uid=99)
Dec 10 01:02:19 sodium PAM_pwdb[9249]: (su) session closed for user nobody
Dec 10 10:36:23 sodium in.rshd[9317]: refused connect from fnpca.fnal.gov
Dec 10 10:39:43 sodium in.rshd[9319]: refused connect from helium.fnal.gov
Dec 10 10:42:55 sodium in.rshd[9326]: refused connect from helium.fnal.gov
Dec 10 10:46:04 sodium in.rshd[9328]: refused connect from helium.fnal.gov
Dec 10 10:47:29 sodium in.rshd[9330]: refused connect from helium.fnal.gov
Dec 10 11:16:48 sodium in.rshd[9352]: refused connect from helium.fnal.gov
Dec 10 11:19:02 sodium in.rshd[9376]: refused connect from helium.fnal.gov
Dec 10 11:19:36 sodium in.rshd[9381]: connect from helium.fnal.gov
Dec 10 11:19:36 sodium pam_rhosts_auth[9381]: denied to root@helium.fnal.gov as root: access not allowed
Dec 10 11:20:10 sodium in.rshd[9383]: twist 131.225.69.6 to /bin/echo "Noisy line.  Please check connection."
Dec 10 11:20:23 sodium in.rshd[9385]: connect from helium.fnal.gov
Dec 10 11:20:23 sodium pam_rhosts_auth[9385]: denied to root@helium.fnal.gov as root: access not allowed
Dec 10 11:21:59 sodium in.rlogind[9390]: connect from helium.fnal.gov
Dec 10 11:22:00 sodium pam_rhosts_auth[9390]: denied to root@helium.fnal.gov as root: access not allowed
Dec 10 11:22:02 sodium in.rlogind[9390]: PAM authentication failed for in.rlogind
Dec 10 11:22:02 sodium PAM_pwdb[9391]: 1 authentication failure; (uid=0) -> root for rlogin service
Dec 10 11:22:03 sodium PAM_pwdb[9391]: auth could not identify password for [root]
Dec 10 11:22:03 sodium login[9391]: FAILED LOGIN 1 FROM helium.fnal.gov FOR root, Authentication failure
Dec 10 11:22:06 sodium pam[9391]: pam_get_user: no username obtained
Dec 10 11:22:06 sodium pam[9391]: pam_get_user: no username obtained
Dec 10 11:22:06 sodium login[9391]: FAILED LOGIN SESSION FROM helium.fnal.gov FOR (null), Error in service module
Dec 10 11:22:06 sodium PAM_pwdb[9390]: 1 authentication failure; (uid=0) -> root for rlogin service
Dec 10 11:22:11 sodium in.rshd[9392]: connect from helium.fnal.gov
Dec 10 11:22:11 sodium pam_rhosts_auth[9392]: denied to root@helium.fnal.gov as root: access not allowed
Dec 10 11:22:41 sodium in.rshd[9395]: connect from helium.fnal.gov
Dec 10 11:22:41 sodium pam_rhosts_auth[9395]: allowed to root@helium.fnal.gov as root
Dec 10 11:22:41 sodium PAM_pwdb[9395]: (rsh) session opened for user root by (uid=0)
Dec 10 11:22:41 sodium in.rshd[9396]: root@helium.fnal.gov as root: cmd='date'
Dec 10 11:22:41 sodium PAM_pwdb[9395]: (rsh) session closed for user root
Dec 11 01:02:01 sodium PAM_pwdb[9654]: (su) session opened for user nobody by (uid=99)
Dec 11 01:02:19 sodium PAM_pwdb[9654]: (su) session closed for user nobody
Dec 11 10:42:16 sodium portmap[9722]: connect from 131.225.166.108 to callit(ypserv): request from unauthorized host
Dec 11 10:42:19 sodium portmap[9723]: connect from 131.225.166.113 to callit(ypserv): request from unauthorized host
Dec 11 10:42:20 sodium portmap[9724]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Dec 11 10:42:29 sodium portmap[9725]: connect from 131.225.166.100 to callit(ypserv): request from unauthorized host
Dec 11 10:42:42 sodium portmap[9726]: connect from 131.225.166.112 to callit(ypserv): request from unauthorized host
Dec 11 10:42:45 sodium portmap[9727]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Dec 11 10:46:38 sodium portmap[9746]: connect from 131.225.166.97 to callit(ypserv): request from unauthorized host
Dec 12 01:02:01 sodium PAM_pwdb[9860]: (su) session opened for user nobody by (uid=99)
Dec 12 01:02:19 sodium PAM_pwdb[9860]: (su) session closed for user nobody
Dec 13 01:02:01 sodium PAM_pwdb[10050]: (su) session opened for user nobody by (uid=99)
Dec 13 01:02:18 sodium PAM_pwdb[10050]: (su) session closed for user nobody
Dec 14 01:02:00 sodium PAM_pwdb[10331]: (su) session opened for user nobody by (uid=99)
Dec 14 01:02:21 sodium PAM_pwdb[10331]: (su) session closed for user nobody
Dec 15 01:02:00 sodium PAM_pwdb[10511]: (su) session opened for user nobody by (uid=99)
Dec 15 01:02:19 sodium PAM_pwdb[10511]: (su) session closed for user nobody
Dec 16 01:02:00 sodium PAM_pwdb[10712]: (su) session opened for user nobody by (uid=99)
Dec 16 01:02:19 sodium PAM_pwdb[10712]: (su) session closed for user nobody
Dec 16 15:25:16 sodium in.rshd[10795]: refused connect from cosmos.fnal.gov
Dec 16 15:25:19 sodium in.rshd[10796]: refused connect from cosmos.fnal.gov
Dec 17 01:02:00 sodium PAM_pwdb[10894]: (su) session opened for user nobody by (uid=99)
Dec 17 01:02:18 sodium PAM_pwdb[10894]: (su) session closed for user nobody
Dec 17 16:28:45 sodium portmap[10980]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:28:49 sodium portmap[10981]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:28:55 sodium portmap[10982]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:29:03 sodium portmap[10983]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:29:13 sodium portmap[10984]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:29:25 sodium portmap[10985]: connect from 131.225.166.96 to callit(rusersd): request from unauthorized host
Dec 17 16:37:19 sodium portmap[10986]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:23 sodium portmap[10987]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:29 sodium portmap[10988]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:41 sodium portmap[10989]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:45 sodium portmap[10990]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:51 sodium portmap[10991]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:37:59 sodium portmap[10992]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:38:09 sodium portmap[10993]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 16:38:21 sodium portmap[10994]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:04:48 sodium portmap[10998]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:04:52 sodium portmap[10999]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:04:58 sodium portmap[11000]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:06 sodium portmap[11001]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:16 sodium portmap[11002]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:28 sodium portmap[11003]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:42 sodium portmap[11004]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:46 sodium portmap[11005]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:05:52 sodium portmap[11006]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:06:00 sodium portmap[11007]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:06:10 sodium portmap[11008]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 17 17:06:22 sodium portmap[11009]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 01:02:00 sodium PAM_pwdb[11101]: (su) session opened for user nobody by (uid=99)
Dec 18 01:02:20 sodium PAM_pwdb[11101]: (su) session closed for user nobody
Dec 18 09:29:16 sodium portmap[11166]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 09:29:20 sodium portmap[11167]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 09:48:21 sodium portmap[11168]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 09:48:25 sodium portmap[11169]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 09:48:33 sodium portmap[11170]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 09:48:37 sodium portmap[11171]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 11:12:02 sodium portmap[11181]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:06 sodium portmap[11182]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:12 sodium portmap[11183]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:15 sodium portmap[11184]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:19 sodium portmap[11185]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:25 sodium portmap[11186]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:33 sodium portmap[11187]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:43 sodium portmap[11188]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:12:55 sodium portmap[11189]: connect from 131.225.166.112 to callit(rstatd): request from unauthorized host
Dec 18 11:17:17 sodium portmap[11190]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 11:17:37 sodium portmap[11191]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 11:17:43 sodium portmap[11192]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 11:25:49 sodium portmap[11193]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:25:53 sodium portmap[11194]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:25:59 sodium portmap[11195]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:26:07 sodium portmap[11196]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:26:17 sodium portmap[11197]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:26:29 sodium portmap[11198]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:30:21 sodium portmap[11199]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:30:25 sodium portmap[11200]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:30:31 sodium portmap[11201]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:30:39 sodium portmap[11202]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:30:49 sodium portmap[11203]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 11:31:01 sodium portmap[11204]: connect from 131.225.166.98 to callit(rstatd): request from unauthorized host
Dec 18 12:59:46 sodium portmap[11209]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 12:59:51 sodium portmap[11210]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 12:59:57 sodium portmap[11211]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:00:05 sodium portmap[11212]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:00:15 sodium portmap[11213]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:00:27 sodium portmap[11214]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:54:36 sodium portmap[11217]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:54:55 sodium portmap[11218]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:55:01 sodium portmap[11219]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:55:09 sodium portmap[11220]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:55:19 sodium portmap[11221]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 13:55:31 sodium portmap[11222]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:18 sodium portmap[11229]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:22 sodium portmap[11230]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:28 sodium portmap[11231]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:36 sodium portmap[11232]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:46 sodium portmap[11233]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 15:34:58 sodium portmap[11234]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 16:22:24 sodium portmap[11238]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 16:22:28 sodium portmap[11239]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 18 16:22:34 sodium portmap[11240]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 19 01:02:00 sodium PAM_pwdb[11335]: (su) session opened for user nobody by (uid=99)
Dec 19 01:02:19 sodium PAM_pwdb[11335]: (su) session closed for user nobody
Dec 20 01:02:00 sodium PAM_pwdb[11525]: (su) session opened for user nobody by (uid=99)
Dec 20 01:02:18 sodium PAM_pwdb[11525]: (su) session closed for user nobody
Dec 21 01:02:00 sodium PAM_pwdb[11806]: (su) session opened for user nobody by (uid=99)
Dec 21 01:02:19 sodium PAM_pwdb[11806]: (su) session closed for user nobody
Dec 21 17:26:41 sodium portmap[11895]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 21 17:26:45 sodium portmap[11896]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 22 01:02:00 sodium PAM_pwdb[11988]: (su) session opened for user nobody by (uid=99)
Dec 22 01:02:19 sodium PAM_pwdb[11988]: (su) session closed for user nobody
Dec 22 10:08:27 sodium portmap[12056]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 22 10:08:31 sodium portmap[12057]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 01:02:00 sodium PAM_pwdb[12187]: (su) session opened for user nobody by (uid=99)
Dec 23 01:02:18 sodium PAM_pwdb[12187]: (su) session closed for user nobody
Dec 23 10:17:56 sodium portmap[12255]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:18:01 sodium portmap[12256]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:18:07 sodium portmap[12257]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:18:26 sodium portmap[12258]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:18:30 sodium portmap[12259]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:19:06 sodium portmap[12260]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:19:10 sodium portmap[12261]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:19:16 sodium portmap[12262]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:36:43 sodium portmap[12263]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:36:47 sodium portmap[12264]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:36:53 sodium portmap[12265]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:37:01 sodium portmap[12266]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:37:11 sodium portmap[12267]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:37:23 sodium portmap[12268]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:38:45 sodium portmap[12269]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:38:49 sodium portmap[12270]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:38:56 sodium portmap[12271]: connect from 131.225.166.102 to callit(rstatd): request from unauthorized host
Dec 23 10:49:49 sodium portmap[12272]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:49:53 sodium portmap[12273]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:49:59 sodium portmap[12274]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:50:07 sodium portmap[12275]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:50:17 sodium portmap[12276]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:50:29 sodium portmap[12277]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:15 sodium portmap[12278]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:19 sodium portmap[12279]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:25 sodium portmap[12280]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:33 sodium portmap[12281]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:43 sodium portmap[12282]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:51:55 sodium portmap[12283]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:53:23 sodium portmap[12284]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:53:27 sodium portmap[12285]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:53:33 sodium portmap[12286]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:53:41 sodium portmap[12287]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:53:51 sodium portmap[12288]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:54:03 sodium portmap[12289]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:19 sodium portmap[12290]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:23 sodium portmap[12291]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:29 sodium portmap[12292]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:37 sodium portmap[12293]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:47 sodium portmap[12294]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 10:55:59 sodium portmap[12295]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Dec 23 12:24:27 sodium in.rshd[12302]: connect from fnop.fnal.gov
Dec 23 12:24:27 sodium pam_rhosts_auth[12302]: allowed to root@fnop.fnal.gov as root
Dec 23 12:24:27 sodium PAM_pwdb[12302]: (rsh) session opened for user root by (uid=0)
Dec 23 12:24:27 sodium in.rshd[12302]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec 23 12:25:37 sodium in.rshd[12303]: connect from fnop.fnal.gov
Dec 23 12:25:37 sodium pam_rhosts_auth[12303]: allowed to root@fnop.fnal.gov as root
Dec 23 12:25:37 sodium PAM_pwdb[12303]: (rsh) session opened for user root by (uid=0)
Dec 23 12:25:37 sodium in.rshd[12303]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec 23 12:59:34 sodium in.rshd[12305]: connect from fnop.fnal.gov
Dec 23 12:59:34 sodium pam_rhosts_auth[12305]: allowed to root@fnop.fnal.gov as root
Dec 23 12:59:34 sodium PAM_pwdb[12305]: (rsh) session opened for user root by (uid=0)
Dec 23 12:59:34 sodium in.rshd[12305]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec 23 15:46:45 sodium in.rshd[12316]: connect from fnop.fnal.gov
Dec 23 15:46:45 sodium pam_rhosts_auth[12316]: allowed to root@fnop.fnal.gov as root
Dec 23 15:46:45 sodium PAM_pwdb[12316]: (rsh) session opened for user root by (uid=0)
Dec 23 15:46:45 sodium in.rshd[12316]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Dec 24 01:02:00 sodium PAM_pwdb[12519]: (su) session opened for user nobody by (uid=99)
Dec 24 01:02:19 sodium PAM_pwdb[12519]: (su) session closed for user nobody
Dec 25 01:02:00 sodium PAM_pwdb[12699]: (su) session opened for user nobody by (uid=99)
Dec 25 01:02:19 sodium PAM_pwdb[12699]: (su) session closed for user nobody
Dec 26 01:02:00 sodium PAM_pwdb[12879]: (su) session opened for user nobody by (uid=99)
Dec 26 01:02:18 sodium PAM_pwdb[12879]: (su) session closed for user nobody
Dec 27 01:02:00 sodium PAM_pwdb[13069]: (su) session opened for user nobody by (uid=99)
Dec 27 01:02:20 sodium PAM_pwdb[13069]: (su) session closed for user nobody
Dec 28 01:02:00 sodium PAM_pwdb[13350]: (su) session opened for user nobody by (uid=99)
Dec 28 01:02:19 sodium PAM_pwdb[13350]: (su) session closed for user nobody
Dec 29 01:02:00 sodium PAM_pwdb[13530]: (su) session opened for user nobody by (uid=99)
Dec 29 01:02:18 sodium PAM_pwdb[13530]: (su) session closed for user nobody
Dec 30 01:02:01 sodium PAM_pwdb[13710]: (su) session opened for user nobody by (uid=99)
Dec 30 01:02:18 sodium PAM_pwdb[13710]: (su) session closed for user nobody
Dec 31 01:02:01 sodium PAM_pwdb[13890]: (su) session opened for user nobody by (uid=99)
Dec 31 01:02:19 sodium PAM_pwdb[13890]: (su) session closed for user nobody
Dec 31 08:49:15 sodium in.telnetd[13952]: twist server9.fx-net.de to /bin/echo "Noisy line.  Please check connection."
Jan  1 01:02:00 sodium PAM_pwdb[14071]: (su) session opened for user nobody by (uid=99)
Jan  1 01:02:18 sodium PAM_pwdb[14071]: (su) session closed for user nobody
Jan  2 00:40:34 sodium imapd[14238]: warning: can't get client address: Connection reset by peer
Jan  2 00:40:34 sodium imapd[14238]: refused connect from unknown
Jan  2 01:02:00 sodium PAM_pwdb[14254]: (su) session opened for user nobody by (uid=99)
Jan  2 01:02:20 sodium PAM_pwdb[14254]: (su) session closed for user nobody
Jan  2 04:04:53 sodium imapd[14304]: refused connect from 209.154.105.10
Jan  3 01:02:00 sodium PAM_pwdb[14445]: (su) session opened for user nobody by (uid=99)
Jan  3 01:02:18 sodium PAM_pwdb[14445]: (su) session closed for user nobody
Jan  4 01:02:00 sodium PAM_pwdb[14726]: (su) session opened for user nobody by (uid=99)
Jan  4 01:02:19 sodium PAM_pwdb[14726]: (su) session closed for user nobody
Jan  4 10:55:46 sodium portmap[14794]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  4 10:55:50 sodium portmap[14795]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  4 10:55:56 sodium portmap[14796]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  4 10:56:04 sodium portmap[14797]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  5 01:02:00 sodium PAM_pwdb[14927]: (su) session opened for user nobody by (uid=99)
Jan  5 01:02:19 sodium PAM_pwdb[14927]: (su) session closed for user nobody
Jan  6 01:02:00 sodium PAM_pwdb[15107]: (su) session opened for user nobody by (uid=99)
Jan  6 01:02:19 sodium PAM_pwdb[15107]: (su) session closed for user nobody
Jan  6 10:40:26 sodium portmap[15175]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 10:40:31 sodium portmap[15176]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:05:59 sodium portmap[15187]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:06:03 sodium portmap[15188]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:06:09 sodium portmap[15189]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:06:17 sodium portmap[15190]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:06:27 sodium portmap[15191]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 13:06:39 sodium portmap[15192]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:11 sodium portmap[15230]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:15 sodium portmap[15231]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:21 sodium portmap[15232]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:29 sodium portmap[15233]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:39 sodium portmap[15234]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 16:29:51 sodium portmap[15235]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  6 18:10:35 sodium in.telnetd[15242]: warning: can't get client address: Connection reset by peer
Jan  6 18:10:35 sodium in.telnetd[15242]: twist unknown to /bin/echo "Noisy line.  Please check connection."
Jan  6 18:10:36 sodium in.telnetd[15243]: warning: can't get client address: Connection reset by peer
Jan  6 18:10:36 sodium in.telnetd[15243]: twist unknown to /bin/echo "Noisy line.  Please check connection."
Jan  6 18:10:36 sodium in.telnetd[15244]: warning: can't get client address: Connection reset by peer
Jan  6 18:10:36 sodium in.telnetd[15244]: twist unknown to /bin/echo "Noisy line.  Please check connection."
Jan  6 22:59:44 sodium in.telnetd[15258]: refused connect from rocket.fnal.gov
Jan  6 23:03:24 sodium in.telnetd[15261]: refused connect from rocket.fnal.gov
Jan  7 01:02:00 sodium PAM_pwdb[15335]: (su) session opened for user nobody by (uid=99)
Jan  7 01:02:18 sodium PAM_pwdb[15335]: (su) session closed for user nobody
Jan  7 12:55:26 sodium portmap[15409]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 12:55:30 sodium portmap[15410]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 12:55:36 sodium portmap[15411]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 12:57:29 sodium portmap[15412]: connect from 131.225.166.99 to callit(rstatd): request from unauthorized host
Jan  7 12:57:33 sodium portmap[15414]: connect from 131.225.166.99 to callit(rstatd): request from unauthorized host
Jan  7 16:32:08 sodium portmap[15426]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 16:32:12 sodium portmap[15427]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 16:32:18 sodium portmap[15428]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 16:32:26 sodium portmap[15429]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:29:37 sodium portmap[15433]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:29:41 sodium portmap[15434]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:29:47 sodium portmap[15435]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:29:55 sodium portmap[15436]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:30:05 sodium portmap[15437]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  7 17:30:17 sodium portmap[15438]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 01:02:00 sodium PAM_pwdb[15530]: (su) session opened for user nobody by (uid=99)
Jan  8 01:02:19 sodium PAM_pwdb[15530]: (su) session closed for user nobody
Jan  8 10:18:31 sodium portmap[15598]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 10:18:35 sodium portmap[15599]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 10:23:44 sodium portmap[15600]: connect from 131.225.166.97 to callit(rstatd): request from unauthorized host
Jan  8 10:23:48 sodium portmap[15601]: connect from 131.225.166.97 to callit(rstatd): request from unauthorized host
Jan  8 10:23:55 sodium portmap[15602]: connect from 131.225.166.97 to callit(rstatd): request from unauthorized host
Jan  8 13:53:40 sodium portmap[15612]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:53:44 sodium portmap[15613]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:54:31 sodium portmap[15614]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:54:35 sodium portmap[15615]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:54:41 sodium portmap[15616]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:54:49 sodium portmap[15617]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:54:59 sodium portmap[15618]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 13:55:11 sodium portmap[15619]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:31:29 sodium portmap[15623]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:31:34 sodium portmap[15624]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:31:40 sodium portmap[15625]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:31:48 sodium portmap[15626]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:31:58 sodium portmap[15627]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 14:32:10 sodium portmap[15628]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan  8 16:33:01 sodium in.rshd[15655]: connect from fnop.fnal.gov
Jan  8 16:33:01 sodium pam_rhosts_auth[15655]: allowed to root@fnop.fnal.gov as root
Jan  8 16:33:02 sodium PAM_pwdb[15655]: (rsh) session opened for user root by (uid=0)
Jan  8 16:33:02 sodium in.rshd[15655]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Jan  9 01:02:00 sodium PAM_pwdb[15753]: (su) session opened for user nobody by (uid=99)
Jan  9 01:02:19 sodium PAM_pwdb[15753]: (su) session closed for user nobody
Jan 10 01:02:00 sodium PAM_pwdb[15943]: (su) session opened for user nobody by (uid=99)
Jan 10 01:02:19 sodium PAM_pwdb[15943]: (su) session closed for user nobody
Jan 11 01:02:00 sodium PAM_pwdb[16224]: (su) session opened for user nobody by (uid=99)
Jan 11 01:02:23 sodium PAM_pwdb[16224]: (su) session closed for user nobody
Jan 11 10:57:58 sodium in.rshd[16293]: connect from fnop.fnal.gov
Jan 11 10:57:58 sodium pam_rhosts_auth[16293]: allowed to root@fnop.fnal.gov as root
Jan 11 10:57:58 sodium PAM_pwdb[16293]: (rsh) session opened for user root by (uid=0)
Jan 11 10:57:58 sodium in.rshd[16293]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Jan 11 11:37:47 sodium portmap[16296]: connect from 131.225.166.108 to callit(ypserv): request from unauthorized host
Jan 12 01:02:00 sodium PAM_pwdb[16466]: (su) session opened for user nobody by (uid=99)
Jan 12 01:02:20 sodium PAM_pwdb[16466]: (su) session closed for user nobody
Jan 12 14:35:59 sodium in.ftpd[16573]: refused connect from fsui01.fnal.gov
Jan 12 14:38:59 sodium in.rshd[16576]: refused connect from fsui01.fnal.gov
Jan 12 14:40:04 sodium in.rshd[16578]: refused connect from fsui01.fnal.gov
Jan 12 14:43:09 sodium in.rshd[16581]: refused connect from fsui01.fnal.gov
Jan 12 14:44:13 sodium in.rshd[16583]: connect from fsui01.fnal.gov
Jan 12 14:44:13 sodium pam_rhosts_auth[16583]: allowed to root@fsui01.fnal.gov as root
Jan 12 14:44:13 sodium PAM_pwdb[16583]: (rsh) session opened for user root by (uid=0)
Jan 12 14:44:13 sodium in.rshd[16584]: root@fsui01.fnal.gov as root: cmd='date'
Jan 12 14:44:14 sodium PAM_pwdb[16583]: (rsh) session closed for user root
Jan 12 14:45:14 sodium in.rshd[16585]: connect from fsui01.fnal.gov
Jan 12 14:45:14 sodium pam_rhosts_auth[16585]: allowed to root@fsui01.fnal.gov as root
Jan 12 14:45:14 sodium PAM_pwdb[16585]: (rsh) session opened for user root by (uid=0)
Jan 12 14:45:14 sodium in.rshd[16585]: root@fsui01.fnal.gov as root: cmd='rcp -f /usr/console.tar.gz'
Jan 12 17:35:00 sodium portmap[16612]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 12 17:35:04 sodium portmap[16613]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 01:02:00 sodium PAM_pwdb[16706]: (su) session opened for user nobody by (uid=99)
Jan 13 01:02:53 sodium PAM_pwdb[16706]: (su) session closed for user nobody
Jan 13 09:53:31 sodium portmap[16772]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 09:53:35 sodium portmap[16773]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 11:47:22 sodium portmap[16780]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 11:47:26 sodium portmap[16781]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:16:42 sodium portmap[16794]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:16:46 sodium portmap[16795]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:16:52 sodium portmap[16796]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:17:00 sodium portmap[16797]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:17:10 sodium portmap[16798]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 15:17:22 sodium portmap[16799]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:29:37 sodium portmap[16803]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:29:41 sodium portmap[16804]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:29:47 sodium portmap[16805]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:29:55 sodium portmap[16806]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:30:05 sodium portmap[16807]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:30:17 sodium portmap[16808]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:36:52 sodium portmap[16809]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:36:56 sodium portmap[16810]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:37:02 sodium portmap[16811]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:37:10 sodium portmap[16812]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:37:20 sodium portmap[16813]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 16:37:32 sodium portmap[16814]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:24:43 sodium portmap[16821]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:24:47 sodium portmap[16822]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:24:53 sodium portmap[16823]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:25:01 sodium portmap[16824]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:25:11 sodium portmap[16825]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 13 18:25:23 sodium portmap[16826]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 14 01:02:00 sodium PAM_pwdb[16915]: (su) session opened for user nobody by (uid=99)
Jan 14 01:02:13 sodium PAM_pwdb[16915]: (su) session closed for user nobody
Jan 14 14:31:13 sodium PAM_pwdb[5075]: bad username [ ]
Jan 14 14:31:13 sodium login[5075]: FAILED LOGIN 1 FROM (null) FOR  , User not known to the underlying authentication module
Jan 14 14:31:17 sodium PAM_pwdb[5075]: (login) session opened for user root by (uid=0)
Jan 14 14:31:17 sodium login[5075]: ROOT LOGIN ON tty1
Jan 14 14:31:54 sodium PAM_pwdb[5075]: (login) session closed for user root
Jan 15 01:02:00 sodium PAM_pwdb[17112]: (su) session opened for user nobody by (uid=99)
Jan 15 01:02:14 sodium PAM_pwdb[17112]: (su) session closed for user nobody
Jan 16 01:02:00 sodium PAM_pwdb[17292]: (su) session opened for user nobody by (uid=99)
Jan 16 01:02:14 sodium PAM_pwdb[17292]: (su) session closed for user nobody
Jan 16 19:13:05 sodium PAM_pwdb[371]: (login) session opened for user root by (uid=0)
Jan 16 19:13:05 sodium login[371]: ROOT LOGIN ON tty1
Jan 16 19:20:09 sodium login: FAILED LOGIN 1 FROM (null) FOR root, Authentication failure
Jan 16 19:20:13 sodium PAM_pwdb[371]: (login) session opened for user root by (uid=0)
Jan 16 19:20:13 sodium login[371]: ROOT LOGIN ON tty1
Jan 16 19:25:00 sodium portmap[399]: connect from 131.225.166.96 to callit(ypserv): request from unauthorized host
Jan 16 19:29:46 sodium login: FAILED LOGIN 1 FROM (null) FOR root, Authentication failure
Jan 16 19:29:50 sodium PAM_pwdb[372]: (login) session opened for user root by (uid=0)
Jan 16 19:29:50 sodium login[372]: ROOT LOGIN ON tty2
Jan 16 19:30:15 sodium PAM_pwdb[373]: (login) session opened for user root by (uid=0)
Jan 16 19:30:15 sodium login[373]: ROOT LOGIN ON tty3
Jan 16 19:30:38 sodium PAM_pwdb[374]: (login) session opened for user root by (uid=0)
Jan 16 19:30:38 sodium login[374]: ROOT LOGIN ON tty4
Jan 16 19:37:12 sodium PAM_pwdb[375]: (login) session opened for user root by (uid=0)
Jan 16 19:37:12 sodium login[375]: ROOT LOGIN ON tty5
Jan 16 19:39:05 sodium PAM_pwdb[376]: (login) session opened for user root by (uid=0)
Jan 16 19:39:05 sodium login[376]: ROOT LOGIN ON tty6
Jan 16 19:42:27 sodium portmap[470]: connect from 131.225.166.101 to callit(ypserv): request from unauthorized host
Jan 16 19:42:39 sodium portmap[471]: connect from 131.225.166.110 to callit(ypserv): request from unauthorized host
Jan 16 19:42:58 sodium portmap[472]: connect from 131.225.166.103 to callit(ypserv): request from unauthorized host
Jan 16 19:42:59 sodium portmap[473]: connect from 131.225.166.102 to callit(ypserv): request from unauthorized host
Jan 16 19:43:00 sodium portmap[474]: connect from 131.225.166.108 to callit(ypserv): request from unauthorized host
Jan 16 19:43:09 sodium portmap[475]: connect from 131.225.166.109 to callit(ypserv): request from unauthorized host
Jan 16 19:43:10 sodium portmap[476]: connect from 131.225.166.107 to callit(ypserv): request from unauthorized host
Jan 16 19:43:13 sodium portmap[477]: connect from 131.225.166.112 to callit(ypserv): request from unauthorized host
Jan 16 19:43:17 sodium portmap[478]: connect from 131.225.166.113 to callit(ypserv): request from unauthorized host
Jan 16 19:44:14 sodium portmap[479]: connect from 131.225.166.100 to callit(ypserv): request from unauthorized host
Jan 16 19:44:37 sodium portmap[480]: connect from 131.225.166.105 to callit(ypserv): request from unauthorized host
Jan 16 19:44:37 sodium portmap[481]: connect from 131.225.166.104 to callit(ypserv): request from unauthorized host
Jan 16 19:44:39 sodium portmap[482]: connect from 131.225.166.106 to callit(ypserv): request from unauthorized host
Jan 16 19:45:12 sodium portmap[483]: connect from 131.225.166.111 to callit(ypserv): request from unauthorized host
Jan 16 20:15:21 sodium portmap[496]: connect from 131.225.166.97 to callit(ypserv): request from unauthorized host
Jan 16 20:25:32 sodium portmap[498]: connect from 131.225.166.99 to callit(ypserv): request from unauthorized host
Jan 16 20:31:18 sodium portmap[501]: connect from 131.225.166.99 to callit(ypserv): request from unauthorized host
Jan 16 20:39:12 sodium PAM_pwdb[373]: (login) session closed for user root
Jan 16 20:39:15 sodium PAM_pwdb[372]: (login) session closed for user root
Jan 16 20:39:26 sodium PAM_pwdb[371]: (login) session closed for user root
Jan 17 01:02:01 sodium PAM_pwdb[632]: (su) session opened for user nobody by (uid=99)
Jan 17 01:02:41 sodium PAM_pwdb[632]: (su) session closed for user nobody
Jan 17 20:57:24 sodium portmap[832]: connect from 200.241.55.5 to getport(mountd): request from unauthorized host
Jan 18 01:02:00 sodium PAM_pwdb[914]: (su) session opened for user nobody by (uid=99)
Jan 18 01:02:28 sodium PAM_pwdb[914]: (su) session closed for user nobody
Jan 18 16:04:38 sodium portmap[1003]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:04:42 sodium portmap[1004]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:04:48 sodium portmap[1005]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:04:56 sodium portmap[1006]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:05:06 sodium portmap[1007]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:08:30 sodium portmap[1008]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:08:34 sodium portmap[1009]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:08:40 sodium portmap[1010]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:00 sodium portmap[1011]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:04 sodium portmap[1012]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:10 sodium portmap[1013]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:18 sodium portmap[1014]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:28 sodium portmap[1015]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:09:40 sodium portmap[1016]: connect from 131.225.166.96 to callit(rstatd): request from unauthorized host
Jan 18 16:33:04 sodium PAM_pwdb[1033]: password for (root/0) changed by (root/0)
Jan 19 01:02:00 sodium PAM_pwdb[1231]: (su) session opened for user nobody by (uid=99)
Jan 19 01:02:19 sodium PAM_pwdb[1231]: (su) session closed for user nobody
Jan 20 01:02:00 sodium PAM_pwdb[1477]: (su) session opened for user nobody by (uid=99)
Jan 20 01:02:18 sodium PAM_pwdb[1477]: (su) session closed for user nobody
Jan 21 01:02:00 sodium PAM_pwdb[1659]: (su) session opened for user nobody by (uid=99)
Jan 21 01:02:20 sodium PAM_pwdb[1659]: (su) session closed for user nobody
Jan 21 03:55:33 sodium imapd[1707]: refused connect from 192.135.215.62
Jan 21 10:57:23 sodium in.rshd[1729]: connect from fnop.fnal.gov
Jan 21 10:57:23 sodium pam_rhosts_auth[1729]: allowed to root@fnop.fnal.gov as root
Jan 21 10:57:23 sodium PAM_pwdb[1729]: (rsh) session opened for user root by (uid=0)
Jan 21 10:57:23 sodium in.rshd[1729]: root@fnop.fnal.gov as root: cmd='rcp -p -t /usr/farm/lib/conserver.cf.7.4'
Jan 22 01:02:00 sodium PAM_pwdb[1841]: (su) session opened for user nobody by (uid=99)
Jan 22 01:02:20 sodium PAM_pwdb[1841]: (su) session closed for user nobody
