subject:"\*\*\* SECURITY information for sa\-vm1.apache.org \*\*\*"

* SECURITY information for sa-vm1.apache.org *

2019-05-21 Thread pds

sa-vm1.apache.org : May 21 20:35:50 : pds : 3 incorrect password attempts ; TTY=pts/2 ; PWD=/home/pds ; USER=root ; COMMAND=/bin/su -

* SECURITY information for sa-vm1.apache.org *

2019-05-21 Thread pds

sa-vm1.apache.org : May 21 20:35:05 : pds : 3 incorrect password attempts ; TTY=pts/2 ; PWD=/home/pds ; USER=root ; COMMAND=/bin/nano test

* SECURITY information for sa-vm1.apache.org *

2019-05-21 Thread pds

sa-vm1.apache.org : May 21 20:33:03 : pds : 3 incorrect password attempts ; TTY=pts/2 ; PWD=/home/pds ; USER=root ; COMMAND=/bin/nano test

* SECURITY information for sa-vm1.apache.org *

2019-05-21 Thread pds

sa-vm1.apache.org : May 21 20:27:56 : pds : 3 incorrect password attempts ; TTY=pts/2 ; PWD=/home/pds ; USER=root ; COMMAND=/bin/nano test

* SECURITY information for sa-vm1.apache.org *

2019-04-20 Thread sidney

sa-vm1.apache.org : Apr 21 01:42:10 : sidney : 3 incorrect password attempts ; TTY=pts/0 ; PWD=/home/sidney ; USER=root ; COMMAND=/bin/echo foo

Re: * SECURITY information for sa-vm1.apache.org *

2019-03-22 Thread Bill Cole

On 22 Mar 2019, at 11:36, aut...@sa-vm1.apache.org wrote: sa-vm1.apache.org : Mar 22 15:36:17 : automc : user NOT in sudoers ; TTY=pts/0 ; PWD=/usr/local/spamassassin/automc ; USER=root ; COMMAND=/bin/su - Nothing to see here but me missing a step... -- Bill Cole b...@scconsult.com or

* SECURITY information for sa-vm1.apache.org *

2019-03-22 Thread automc

sa-vm1.apache.org : Mar 22 15:36:17 : automc : user NOT in sudoers ; TTY=pts/0 ; PWD=/usr/local/spamassassin/automc ; USER=root ; COMMAND=/bin/su -

* SECURITY information for sa-vm1.apache.org *

2018-12-27 Thread billcole

sa-vm1.apache.org : Dec 27 22:22:30 : billcole : 3 incorrect password attempts ; TTY=pts/0 ; PWD=/home/billcole ; USER=root ; COMMAND=list

Re: * SECURITY information for sa-vm1.apache.org *

2018-12-27 Thread Bill Cole

On 27 Dec 2018, at 17:18, billc...@sa-vm1.apache.org wrote: sa-vm1.apache.org : Dec 27 22:18:42 : billcole : 3 incorrect password attempts ; TTY=pts/0 ; PWD=/home/billcole ; USER=root ; COMMAND=list I've opened an INFRA ticket so there will be no more of these.