On Sat, Feb 23, 2013 at 11:11 PM, Leo Donahue - RDSA IT < leodona...@mail.maricopa.gov> wrote:
> ________________________________________ > From: Leo Donahue - RDSA IT [leodona...@mail.maricopa.gov] > Sent: Saturday, February 23, 2013 9:08 PM > To: Tomcat Users List > Subject: RE: PermGen space errors > > Since my last post, upgrading to 7.0.37 and to the latest Java 1.6.0_39, > nothing in the logs out of the ordinary. Except for this in catalina. > What are these? Are these attempts to log into manager/html? > > Feb 23, 2013 7:37:16 PM org.apache.catalina.realm.LockOutRealm authenticate > WARNING: An attempt was made to authenticate the locked user "admin" > Feb 23, 2013 7:37:16 PM org.apache.catalina.realm.LockOutRealm authenticate > WARNING: An attempt was made to authenticate the locked user "admin" > Feb 23, 2013 7:37:17 PM org.apache.catalina.realm.LockOutRealm authenticate > WARNING: An attempt was made to authenticate the locked user "tomcat" > Feb 23, 2013 7:37:17 PM org.apache.catalina.realm.LockOutRealm authenticate > WARNING: An attempt was made to authenticate the locked user "admin" > > Yes, they are attempts to login to your tomcat. You gotta love tomcat for that. :) You can cross-reference those WARNING msgs with the same date/time in localhost access log to determine the IP address. okay, never mind, that's what you did (below). right? :) > > --------------------------------------------------------------------------------------------------------- > > 208.43.50.42 - - [23/Feb/2013:19:37:15 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:16 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > 208.43.50.42 - - [23/Feb/2013:19:37:17 -0700] "HEAD /manager/html > HTTP/1.0" 401 - > > please don't do that. > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
