Its pretty short...
login as: root
[email protected]'s password:
Last login: Wed Dec 14 12:09:07 2016 from fai1058623.bhs.bannerhealth.com
[root@fai0nagiosxi ~]# tail /var/log/httpd/*_log
==> /var/log/httpd/access_log <==
127.0.0.1 - - [01/Mar/2017:12:59:24 -0900] "POST /nagiosxi/backend/ HTTP/1.1" 200 695 "-" "BinGet/1.00.A (
http://www.bin-co.com/php/scripts/load/)"
10.41.3.207 - - [01/Mar/2017:12:59:24 -0900] "GET /nagiosxi/admin/updates.php?&= HTTP/1.1" 200 27749 "
https://fai0nagiosxi.bhs.bannerhealth.c ... pdates.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
10.41.3.207 - - [01/Mar/2017:12:59:24 -0900] "GET /nagiosxi/ajaxhelper.php?cmd=getusermeta&opts=view_rotation_enabled&nsp=12b5658ee3bfbe0af9cad724e98037f9ab54f6eed97c9cb154914d19f10a7836 HTTP/1.1" 200 1 "
https://fai0nagiosxi.bhs.bannerhealth.c ... pdates.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
10.41.3.207 - - [01/Mar/2017:12:59:25 -0900] "GET /nagiosxi/ajaxhelper.php?cmd=getusermeta&opts=view_rotation_enabled&nsp=12b5658ee3bfbe0af9cad724e98037f9ab54f6eed97c9cb154914d19f10a7836 HTTP/1.1" 200 1 "
https://fai0nagiosxi.bhs.bannerhealth.c ... tes.php?&=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
127.0.0.1 - - [01/Mar/2017:12:59:25 -0900] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (
http://www.bin-co.com/php/scripts/load/)"
127.0.0.1 - - [01/Mar/2017:12:59:25 -0900] "POST /nagiosxi/backend/ HTTP/1.1" 200 1593 "-" "BinGet/1.00.A (
http://www.bin-co.com/php/scripts/load/)"
10.41.3.207 - - [01/Mar/2017:12:59:25 -0900] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=12b5658ee3bfbe0af9cad724e98037f9ab54f6eed97c9cb154914d19f10a7836 HTTP/1.1" 200 1610 "
https://fai0nagiosxi.bhs.bannerhealth.c ... pdates.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
10.41.3.207 - - [01/Mar/2017:12:59:25 -0900] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_tray_alert_html%22%2C%22args%22%3A%22%22%7D&nsp=12b5658ee3bfbe0af9cad724e98037f9ab54f6eed97c9cb154914d19f10a7836 HTTP/1.1" 200 1183 "
https://fai0nagiosxi.bhs.bannerhealth.c ... pdates.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
10.41.3.207 - - [01/Mar/2017:12:59:25 -0900] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_available_updates_html%22%2C%22args%22%3A%22%22%7D&nsp=12b5658ee3bfbe0af9cad724e98037f9ab54f6eed97c9cb154914d19f10a7836 HTTP/1.1" 200 753 "
https://fai0nagiosxi.bhs.bannerhealth.c ... tes.php?&=" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36"
127.0.0.1 - - [01/Mar/2017:12:59:42 -0900] "POST /nagiosxi/backend/ HTTP/1.1" 200 815 "-" "BinGet/1.00.A (
http://www.bin-co.com/php/scripts/load/)"
==> /var/log/httpd/error_log <==
[Sun Feb 26 03:25:02 2017] [notice] Digest: done
[Sun Feb 26 03:25:02 2017] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Tue Feb 28 11:35:34 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Tue Feb 28 11:35:35 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Tue Feb 28 11:35:35 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Tue Feb 28 12:14:02 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Tue Feb 28 12:14:02 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Tue Feb 28 12:14:02 2017] [error] [client 10.41.16.130] File does not exist: /var/www/html/sdk
[Wed Mar 01 12:57:07 2017] [error] [client 10.41.3.207] PHP Warning: ldap_bind(): Unable to bind to server: Invalid credentials in /usr/local/nagiosxi/html/includes/components/ldap_ad_integration/adLDAP/src/adLDAP.php on line 714, referer:
https://fai0nagiosxi.bhs.bannerhealth.c ... f&noauth=1
[Wed Mar 01 12:59:25 2017] [error] [client 10.41.3.207] PHP Warning: file_get_contents(/usr/local/nagiosxi/tmp/upgrade.log): failed to open stream: No such file or directory in /usr/local/nagiosxi/html/admin/updates.php on line 548, referer:
https://fai0nagiosxi.bhs.bannerhealth.c ... pdates.php
==> /var/log/httpd/ssl_access_log <==
==> /var/log/httpd/ssl_error_log <==
==> /var/log/httpd/ssl_request_log <==
[root@fai0nagiosxi ~]#