********************************************************************** WARNING: This system is for the use of authorized clients only. Individuals using the computer network system without authorization, or in excess of their authorization, are subject to having all their activity on this computer network system monitored and recorded by system personnel. To protect the computer network system from unauthorized use and to ensure the computer network systems is functioning properly, system administrators monitor this system. Anyone using this computer network system expressly consents to such monitoring and is advised that if such monitoring reveals possible conduct of criminal activity, system personnel may provide the evidence of such activity to law enforcement officers Access is restricted to authorized users only. Unauthorized access is a violation of state and federal, civil and criminal laws ********************************************************************** ********************************************************************** American College of Radiology HOST: DMZ-C4500X-R2-0 Configured for Data and Voice Use ********************************************************************** DMZ-C4500x-R2-0#sho log Syslog logging: enabled (0 messages dropped, 24 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled) No Active Message Discriminator. No Inactive Message Discriminator. Console logging: level debugging, 4629 messages logged, xml disabled, filtering disabled Monitor logging: disabled Buffer logging: level debugging, 187 messages logged, xml disabled, filtering disabled Exception Logging: size (8192 bytes) Count and timestamp logging messages: disabled Persistent logging: disabled No active filter modules. Trap logging: level informational, 4272 message lines logged Logging to 10.11.175.199 (udp port 514, audit disabled, link up), 62 message lines logged, 0 message lines rate-limited, 0 message lines dropped-by-MD, xml disabled, sequence number disabled filtering disabled Logging Source-Interface: VRF Name: FastEthernet1 mgmtVrf Log Buffer (512000 bytes): 004056: Dec 21 15:00:39.754 EDT: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (512000) 004057: Dec 21 15:00:39.755 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging buffered 512000 004058: Dec 21 15:00:54.554 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging trap informational 004059: Dec 21 15:00:55.553 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.144.37 port 514 started - CLI initiated 004060: Dec 21 15:00:55.609 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.89) 004061: Dec 21 15:01:00.202 EDT: %SYS-7-USERLOG_DEBUG: Message from tty1(user id: mradmin): Hello 004062: Dec 21 15:34:18.724 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.89) 004063: Dec 21 15:34:18.724 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.89 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004064: Dec 28 03:03:47.135 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004065: Dec 28 03:03:48.371 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:03:48 EDT Thu Dec 28 2017 004066: Dec 28 03:03:49.375 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:03:49 EDT Thu Dec 28 2017 004067: Dec 28 03:03:49.381 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004068: Dec 28 03:03:49.381 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004069: Dec 28 03:03:49.728 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004070: Dec 28 03:03:50.943 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:03:50 EDT Thu Dec 28 2017 004071: Dec 28 03:03:51.947 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:03:51 EDT Thu Dec 28 2017 004072: Dec 28 03:03:51.953 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004073: Dec 28 03:03:51.953 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 1) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004074: Dec 28 03:03:52.295 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004075: Dec 28 03:03:53.511 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:03:53 EDT Thu Dec 28 2017 004076: Dec 28 03:03:53.511 EDT: %SEC_LOGIN-1-QUIET_MODE_ON: Still timeleft for watching failures is 54 secs, [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] [ACL: sl_def_acl] at 03:03:53 EDT Thu Dec 28 2017 004077: Dec 28 03:03:53.511 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004078: Dec 28 03:03:53.511 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004079: Dec 28 03:05:53.511 EDT: %SEC_LOGIN-5-QUIET_MODE_OFF: Quiet Mode is OFF, because block period timed out at 03:05:53 EDT Thu Dec 28 2017 004080: Jan 4 03:02:15.304 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004081: Jan 4 03:02:16.523 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:02:16 EDT Thu Jan 4 2018 004082: Jan 4 03:02:17.527 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:02:17 EDT Thu Jan 4 2018 004083: Jan 4 03:02:17.531 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004084: Jan 4 03:02:17.532 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004085: Jan 4 03:02:17.883 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004086: Jan 4 03:02:19.103 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:02:19 EDT Thu Jan 4 2018 004087: Jan 4 03:02:20.111 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:02:20 EDT Thu Jan 4 2018 004088: Jan 4 03:02:20.116 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004089: Jan 4 03:02:20.116 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 1) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004090: Jan 4 03:02:20.464 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004091: Jan 4 03:02:21.679 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:02:21 EDT Thu Jan 4 2018 004092: Jan 4 03:02:21.679 EDT: %SEC_LOGIN-1-QUIET_MODE_ON: Still timeleft for watching failures is 31 secs, [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] [ACL: sl_def_acl] at 03:02:21 EDT Thu Jan 4 2018 004093: Jan 4 03:02:21.679 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004094: Jan 4 03:02:21.679 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004095: Jan 4 03:04:21.679 EDT: %SEC_LOGIN-5-QUIET_MODE_OFF: Quiet Mode is OFF, because block period timed out at 03:04:21 EDT Thu Jan 4 2018 004096: Jan 10 09:56:05.760 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004097: Jan 10 09:56:10.743 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: admin] [Source: 10.3.17.88] [localport: 22] at 09:56:10 EDT Wed Jan 10 2018 004098: Jan 10 09:56:10.743 EDT: %SSH-5-SSH2_USERAUTH: User 'admin' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004099: Jan 10 09:56:16.988 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 1) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004100: Jan 10 09:56:21.919 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 09:56:21 EDT Wed Jan 10 2018 004101: Jan 10 09:56:21.919 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 1) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004102: Jan 10 09:56:23.797 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 2(10.3.17.88) 004103: Jan 10 09:56:23.797 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 1) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004104: Jan 10 10:00:27.565 EDT: %SYS-6-LOGOUT: User admin has exited tty session 1(10.3.17.88) 004105: Jan 10 10:00:27.565 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user 'admin' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004106: Jan 10 11:41:36.044 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004107: Jan 10 11:41:40.359 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 11:41:40 EDT Wed Jan 10 2018 004108: Jan 10 11:41:40.359 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004109: Jan 10 11:41:53.589 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.175.199 port 0 CLI Request Triggered 004110: Jan 10 11:41:53.589 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging host 10.11.175.199 004111: Jan 10 11:41:53.592 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.175.199 port 514 started - CLI initiated 004112: Jan 10 11:41:57.318 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.144.37 port 514 stopped - CLI initiated 004113: Jan 10 11:41:57.319 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no logging host 10.11.144.37 004114: Jan 10 11:41:57.956 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004115: Jan 10 11:42:13.733 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004116: Jan 10 11:42:15.645 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no shutdown 004117: Jan 10 11:42:18.646 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:shutdown 004118: Jan 10 11:42:19.358 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004119: Jan 10 12:27:09.688 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004120: Jan 10 12:27:09.688 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004121: Jan 10 12:37:33.191 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004122: Jan 10 12:37:37.939 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 12:37:37 EDT Wed Jan 10 2018 004123: Jan 10 12:37:37.939 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004124: Jan 10 12:38:57.580 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging source-interface FastEthernet1 004125: Jan 10 12:39:06.817 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004126: Jan 10 12:41:11.536 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004127: Jan 10 12:41:13.281 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no shutdown 004128: Jan 10 12:41:14.593 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:shutdown 004129: Jan 10 12:41:15.536 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004130: Jan 10 12:46:21.770 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004131: Jan 10 12:47:31.077 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging source-interface FastEthernet1 vrf mgmtVrf 004132: Jan 10 12:47:32.169 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004133: Jan 10 12:47:50.501 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004134: Jan 10 12:47:53.094 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no shutdown 004135: Jan 10 12:48:03.174 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:shutdown 004136: Jan 10 12:48:04.846 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004137: Jan 10 12:48:37.135 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004138: Jan 10 12:48:48.417 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004139: Jan 10 12:48:50.528 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004140: Jan 10 12:48:57.616 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004141: Jan 10 12:49:01.920 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004142: Jan 10 12:50:22.210 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004143: Jan 10 12:53:41.330 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging source-interface 004144: Jan 10 12:53:43.433 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004145: Jan 10 12:55:28.925 EDT: %SYS-5-LOG_CONFIG_CHANGE: Monitor logging: level informational, xml disabled, filtering disabled 004146: Jan 10 12:55:28.925 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging monitor informational 004147: Jan 10 12:55:30.237 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004148: Jan 10 12:55:52.790 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004149: Jan 10 12:55:56.709 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004150: Jan 10 12:55:58.349 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004151: Jan 10 13:25:58.847 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004152: Jan 10 13:25:58.847 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004153: Jan 10 13:25:58.847 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004154: Jan 10 14:42:09.501 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004155: Jan 10 14:42:14.236 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 14:42:14 EDT Wed Jan 10 2018 004156: Jan 10 14:42:14.236 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004157: Jan 10 14:42:29.474 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/11 004158: Jan 10 14:42:32.153 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004159: Jan 10 14:42:33.401 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004160: Jan 10 14:42:33.873 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004161: Jan 10 14:43:25.533 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no logging source-interface 004162: Jan 10 14:43:26.817 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004163: Jan 10 14:43:50.990 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no logging source-interface FastEthernet1 vrf mgmtVrf 004164: Jan 10 14:43:51.876 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004165: Jan 10 14:44:14.925 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/8 004166: Jan 10 14:44:17.677 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004167: Jan 10 14:44:18.989 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004168: Jan 10 14:44:19.485 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004169: Jan 10 14:44:56.398 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004170: Jan 10 14:45:42.633 EDT: %SYS-5-LOG_CONFIG_CHANGE: Monitor logging disabled 004171: Jan 10 14:45:42.634 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no logging monitor informational 004172: Jan 10 14:45:43.720 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004173: Jan 10 14:45:54.497 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/8 004174: Jan 10 14:45:59.760 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Syslog Test 004175: Jan 10 14:46:00.960 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004176: Jan 10 14:46:02.640 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004177: Jan 10 14:50:43.963 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.175.199 port 514 stopped - CLI initiated 004178: Jan 10 14:50:43.963 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no logging host 10.11.175.199 004179: Jan 10 14:50:48.529 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004180: Jan 10 14:51:05.443 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.175.199 port 0 CLI Request Triggered 004181: Jan 10 14:51:05.443 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging host 10.11.175.199 004182: Jan 10 14:51:05.446 EDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.11.175.199 port 514 started - CLI initiated 004183: Jan 10 14:51:18.299 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging source-interface FastEthernet1 vrf mgmtVrf 004184: Jan 10 14:51:18.995 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004185: Jan 10 14:51:27.987 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/8 004186: Jan 10 14:51:30.187 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004187: Jan 10 14:51:31.140 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004188: Jan 10 15:05:20.080 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 1) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004189: Jan 10 15:05:24.371 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 15:05:24 EDT Wed Jan 10 2018 004190: Jan 10 15:05:24.371 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 1) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004191: Jan 10 15:05:40.231 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 2(10.3.17.88) 004192: Jan 10 15:05:40.231 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 1) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004193: Jan 10 15:08:56.781 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004194: Jan 10 15:38:58.288 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004195: Jan 10 15:38:58.288 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004196: Jan 10 15:39:22.556 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004197: Jan 10 15:39:28.179 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 15:39:28 EDT Wed Jan 10 2018 004198: Jan 10 15:39:28.179 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004199: Jan 10 15:39:31.058 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging on 004200: Jan 10 15:39:33.434 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004201: Jan 10 15:40:33.700 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004202: Jan 10 15:40:33.700 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004203: Jan 10 15:40:50.044 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004204: Jan 10 15:40:59.555 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 15:40:59 EDT Wed Jan 10 2018 004205: Jan 10 15:40:59.555 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004206: Jan 10 15:42:08.287 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging on 004207: Jan 10 15:42:10.818 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004208: Jan 10 15:42:52.752 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004209: Jan 10 15:42:52.752 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004210: Jan 10 15:43:03.143 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004211: Jan 10 15:43:08.171 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 15:43:08 EDT Wed Jan 10 2018 004212: Jan 10 15:43:08.171 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004213: Jan 10 15:43:17.209 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging on 004214: Jan 10 15:43:17.865 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004215: Jan 10 15:44:10.851 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004216: Jan 10 15:45:05.797 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:logging source-interface FastEthernet1 vrf mgmtVrf 004217: Jan 10 15:45:06.412 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004218: Jan 10 15:45:19.501 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:interface TenGigabitEthernet1/8 004219: Jan 10 15:45:22.374 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:description Test 004220: Jan 10 15:45:23.358 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:mradmin logged command:no description 004221: Jan 10 15:45:25.229 EDT: %SYS-5-CONFIG_I: Configured from console by mradmin on vty0 (10.3.17.88) 004222: Jan 10 15:55:37.329 EDT: %SYS-6-LOGOUT: User mradmin has exited tty session 1(10.3.17.88) 004223: Jan 10 15:55:37.329 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.3.17.88 (tty = 0) for user '' using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' closed 004224: Jan 11 03:00:27.453 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004225: Jan 11 03:00:28.671 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:00:28 EDT Thu Jan 11 2018 004226: Jan 11 03:00:29.675 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:00:29 EDT Thu Jan 11 2018 004227: Jan 11 03:00:29.681 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004228: Jan 11 03:00:29.682 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004229: Jan 11 03:00:30.017 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004230: Jan 11 03:00:31.231 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:00:31 EDT Thu Jan 11 2018 004231: Jan 11 03:00:32.239 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:00:32 EDT Thu Jan 11 2018 004232: Jan 11 03:00:32.245 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 1) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004233: Jan 11 03:00:32.245 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 1) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004234: Jan 11 03:00:32.589 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Succeeded 004235: Jan 11 03:00:33.803 EDT: %SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] at 03:00:33 EDT Thu Jan 11 2018 004236: Jan 11 03:00:33.803 EDT: %SEC_LOGIN-1-QUIET_MODE_ON: Still timeleft for watching failures is 48 secs, [user: ] [Source: 10.5.128.118] [localport: 22] [Reason: Login Authentication Failed] [ACL: sl_def_acl] at 03:00:33 EDT Thu Jan 11 2018 004237: Jan 11 03:00:33.803 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.5.128.118 (tty = 0) using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' Failed 004238: Jan 11 03:00:33.803 EDT: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.5.128.118 (tty = 0) for user '' using crypto cipher 'aes128-ctr', hmac 'hmac-sha1' closed 004239: Jan 11 03:02:33.803 EDT: %SEC_LOGIN-5-QUIET_MODE_OFF: Quiet Mode is OFF, because block period timed out at 03:02:33 EDT Thu Jan 11 2018 004240: Jan 11 07:38:48.895 EDT: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded 004241: Jan 11 07:38:53.103 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: mradmin] [Source: 10.3.17.88] [localport: 22] at 07:38:53 EDT Thu Jan 11 2018 004242: Jan 11 07:38:53.103 EDT: %SSH-5-SSH2_USERAUTH: User '' authentication for SSH2 Session from 10.3.17.88 (tty = 0) using crypto cipher 'aes256-ctr', hmac 'hmac-sha1' Succeeded DMZ-C4500x-R2-0#exit