warden.int.autonlab.org daily security run output

punosevac72 at gmail.com punosevac72 at gmail.com
Tue Sep 15 03:32:21 EDT 2015


Checking setuid files and devices:

Checking negative group permissions:

Checking for uids of 0:
root 0
toor 0

Checking for passwordless accounts:

Checking login.conf permissions:

warden.int.autonlab.org ipfw denied packets:

warden.int.autonlab.org pf denied packets:
+++ /tmp/security.nDB2yoXz	2015-09-15 03:07:02.711875108 -0400
+block return in all [ Evaluations: 985233 Packets: 258 Bytes: 19794 States: 0 ]
+block return quick from <bruteforce> to any [ Evaluations: 985234 Packets: 0 Bytes: 0 States: 0 ]
+block return in quick on egress proto tcp from <sshguard> to any port = ssh label "ssh bruteforce" [ Evaluations: 985233 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick on ! lo0 inet from 127.0.0.0/8 to any [ Evaluations: 985236 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick from urpf-failed to any [ Evaluations: 907143 Packets: 471442 Bytes: 268962164 States: 0 ]
+block return in on ! lo0 proto tcp from any to any port 6000:6010 [ Evaluations: 435702 Packets: 0 Bytes: 0 States: 0 ]

warden.int.autonlab.org login failures:

warden.int.autonlab.org refused connections:

Checking for packages with security vulnerabilities:
php56-5.6.11
pcre-8.37_2
screen-4.3.1_1
ruby-2.0.0.645,1
go-1.4.2,1

-- End of security output --


More information about the Autonlab-sysinfo mailing list