Jul 13 11:39:36 IH-ServerraumInet-AP syslog.info syslogd started: BusyBox v1.19.4 Jul 13 11:39:50 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 11:39:50 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db anonymous-lan88-n2 Jul 13 11:39:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.229 ac:81:12:d0:19:15 Jul 13 11:39:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.229 ac:81:12:d0:19:15 anonymous-lan100-n2 Jul 13 11:40:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:40:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:40:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'guru.avg.com'/'AVGINET12-WV7HX64 120FREE AVI=2437/5127 BUILD=2178 MSI=2178 LOC=1033 LIC=4UWWU-WBDXC-VYFN3-QDJMH-42AOA-K DIAG=3841250 OPF=0 PCA= EVA=1 Jul 13 11:40:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:40:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'AVGINET12-WV7HX64 120FREE AVI=2437/5127 BUILD=2178 MSI=2178 LOC=1033 LIC=4UWWU-WBDXC-VYFN3-QDJMH-42AOA-K DIAG=3841250 OPF=0 PCA= EVA=1 EDA=201 Jul 13 11:40:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'guru.avg.com'/'AVGINET12-WV7HX64 120FREE AVI=2437/5127 BUILD=2178 MSI=2178 LOC=1033 LIC=4UWWU-WBDXC-VYFN3-QDJMH-42AOA-K DIAG=3841250 OPF=0 PCA= EVA=1 Jul 13 11:40:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:40:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'AVGINET12-WV7HX64 120FREE AVI=2437/5127 BUILD=2178 MSI=2178 LOC=1033 LIC=4UWWU-WBDXC-VYFN3-QDJMH-42AOA-K DIAG=3841250 OPF=0 PCA= EVA=1 EDA=201 Jul 13 11:40:09 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'mmi.explabs.net'/'' Jul 13 11:40:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.140 8c:fa:ba:92:6f:af Jul 13 11:40:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.140 8c:fa:ba:92:6f:af anonymous-lan11-n2 Jul 13 11:40:20 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 11:40:40 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'topi.toshiba-tro.de'/'' Jul 13 11:40:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:40:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: '' Jul 13 11:41:01 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 11:41:01 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db Thorsten-Mobil Jul 13 11:41:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:41:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:41:07 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:41:07 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 11:41:07 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 11:41:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:41:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c Wiebking-PC Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:41:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'mscrl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:42:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:42:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:42:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 11:42:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 11:42:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:42:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:43:02 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:43:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:43:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:43:07 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.microsoft.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:43:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.156 50:ea:d6:a0:ad:6e Jul 13 11:43:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.156 50:ea:d6:a0:ad:6e anonymous-lan27-n2 Jul 13 11:43:23 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '50:ea:d6:a0:ad:6e' is from 'eth0' = lan-DEV Jul 13 11:43:29 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:43:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.184 dc:2b:61:c1:33:53 Jul 13 11:43:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.184 dc:2b:61:c1:33:53 anonymous-lan55-n2 Jul 13 11:43:30 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'dc:2b:61:c1:33:53' is from 'eth0' = lan-DEV Jul 13 11:43:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'tools.google.com'/'Google Update/1.3.21.111;winhttp;cup' Jul 13 11:43:59 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 11:43:59 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 11:44:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:44:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:44:07 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'tools.google.com'/'Google Update/1.3.21.111;winhttp;cup' Jul 13 11:44:29 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:44:33 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.247 14:8f:c6:a8:14:cc Jul 13 11:44:33 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.247 14:8f:c6:a8:14:cc anonymous-lan118-n2 Jul 13 11:44:33 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '14:8f:c6:a8:14:cc' is from 'eth0' = lan-DEV Jul 13 11:45:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:45:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:45:05 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:45:05 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ olsr_plausi_check(): costs getting better: 0 -> 0 (0%, best ever: 0) Jul 13 11:45:05 IH-ServerraumInet-AP authpriv.info dropbear[10926]: Exit before auth: Exited normally Jul 13 11:45:08 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db http_query_string_sanitize(): REMOTE_ADDR: Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c21adeec54514152912f94f38cb57885' from 00:08:02:9e:89:d6 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '6c02fdde4e526c3744aa87a16afd7f49' from 00:1d:09:df:11:98 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '4226c806da7be3e7a0a2f01c8aa8ae6c' from 00:1d:60:9b:d3:91 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fcfab7ef4bc41f4bb5c36a01658419a5' from 00:1d:60:9b:d3:e6 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c309ffecd52c0a5f1d02ec31853bf618' from 00:1e:68:29:4a:db @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '686b6b0269bce14318d75f6dec1efebd' from 00:1f:16:33:fc:af @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fbe8be9723f18e0ae0468eed0cc0fd94' from 00:25:d3:30:46:53 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '84903d4d21b0b491ed06ad82b25c760e' from 00:26:5e:16:90:97 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '21c88e61b7580e51c6805217a04e125f' from 04:54:53:31:f8:c0 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db loop(): updating 08:2e:5f:05:23:47 from node 10.10.2.1: +3772141/485113 bytes, +649 sec Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: now context: update Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: free context: update Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '5255660b43e21b72910b58032d2a4687' from 14:8f:c6:a8:14:cc @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '6ab87c7e41db65b692644e3a8e44a611' from 18:a9:05:e7:cc:85 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fec5730abce461abf59f75551edf42d3' from 50:ea:d6:a0:ad:6e @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'ad4144e11e4dc4430e214fbbac8cc367' from 70:d4:f2:57:26:df @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '98e509a0566a43a354b4b7d1698f6065' from 7c:c5:37:c4:49:2b @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'aa4ef83e956079edbf3a990187e73253' from 88:ae:1d:76:7c:71 @ 10.10.2.1 Jul 13 11:45:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e4d765bd056b6f62091bc28d3638e1df' from 8c:fa:ba:92:6f:af @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '72474cb2e51a6596f4d4f4c074d86087' from bc:05:43:7b:03:58 @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '75de81e4a08b5dc383c5143b475fe609' from cc:08:e0:86:51:31 @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '4fe8232c621fdd6499aff1287c60e661' from dc:2b:61:c1:33:53 @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'a316c0f1824f5b8dfd7d9ff49737e302' from e4:d5:3d:69:30:77 @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e862d34885f656ccf04e80e97006280a' from e8:11:32:9f:8d:3d @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '27301d1647d949782af3562831911f4c' from e8:39:df:fa:88:5c @ 10.10.2.1 Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db summary(): 23 devices, 268.062.438 bytes Jul 13 11:45:10 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 45/45 sec Jul 13 11:45:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 11:45:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 11:45:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'c2r.microsoft.com'/'Microsoft BITS/7.5' Jul 13 11:45:55 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 0/45 sec Jul 13 11:45:56 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.reverse_ssh_tunnel net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:45:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.188 10:0b:a9:54:45:2c Jul 13 11:45:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.188 10:0b:a9:54:45:2c CESAINB1205 Jul 13 11:45:57 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring wget_do(): pidnum by parent process: 11583 -> 11585 Jul 13 11:45:58 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:45:59 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring monitoring(): sending message: 'http://intercity-vpn.de/networks/boltenhagendh/meshrdf/ [...]' Jul 13 11:46:16 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/kalua_init gen_loader(): [OK] done '/tmp/loader' (in 4.01sec, using 396512 bytes in /tmp/kalua) - you MUST reinclude the new loader with '. /tmp/loader' if this is an interactive shell Jul 13 11:46:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.210 e8:11:32:9f:8d:3d Jul 13 11:46:22 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.210 e8:11:32:9f:8d:3d anonymous-lan81-n2 Jul 13 11:46:27 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.247 14:8f:c6:a8:14:cc Jul 13 11:46:27 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.247 14:8f:c6:a8:14:cc anonymous-lan118-n2 Jul 13 11:46:27 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '14:8f:c6:a8:14:cc' is from 'eth0' = lan-DEV Jul 13 11:47:23 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.235 00:25:d3:30:46:53 Jul 13 11:47:23 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.235 00:25:d3:30:46:53 anonymous-lan106-n2 Jul 13 11:47:25 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.224 cc:08:e0:86:51:31 Jul 13 11:47:25 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.224 cc:08:e0:86:51:31 anonymous-lan95-n2 Jul 13 11:47:26 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'cc:08:e0:86:51:31' is from 'eth0' = lan-DEV Jul 13 11:47:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:47:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:48:16 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ stopwatch_stop(): task 'ulog_squeeze_log' lasts 134.46 seconds (2min 14sec) Jul 13 11:48:16 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_squeeze_log(): squeezed to 20% (470708 bytes/8418 lines @ 62.8148 lines/sec, load: 1.45) Jul 13 11:48:17 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (152972 -> 35727 bytes -> 23% on file '/tmp/user-27301d1647d949782af3562831911f4c-e8:39:df:fa:88:5c-10.10.2.253-2012jul13-node2-reboots0.ulog.up27768.gz.ulo Jul 13 11:48:19 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-27301d1647d949782af3562831911f4c-e8:39:df:fa:88:5c-10.10.2.253-2012jul13-node2-reboots0.ulog.up27768.gz.ulog' (35727 bytes) was successful - removin Jul 13 11:48:30 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (80838 -> 18478 bytes -> 22% on file '/tmp/user-84903d4d21b0b491ed06ad82b25c760e-00:26:5e:16:90:97-10.10.2.223-2012jul13-node2-reboots0.ulog.up27782.gz.ulog Jul 13 11:48:31 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-84903d4d21b0b491ed06ad82b25c760e-00:26:5e:16:90:97-10.10.2.223-2012jul13-node2-reboots0.ulog.up27782.gz.ulog' (18478 bytes) was successful - removin Jul 13 11:48:41 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (136915 -> 32119 bytes -> 23% on file '/tmp/user-c309ffecd52c0a5f1d02ec31853bf618-00:1e:68:29:4a:db-10.10.2.217-2012jul13-node2-reboots0.ulog.up27792.gz.ulo Jul 13 11:48:43 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-c309ffecd52c0a5f1d02ec31853bf618-00:1e:68:29:4a:db-10.10.2.217-2012jul13-node2-reboots0.ulog.up27792.gz.ulog' (32119 bytes) was successful - removin Jul 13 11:48:43 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (136507 -> 23673 bytes -> 17% on file '/tmp/user-e862d34885f656ccf04e80e97006280a-e8:11:32:9f:8d:3d-10.10.2.210-2012jul13-node2-reboots0.ulog.up27795.gz.ulo Jul 13 11:48:45 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-e862d34885f656ccf04e80e97006280a-e8:11:32:9f:8d:3d-10.10.2.210-2012jul13-node2-reboots0.ulog.up27795.gz.ulog' (23673 bytes) was successful - removin Jul 13 11:48:49 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: now context: db_backup Jul 13 11:48:50 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] wrote 48489 bytes to /tmp/db_backup.tgz.temp.11838 Jul 13 11:48:50 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] moved /tmp/db_backup.tgz.temp.11838 -> /www/cgi-bin/db_backup.tgz Jul 13 11:48:50 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: free context: db_backup Jul 13 11:48:52 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ backup_userdata(): copying '/www/cgi-bin/db_backup.tgz' (48489 bytes) was successful Jul 13 11:48:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.130 00:1d:09:df:11:98 Jul 13 11:48:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.130 00:1d:09:df:11:98 anonymous-lan1-n2 Jul 13 11:48:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.219 08:2e:5f:05:23:47 Jul 13 11:48:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.219 08:2e:5f:05:23:47 anonymous-lan90-n2 Jul 13 11:49:13 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.208 00:1d:60:9b:d3:91 Jul 13 11:49:13 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.208 00:1d:60:9b:d3:91 anonymous-lan79-n2 Jul 13 11:49:27 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/kalua_init gen_loader(): [OK] done '/tmp/loader' (in 1.97sec, using 396547 bytes in /tmp/kalua) - you MUST reinclude the new loader with '. /tmp/loader' if this is an interactive shell Jul 13 11:49:30 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 11:49:40 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.168 00:1d:60:9b:d3:e6 Jul 13 11:49:40 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.168 00:1d:60:9b:d3:e6 anonymous-lan39-n2 Jul 13 11:49:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.246 88:ae:1d:76:7c:71 Jul 13 11:49:57 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.246 88:ae:1d:76:7c:71 anonymous-lan117-n2 Jul 13 11:50:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 15543 -> 15545 Jul 13 11:50:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:50:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] timediff > 60 sec = 300 Jul 13 11:50:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 300 sec Jul 13 11:50:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:50:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 11:50:29 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 11:50:34 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:50:34 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c Wiebking-PC Jul 13 11:50:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.154 00:08:02:9e:89:d6 Jul 13 11:50:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.154 00:08:02:9e:89:d6 anonymous-lan25-n2 Jul 13 11:51:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:51:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:51:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 11:51:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db Thorsten-Mobil Jul 13 11:52:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:52:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:52:06 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:52:06 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 11:52:06 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 11:52:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:52:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c Wiebking-PC Jul 13 11:52:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 11:52:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 11:52:54 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 11:53:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:53:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:53:36 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '00:08:02:dd:91:ba' is from 'eth0' = lan-DEV Jul 13 11:53:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.140 8c:fa:ba:92:6f:af Jul 13 11:53:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.140 8c:fa:ba:92:6f:af anonymous-lan11-n2 Jul 13 11:53:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 11:54:01 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.229 ac:81:12:d0:19:15 Jul 13 11:54:01 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.229 ac:81:12:d0:19:15 Cora-HP Jul 13 11:54:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 16745 -> 16747 Jul 13 11:54:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:54:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 169.254.21.40 00:0a:e4:eb:53:5b Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.254 00:0a:e4:eb:53:5b Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.254 00:0a:e4:eb:53:5b Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.254 00:0a:e4:eb:53:5b anonymous-lan125-n2 Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '00:0a:e4:eb:53:5b' is from 'eth0' = lan-DEV Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '1faf481706677950a2538160a7aba78a' Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:54:28 CEST 2012' - IP:'10.10.2.254' - DNS:'unresolveable' = HASH:'1faf481706677950a2538160a7aba78a' - MAC:'00:0a:e4:eb:53:5b' - SIGNAL:'IH-ServerraumIn Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=1faf481706677950a2538160a7aba78a&MAC=00%3a0a%3ae4%3aeb%3a53%3a5b&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '48979159082568dd8d417ecb0d6b2055' Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:54:28 CEST 2012' - IP:'10.10.2.254' - DNS:'unresolveable' = HASH:'48979159082568dd8d417ecb0d6b2055' - MAC:'00:0a:e4:eb:53:5b' - SIGNAL:'IH-ServerraumIn Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=48979159082568dd8d417ecb0d6b2055&MAC=00%3a0a%3ae4%3aeb%3a53%3a5b&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 11:54:28 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 00:0a:e4:eb:53:5b/IH-ServerraumInet-AP Jul 13 11:54:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.223 00:26:5e:16:90:97 Jul 13 11:54:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.223 00:26:5e:16:90:97 anonymous-lan94-n2 Jul 13 11:55:02 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.140 8c:fa:ba:92:6f:af Jul 13 11:55:02 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.140 8c:fa:ba:92:6f:af anonymous-lan11-n2 Jul 13 11:55:02 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 11:55:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:55:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:55:38 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.254 00:0a:e4:eb:53:5b Jul 13 11:55:38 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.254 00:0a:e4:eb:53:5b acer-a9ce03bbc6 Jul 13 11:55:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'g.ceipmsn.com'/'SeaPort/3.0' Jul 13 11:55:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:55:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:55:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:55:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:55:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:55:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:55:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:55:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:56:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 17578 -> 17580 Jul 13 11:56:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:56:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:56:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:56:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:56:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:56:04 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'clients1.google.com'/'Mozilla/4.0 (compatible; Win32)' Jul 13 11:56:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:56:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; Win32)' Jul 13 11:56:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:56:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:56:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:56:09 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:56:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:56:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:56:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'searchclient.live.net'/'SeaPort/3.0' Jul 13 11:56:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 11:56:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'SeaPort/3.0' Jul 13 11:57:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:57:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:57:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.188 10:0b:a9:54:45:2c Jul 13 11:57:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.188 10:0b:a9:54:45:2c CESAINB1205 Jul 13 11:58:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:58:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:58:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.254 00:0a:e4:eb:53:5b Jul 13 11:58:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.254 00:0a:e4:eb:53:5b acer-a9ce03bbc6 Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.windowsupdate.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'download.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.update.microsoft.com'/'Windows-Update-Agent' Jul 13 11:58:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.140 8c:fa:ba:92:6f:af Jul 13 11:58:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.140 8c:fa:ba:92:6f:af anonymous-lan11-n2 Jul 13 11:58:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 11:59:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 18819 -> 18821 Jul 13 11:59:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 11:59:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 11:59:25 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 11:59:25 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 anonymous-lan36-n2 Jul 13 11:59:25 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 11:59:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 11:59:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 11:59:30 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'client.winamp.com'/'Winamp/5.621' Jul 13 11:59:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Winamp/5.621' Jul 13 11:59:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'download.nullsoft.com'/'Winamp/5.621' Jul 13 11:59:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 11:59:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Winamp/5.621' Jul 13 11:59:32 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'client.winamp.com'/'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0 Jul 13 11:59:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Medi Jul 13 11:59:33 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 11:59:41 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'search.conduit.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:44 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 11:59:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:44 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:45 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 11:59:45 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 11:59:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:50 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:50 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:50 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 11:59:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 11:59:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 11:59:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'safebrowsing.clients.google.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:52 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 11:59:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:52 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:53 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 11:59:53 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:54 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:54 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 11:59:54 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 11:59:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 11:59:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 11:59:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 11:59:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:02 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.188 10:0b:a9:54:45:2c Jul 13 12:00:02 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.188 10:0b:a9:54:45:2c CESAINB1205 Jul 13 12:00:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.153 d8:a2:5e:1c:b1:c2 Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.153 d8:a2:5e:1c:b1:c2 anonymous-lan24-n2 Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 61 sec Jul 13 12:00:04 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '58:1f:aa:ae:e1:4c' is from 'eth0' = lan-DEV Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:04 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'd8:a2:5e:1c:b1:c2' is from 'eth0' = lan-DEV Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:05 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:06 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ olsr_plausi_check(): costs getting better: 0 -> 0 (0%, best ever: 0) Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:08 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:08 IH-ServerraumInet-AP authpriv.info dropbear[21472]: Exit before auth: Exited normally Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:09 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:09 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:10 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:10 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:11 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:11 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:12 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c21adeec54514152912f94f38cb57885' from 00:08:02:9e:89:d6 @ 10.10.2.1 Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:13 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '6c02fdde4e526c3744aa87a16afd7f49' from 00:1d:09:df:11:98 @ 10.10.2.1 Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '4226c806da7be3e7a0a2f01c8aa8ae6c' from 00:1d:60:9b:d3:91 @ 10.10.2.1 Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fcfab7ef4bc41f4bb5c36a01658419a5' from 00:1d:60:9b:d3:e6 @ 10.10.2.1 Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c309ffecd52c0a5f1d02ec31853bf618' from 00:1e:68:29:4a:db @ 10.10.2.1 Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:13 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '84903d4d21b0b491ed06ad82b25c760e' from 00:26:5e:16:90:97 @ 10.10.2.1 Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db loop(): updating 08:2e:5f:05:23:47 from node 10.10.2.1: +888/4767 bytes, +654 sec Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: now context: update Jul 13 12:00:14 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'www.bild.de'/'Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)' Jul 13 12:00:14 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: free context: update Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db loop(): updating 10:0b:a9:54:45:2c from node 10.10.2.1: +4497274/540656 bytes, +654 sec Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: now context: update Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)' Jul 13 12:00:14 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: free context: update Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '5255660b43e21b72910b58032d2a4687' from 14:8f:c6:a8:14:cc @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fec5730abce461abf59f75551edf42d3' from 50:ea:d6:a0:ad:6e @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'ad4144e11e4dc4430e214fbbac8cc367' from 70:d4:f2:57:26:df @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'aa4ef83e956079edbf3a990187e73253' from 88:ae:1d:76:7c:71 @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e4d765bd056b6f62091bc28d3638e1df' from 8c:fa:ba:92:6f:af @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '72474cb2e51a6596f4d4f4c074d86087' from bc:05:43:7b:03:58 @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '4fe8232c621fdd6499aff1287c60e661' from dc:2b:61:c1:33:53 @ 10.10.2.1 Jul 13 12:00:15 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'a316c0f1824f5b8dfd7d9ff49737e302' from e4:d5:3d:69:30:77 @ 10.10.2.1 Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e862d34885f656ccf04e80e97006280a' from e8:11:32:9f:8d:3d @ 10.10.2.1 Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '27301d1647d949782af3562831911f4c' from e8:39:df:fa:88:5c @ 10.10.2.1 Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db summary(): 18 devices, 315.794.377 bytes Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 100/100 sec Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:16 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:16 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:16 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'toolbar.google.de'/'Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.3; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.3 Jul 13 12:00:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:19 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:20 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:20 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:22 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:22 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:22 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:23 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:24 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:24 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:25 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:26 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:26 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:27 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:27 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:28 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:29 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:29 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:29 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:30 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.163 7c:c5:37:c4:49:2b Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.163 7c:c5:37:c4:49:2b anonymous-lan34-n2 Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '7c:c5:37:c4:49:2b' is from 'eth0' = lan-DEV Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:31 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:31 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:32 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:32 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:33 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:33 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:34 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:34 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:35 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:35 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:35 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:36 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:37 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.236 50:cc:f8:13:76:b1 Jul 13 12:00:37 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.236 50:cc:f8:13:76:b1 anonymous-lan107-n2 Jul 13 12:00:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:39 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:39 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:39 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:45 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:46 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:49 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'toolbar.google.com'/'Mozilla/4.0 (compatible; GoogleToolbar 7.3.2710.138; Windows XP 5.1; MSIE 8.0.6001.18702)' Jul 13 12:00:49 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.254' with HTTP_HOST/USER_AGENT: 'clients4.google.com'/'Mozilla/4.0 (compatible; GoogleToolbar 7.3.2710.138; Windows XP 5.1; MSIE 8.0.6001.18702)' Jul 13 12:00:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 12:00:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; GoogleToolbar 7.3.2710.138; Windows XP 5.1; MSIE 8.0.6001.18702)' Jul 13 12:00:49 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 12:00:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.254' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; GoogleToolbar 7.3.2710.138; Windows XP 5.1; MSIE 8.0.6001.18702)' Jul 13 12:00:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:51 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:51 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:51 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.254 Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.254' mac: '00:0a:e4:eb:53:5b' dev: 'eth0' user: 'maskat' pass: '57686' signal: 'lan' lang: '' Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '22f8410114ba5c49a0f7801cd5e1d7a3' Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): [OK] auth: local db knows hash '22f8410114ba5c49a0f7801cd5e1d7a3' Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_ok(): NEW user, adding to DB '22f8410114ba5c49a0f7801cd5e1d7a3' - 'Fri Jul 13 12:00:53 CEST 2012' - IP:'10.10.2.254' - DNS:'unresolveable' = HASH:'22f8410114ba5c49a0f7801cd5e1d7a3' - MAC:'00:0a:e4:eb:53:5 Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh db_lock(): mode: now context: add Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh db_lock(): mode: free context: add Jul 13 12:00:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '1' (1=ok) FREE: '1' URL: 'locally_asked:?LOGIN=22f8410114ba5c49a0f7801cd5e1d7a3&MAC=00%3a0a%3ae4%3aeb%3a53%3a5b&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:54 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh weblogin_success(): mac: '00:0a:e4:eb:53:5b' ip: '10.10.2.254' Jul 13 12:00:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_redirect(): code/reason/destination: '302'/'Temporary Redirect'/'http://google.com' Jul 13 12:00:55 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:56 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:57 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:57 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:57 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:00:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:58 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:59 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:00:59 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:00:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:00:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:00 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:01:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:01 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:01 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:01:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:01:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:02 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:01:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:03 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:03 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:01:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:01:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:31 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 12:01:31 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 12:01:31 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 12:01:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 12:01:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c Wiebking-PC Jul 13 12:01:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:01:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 anonymous-lan36-n2 Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:01:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:01:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:01:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:01:56 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:01:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:01:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:01:56 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 0/100 sec Jul 13 12:01:56 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:01:57 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.reverse_ssh_tunnel net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:01:59 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:01:59 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 12:02:01 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:02:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:02:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:02:02 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 12:02:02 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring monitoring(): sending message: 'http://intercity-vpn.de/networks/boltenhagendh/meshrdf/ [...]' Jul 13 12:02:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 12:02:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db Thorsten-Mobil Jul 13 12:02:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 12:02:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 12:02:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 12:02:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:02:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:02:49 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:02:49 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:02:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:02:50 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c Wiebking-PC Jul 13 12:02:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:02:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.188 10:0b:a9:54:45:2c Jul 13 12:02:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.188 10:0b:a9:54:45:2c anonymous-lan59-n2 Jul 13 12:02:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:02:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:03:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:02 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:02 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:02 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:03 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:03 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: '' signal: 'lan' lang: '' Jul 13 12:03:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'f430f432af9c1e6a55651649cb8ffe49' Jul 13 12:03:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:06 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'f430f432af9c1e6a55651649cb8ffe49' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=f430f432af9c1e6a55651649cb8ffe49&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:07 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'f430f432af9c1e6a55651649cb8ffe49' Jul 13 12:03:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:07 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'f430f432af9c1e6a55651649cb8ffe49' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+' Jul 13 12:03:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=f430f432af9c1e6a55651649cb8ffe49&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+&USER_LANG=de' Jul 13 12:03:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: '' signal: 'lan' lang: '' Jul 13 12:03:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'f430f432af9c1e6a55651649cb8ffe49' Jul 13 12:03:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:09 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'f430f432af9c1e6a55651649cb8ffe49' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=f430f432af9c1e6a55651649cb8ffe49&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:09 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'f430f432af9c1e6a55651649cb8ffe49' Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:10 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'f430f432af9c1e6a55651649cb8ffe49' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+' Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=f430f432af9c1e6a55651649cb8ffe49&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+&USER_LANG=de' Jul 13 12:03:10 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:14 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:14 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:15 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:15 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:15 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:17 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:18 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:18 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:19 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:21 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:21 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:22 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:22 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:24 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:24 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:25 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:28 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ stopwatch_stop(): task 'ulog_squeeze_log' lasts 83.78 seconds (1min 23sec) Jul 13 12:03:28 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_squeeze_log(): squeezed to 20% (256051 bytes/4574 lines @ 54.4988 lines/sec, load: 1.58) Jul 13 12:03:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:29 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:30 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:30 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:03:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:32 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:33 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:33 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:33 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:35 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:35 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:35 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:36 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:36 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:37 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:38 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:38 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:39 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:41 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:41 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:41 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:43 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:43 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:43 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:44 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:45 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:46 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:03:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:47 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:03:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:03:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:03:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:03:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:03:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:03:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:04:08 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: now context: db_backup Jul 13 12:04:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] wrote 48561 bytes to /tmp/db_backup.tgz.temp.28293 Jul 13 12:04:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] moved /tmp/db_backup.tgz.temp.28293 -> /www/cgi-bin/db_backup.tgz Jul 13 12:04:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: free context: db_backup Jul 13 12:04:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ backup_userdata(): copying '/www/cgi-bin/db_backup.tgz' (48561 bytes) was successful Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: time 1342173851 Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: cache size 100, 3698/9099 cache insertions re-used unexpired cache entries. Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: queries forwarded 5123, queries answered locally 3642 Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: server 8.8.8.8#53: queries sent 5133, retried or failed 20 Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: read /etc/hosts - 1 addresses Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq[476]: read /etc/local.hosts - 272 addresses Jul 13 12:04:11 IH-ServerraumInet-AP daemon.err dnsmasq[476]: failed to load names from /var/run/hosts_olsr: No such file or directory Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: read /etc/ethers - 0 addresses Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:0a:e4:eb:53:5b' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '10:0b:a9:54:45:2c' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'd8:9e:3f:df:fa:a4' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:26:5e:16:90:97' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '14:8f:c6:a8:14:cc' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:25:d3:30:46:53' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:0c:f6:07:41:40' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1e:68:29:4a:db' is from 'eth0' = lan-DEV Jul 13 12:04:11 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '04:54:53:31:f8:c0' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'cc:08:e0:86:51:31' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e4:d5:3d:69:30:77' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '50:ea:d6:a0:ad:6e' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1d:60:9b:d3:e6' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1d:60:9b:d3:91' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1d:09:df:11:98' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '08:2e:5f:05:23:47' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:08:02:9e:89:d6' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'ac:81:12:d0:19:15' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:11:32:9f:8d:3d' is from 'eth0' = lan-DEV Jul 13 12:04:12 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '34:51:c9:bb:4f:2d' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '50:cc:f8:13:76:b1' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1f:16:33:fc:af' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '18:a9:05:e7:cc:85' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '88:ae:1d:76:7c:71' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'dc:2b:61:c1:33:53' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '70:d4:f2:57:26:df' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '7c:c5:37:c4:49:2b' is from 'eth0' = lan-DEV Jul 13 12:04:13 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'd8:a2:5e:1c:b1:c2' is from 'eth0' = lan-DEV Jul 13 12:04:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:05:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:05:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] timediff > 60 sec = 299 Jul 13 12:05:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 299 sec Jul 13 12:05:04 IH-ServerraumInet-AP daemon.info fff+ /bin/sh scheduler_add(): not adding '. /tmp/loader; _db include; _db_ticketcheck "2" ', already more then 2 times in queue Jul 13 12:05:04 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_lock(): mode: now context: db_backup Jul 13 12:05:04 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_backup(): [OK] wrote 48561 bytes to /tmp/db_backup.tgz.temp.20196 Jul 13 12:05:05 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_backup(): [OK] moved /tmp/db_backup.tgz.temp.20196 -> /www/cgi-bin/db_backup.tgz Jul 13 12:05:05 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_lock(): mode: free context: db_backup Jul 13 12:05:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.133 34:51:c9:bb:4f:2d Jul 13 12:05:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.133 34:51:c9:bb:4f:2d anonymous-lan4-n2 Jul 13 12:05:10 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '34:51:c9:bb:4f:2d' is from 'eth0' = lan-DEV Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 00:15:af:9e:3f:04 Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.159 00:15:af:9e:3f:04 anonymous-lan30-n2 Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '00:15:af:9e:3f:04' is from 'eth0' = lan-DEV Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '7d19c8cc740a9c8b2ba8421fc7e1a2d3' Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:05:45 CEST 2012' - IP:'10.10.2.159' - DNS:'unresolveable' = HASH:'7d19c8cc740a9c8b2ba8421fc7e1a2d3' - MAC:'00:15:af:9e:3f:04' - SIGNAL:'IH-ServerraumIn Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=7d19c8cc740a9c8b2ba8421fc7e1a2d3&MAC=00%3a15%3aaf%3a9e%3a3f%3a04&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '7424513e0c899e227bad95f284dc17cd' Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:05:45 CEST 2012' - IP:'10.10.2.159' - DNS:'unresolveable' = HASH:'7424513e0c899e227bad95f284dc17cd' - MAC:'00:15:af:9e:3f:04' - SIGNAL:'IH-ServerraumIn Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=7424513e0c899e227bad95f284dc17cd&MAC=00%3a15%3aaf%3a9e%3a3f%3a04&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:05:45 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 00:15:af:9e:3f:04/IH-ServerraumInet-AP Jul 13 12:05:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:05:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.159 00:15:af:9e:3f:04 martin-PC Jul 13 12:05:55 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.159' with HTTP_HOST/USER_AGENT: 'safebrowsing.clients.google.com'/'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0' Jul 13 12:05:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.159 Jul 13 12:05:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.159' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0' Jul 13 12:05:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.159' with HTTP_HOST/USER_AGENT: 'www.google.de'/'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0' Jul 13 12:05:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.159 Jul 13 12:05:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.159' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0' Jul 13 12:06:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:06:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:06:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.159 Jul 13 12:06:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.159' mac: '00:15:af:9e:3f:04' dev: 'eth0' user: 'xenakis' pass: '25739' signal: 'lan' lang: '' Jul 13 12:06:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'e0ca0b21af96944f47c363e02a2908cb' Jul 13 12:06:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): [OK] auth: local db knows hash 'e0ca0b21af96944f47c363e02a2908cb' Jul 13 12:06:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_ok(): NEW user, adding to DB 'e0ca0b21af96944f47c363e02a2908cb' - 'Fri Jul 13 12:06:20 CEST 2012' - IP:'10.10.2.159' - DNS:'unresolveable' = HASH:'e0ca0b21af96944f47c363e02a2908cb' - MAC:'00:15:af:9e:3f:0 Jul 13 12:06:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh db_lock(): mode: now context: add Jul 13 12:06:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh db_lock(): mode: free context: add Jul 13 12:06:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '1' (1=ok) FREE: '1' URL: 'locally_asked:?LOGIN=e0ca0b21af96944f47c363e02a2908cb&MAC=00%3a15%3aaf%3a9e%3a3f%3a04&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:06:20 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh weblogin_success(): mac: '00:15:af:9e:3f:04' ip: '10.10.2.159' Jul 13 12:06:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_redirect(): code/reason/destination: '302'/'Temporary Redirect'/'http://google.com' Jul 13 12:06:32 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 12:06:32 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db anonymous-lan88-n2 Jul 13 12:07:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler olsr_build_tables(): zero txtinfo.plugin-output, trying again Jul 13 12:07:06 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 21121 -> 21123 Jul 13 12:07:07 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:07:07 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 64 sec Jul 13 12:07:08 IH-ServerraumInet-AP daemon.info fff+ /bin/sh scheduler_add(): not adding '. /tmp/loader; _db include; _db_ticketcheck "1" ', already more then 2 times in queue Jul 13 12:07:08 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_lock(): mode: now context: db_backup Jul 13 12:07:08 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_backup(): [OK] wrote 48584 bytes to /tmp/db_backup.tgz.temp.21339 Jul 13 12:07:09 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_backup(): [OK] moved /tmp/db_backup.tgz.temp.21339 -> /www/cgi-bin/db_backup.tgz Jul 13 12:07:09 IH-ServerraumInet-AP daemon.info fff+ /bin/sh db_lock(): mode: free context: db_backup Jul 13 12:07:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.229 ac:81:12:d0:19:15 Jul 13 12:07:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.229 ac:81:12:d0:19:15 anonymous-lan100-n2 Jul 13 12:07:24 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.229 ac:81:12:d0:19:15 Jul 13 12:07:24 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.229 ac:81:12:d0:19:15 anonymous-lan100-n2 Jul 13 12:07:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:07:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:07:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:07:46 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:07:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:07:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:07:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:07:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:07:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:07:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:08:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:08:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 56 sec Jul 13 12:08:42 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:08:42 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.159 00:15:af:9e:3f:04 martin-PC Jul 13 12:08:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:08:54 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 anonymous-lan36-n2 Jul 13 12:08:54 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 12:08:58 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:08:58 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 12:09:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 12:09:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:09:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:09:41 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:09:41 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 anonymous-lan36-n2 Jul 13 12:09:41 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 12:09:43 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'cnfg.funmoods.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:44 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'search.conduit.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:44 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:44 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'cnfg.funmoods.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:45 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:46 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:09:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:49 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:49 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:09:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:09:50 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 12:09:50 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:53 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:53 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:53 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:09:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:09:53 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:54 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:09:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:55 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:09:55 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:56 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:56 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:09:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:56 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:09:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:09:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:09:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:58 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:58 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:09:58 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:09:58 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:09:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:09:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:09:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:09:59 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:10:00 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:10:00 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:10:00 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:10:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:10:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'cnfg.emotionix.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:10:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:10:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:10:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:10:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:10:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:10:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:10:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:10:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.208 00:1d:60:9b:d3:91 Jul 13 12:10:10 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.208 00:1d:60:9b:d3:91 DORFHOTELBar Jul 13 12:10:38 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'info.gomplayer.com'/'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3. Jul 13 12:10:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:10:38 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Medi Jul 13 12:10:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'app.gomlab.com'/'GomPlayer 2, 1, 37, 5085 (ENG).J2' Jul 13 12:10:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:10:39 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'GomPlayer 2, 1, 37, 5085 (ENG).J2' Jul 13 12:10:47 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.140 8c:fa:ba:92:6f:af Jul 13 12:10:47 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.140 8c:fa:ba:92:6f:af anonymous-lan11-n2 Jul 13 12:10:47 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '8c:fa:ba:92:6f:af' is from 'eth0' = lan-DEV Jul 13 12:11:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:11:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:11:50 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'info.gomplayer.com'/'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3. Jul 13 12:11:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:11:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Medi Jul 13 12:12:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:12:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:12:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:12:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:13:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.217 00:1e:68:29:4a:db Jul 13 12:13:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.217 00:1e:68:29:4a:db Thorsten-Mobil Jul 13 12:13:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:13:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.153 d8:a2:5e:1c:b1:c2 Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.153 d8:a2:5e:1c:b1:c2 anonymous-lan24-n2 Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'd8:a2:5e:1c:b1:c2' is from 'eth0' = lan-DEV Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:29 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:13:29 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:30 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:30 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:13:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:13:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:13:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:13:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:32 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:32 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:32 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:13:32 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:33 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:13:33 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:34 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:34 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:13:34 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:34 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 60:fb:42:39:ee:e7 Jul 13 12:13:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.199 60:fb:42:39:ee:e7 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 40:a6:d9:9e:07:e2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.237 40:a6:d9:9e:07:e2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.199 60:fb:42:39:ee:e7 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.199 60:fb:42:39:ee:e7 anonymous-lan70-n2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 40:a6:d9:9e:07:e2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.237 40:a6:d9:9e:07:e2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.199 60:fb:42:39:ee:e7 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.199 60:fb:42:39:ee:e7 anonymous-lan70-n2 Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '60:fb:42:39:ee:e7' is from 'eth0' = lan-DEV Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '9728467cc05db479b6e8082b36d5ce01' Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:52 CEST 2012' - IP:'10.10.2.199' - DNS:'unresolveable' = HASH:'9728467cc05db479b6e8082b36d5ce01' - MAC:'60:fb:42:39:ee:e7' - SIGNAL:'IH-ServerraumIn Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=9728467cc05db479b6e8082b36d5ce01&MAC=60%3afb%3a42%3a39%3aee%3ae7&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for 'a886cec63cdce65790f2ce5e5391f32d' Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:52 CEST 2012' - IP:'10.10.2.199' - DNS:'unresolveable' = HASH:'a886cec63cdce65790f2ce5e5391f32d' - MAC:'60:fb:42:39:ee:e7' - SIGNAL:'IH-ServerraumIn Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=a886cec63cdce65790f2ce5e5391f32d&MAC=60%3afb%3a42%3a39%3aee%3ae7&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 60:fb:42:39:ee:e7/IH-ServerraumInet-AP Jul 13 12:13:52 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '60:fb:42:39:ee:e7' is from 'eth0' = lan-DEV Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.237 40:a6:d9:9e:07:e2 Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.237 40:a6:d9:9e:07:e2 anonymous-lan108-n2 Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '40:a6:d9:9e:07:e2' is from 'eth0' = lan-DEV Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '79858b5365ad3e233fd9b00d30d2de3e' Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:53 CEST 2012' - IP:'10.10.2.237' - DNS:'unresolveable' = HASH:'79858b5365ad3e233fd9b00d30d2de3e' - MAC:'40:a6:d9:9e:07:e2' - SIGNAL:'IH-ServerraumIn Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=79858b5365ad3e233fd9b00d30d2de3e&MAC=40%3aa6%3ad9%3a9e%3a07%3ae2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for 'abdeb192f5d766b239e76afaa470b82c' Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:13:53 CEST 2012' - IP:'10.10.2.237' - DNS:'unresolveable' = HASH:'abdeb192f5d766b239e76afaa470b82c' - MAC:'40:a6:d9:9e:07:e2' - SIGNAL:'IH-ServerraumIn Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=abdeb192f5d766b239e76afaa470b82c&MAC=40%3aa6%3ad9%3a9e%3a07%3ae2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:13:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 40:a6:d9:9e:07:e2/IH-ServerraumInet-AP Jul 13 12:13:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'safebrowsing.clients.google.com'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:13:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:13:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:14:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'gsp1.apple.com'/'Mail/53 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Mail/53 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): pidnum by parent process: 26675 -> 26677 Jul 13 12:14:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:14:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 60 sec Jul 13 12:14:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'info.gomplayer.com'/'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3. Jul 13 12:14:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:14:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Medi Jul 13 12:14:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'mesu.apple.com'/'$%7BPRODUCT_NAME%7D/1 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: '$%7BPRODUCT_NAME%7D/1 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'mesu.apple.com'/'$%7BPRODUCT_NAME%7D/1 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: '$%7BPRODUCT_NAME%7D/1 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:14 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ads.mopub.com'/'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Mobile/9B206' Jul 13 12:14:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'Apple iPhone v9B206 Maps v5.1.1' Jul 13 12:14:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:16 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Apple iPhone v9B206 Maps v5.1.1' Jul 13 12:14:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ax.init.itunes.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:14:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'phobos.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:14:19 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.210 e8:11:32:9f:8d:3d Jul 13 12:14:19 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.210 e8:11:32:9f:8d:3d anonymous-lan81-n2 Jul 13 12:14:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ads.mopub.com'/'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Mobile/9B206' Jul 13 12:14:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'setting.tweakersoft.com'/'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)' Jul 13 12:14:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'gsp1.apple.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.235 00:25:d3:30:46:53 Jul 13 12:14:20 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.235 00:25:d3:30:46:53 anonymous-lan106-n2 Jul 13 12:14:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Mobile/9B206' Jul 13 12:14:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:21 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:22 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)' Jul 13 12:14:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ax.init.itunes.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:14:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'phobos.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:14:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ads.mopub.com'/'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Mobile/9B206' Jul 13 12:14:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Mobile/9B206' Jul 13 12:14:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:27 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:27 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:28 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:28 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:14:39 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:14:39 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.159 00:15:af:9e:3f:04 martin-PC Jul 13 12:14:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'Apple iPhone v9B206 Maps v5.1.1' Jul 13 12:14:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'gsp1.apple.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Apple iPhone v9B206 Maps v5.1.1' Jul 13 12:14:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:44 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:46 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:14:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:14:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:14:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:14:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'gsp1.apple.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.gstatic.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:53 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:53 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:14:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:14:55 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:56 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:14:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.199' with HTTP_HOST/USER_AGENT: 'iphone-wu.apple.com'/'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:15:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.199 Jul 13 12:15:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.199' lang: '' HTTP_USER_AGENT: 'Apple iPhone v5.1.1 Stocks v3.0.9B206' Jul 13 12:15:02 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:02 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_webserver(): [OK] no check during webserver forking action Jul 13 12:15:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:03 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:15:03 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 61 sec Jul 13 12:15:04 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:05 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:05 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:15:05 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ olsr_plausi_check(): costs getting better: 0 -> 0 (0%, best ever: 0) Jul 13 12:15:05 IH-ServerraumInet-AP authpriv.info dropbear[28795]: Exit before auth: Exited normally Jul 13 12:15:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:07 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:08 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:08 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:08 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:09 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c21adeec54514152912f94f38cb57885' from 00:08:02:9e:89:d6 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '6c02fdde4e526c3744aa87a16afd7f49' from 00:1d:09:df:11:98 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '4226c806da7be3e7a0a2f01c8aa8ae6c' from 00:1d:60:9b:d3:91 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fcfab7ef4bc41f4bb5c36a01658419a5' from 00:1d:60:9b:d3:e6 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'c309ffecd52c0a5f1d02ec31853bf618' from 00:1e:68:29:4a:db @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fbe8be9723f18e0ae0468eed0cc0fd94' from 00:25:d3:30:46:53 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '84903d4d21b0b491ed06ad82b25c760e' from 00:26:5e:16:90:97 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db loop(): updating 08:2e:5f:05:23:47 from node 10.10.2.1: +832/5062 bytes, +715 sec Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: now context: update Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: free context: update Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db loop(): updating 10:0b:a9:54:45:2c from node 10.10.2.1: +1189701/227636 bytes, +715 sec Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: now context: update Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db db_lock(): mode: free context: update Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '931e72ce2ce55135658e21ff0185e3af' from 1c:75:08:56:4d:e5 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '5b6bfe9387321e60035ca36451242c88' from 50:cc:f8:13:76:b1 @ 10.10.2.1 Jul 13 12:15:09 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'fec5730abce461abf59f75551edf42d3' from 50:ea:d6:a0:ad:6e @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'ad4144e11e4dc4430e214fbbac8cc367' from 70:d4:f2:57:26:df @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'aa4ef83e956079edbf3a990187e73253' from 88:ae:1d:76:7c:71 @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e4d765bd056b6f62091bc28d3638e1df' from 8c:fa:ba:92:6f:af @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '661845349d20de97b910921de9494b95' from ac:81:12:d0:19:15 @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '72474cb2e51a6596f4d4f4c074d86087' from bc:05:43:7b:03:58 @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '24ff09e41ff65aca0f542c2809c945a2' from d8:a2:5e:1c:b1:c2 @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash 'e862d34885f656ccf04e80e97006280a' from e8:11:32:9f:8d:3d @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db map2login(): cannot find hash '27301d1647d949782af3562831911f4c' from e8:39:df:fa:88:5c @ 10.10.2.1 Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.add_collected_userdata_into_db summary(): 20 devices, 297.045.856 bytes Jul 13 12:15:10 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 43/43 sec Jul 13 12:15:11 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:13 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:14 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:18 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.163 7c:c5:37:c4:49:2b Jul 13 12:15:18 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.163 7c:c5:37:c4:49:2b anonymous-lan34-n2 Jul 13 12:15:18 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '7c:c5:37:c4:49:2b' is from 'eth0' = lan-DEV Jul 13 12:15:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:19 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:23 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:23 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'gsp1.apple.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ax.init.itunes.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:15:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'phobos.apple.com'/'iTunes-iPhone/5.1.1 (4; 16GB; dt:27)' Jul 13 12:15:24 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:25 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:27 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:28 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:28 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:28 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:29 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:30 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:30 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.208 00:1d:60:9b:d3:91 Jul 13 12:15:30 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.208 00:1d:60:9b:d3:91 anonymous-lan79-n2 Jul 13 12:15:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:32 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:33 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:34 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:34 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:35 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:35 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:36 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:36 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:36 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:37 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:37 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:38 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:40 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:41 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:42 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:43 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:44 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:45 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:46 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:47 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:49 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:50 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:50 IH-ServerraumInet-AP daemon.info fff+ /etc/init.d/S69watch_olsrd_fff+ jitter_user_stats_process(): [OK] sleeping 3/43 sec Jul 13 12:15:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:51 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.reverse_ssh_tunnel net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:15:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:52 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring wget_do(): pidnum by parent process: 30185 -> 30187 Jul 13 12:15:53 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:53 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:15:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:15:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:54 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring monitoring(): sending message: 'http://intercity-vpn.de/networks/boltenhagendh/meshrdf/ [...]' Jul 13 12:15:54 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.monitoring ntp_set(): success after 0 seconds and 1. round on 1. IP in pool (128.138.140.44 = 128.138.140.44) Jul 13 12:15:54 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:54 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:15:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:15:55 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:56 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.168 00:1d:60:9b:d3:e6 Jul 13 12:15:56 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.168 00:1d:60:9b:d3:e6 anonymous-lan39-n2 Jul 13 12:15:57 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:58 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:15:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:00 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:00 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:01 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:01 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:02 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:04 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:05 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:06 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:07 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:08 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:09 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:10 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:11 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:12 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:12 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:13 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:13 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:14 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:15 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:16:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'ajax.googleapis.com'/'ajax.googleapis.com (Mozilla/5.0 (iPhone; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A54 Jul 13 12:16:16 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:18 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google.com'/'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:18 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:19 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'AroundMe/3501 CFNetwork/548.1.4 Darwin/11.0.0' Jul 13 12:16:19 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:20 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'www.google-analytics.com'/'www.google-analytics.com (GoogleAnalytics/1.4 (iPhone; U; CPU iPhone OS 5.1.1 like Mac OS X; de-de))' Jul 13 12:16:31 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'mobil.abendblatt.de'/'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7 Jul 13 12:16:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3' Jul 13 12:16:37 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.253 e8:39:df:fa:88:5c Jul 13 12:16:37 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.253 e8:39:df:fa:88:5c anonymous-lan124-n2 Jul 13 12:16:37 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'e8:39:df:fa:88:5c' is from 'eth0' = lan-DEV Jul 13 12:16:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.237' with HTTP_HOST/USER_AGENT: 'mobil.abendblatt.de'/'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7 Jul 13 12:16:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:16:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.237' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B206 Safari/7534.48.3' Jul 13 12:16:40 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:16:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:16:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:16:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:41 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:16:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:16:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:16:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:42 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:16:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:16:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:16:42 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:42 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:16:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:16:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:16:43 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:16:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:16:43 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:16:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:16:46 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.165' mac: 'b8:70:f4:d1:07:46' dev: 'eth0' user: 'D1-384cv' pass: 'efpwn' signal: 'lan' lang: '' Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:47 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '12a6a925e63f56c0fc33e6e6b9f01d56' Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:47 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'12a6a925e63f56c0fc33e6e6b9f01d56' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:16:47 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=12a6a925e63f56c0fc33e6e6b9f01d56&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:16:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '912fcebc6a32944e3e45a411a82ee03f' Jul 13 12:16:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:16:48 CEST 2012' - IP:'10.10.2.165' - DNS:'unresolveable' = HASH:'912fcebc6a32944e3e45a411a82ee03f' - MAC:'b8:70:f4:d1:07:46' - SIGNAL:'lan' - KEYWORD:'D1-384cv+ef Jul 13 12:16:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=912fcebc6a32944e3e45a411a82ee03f&MAC=b8%3a70%3af4%3ad1%3a07%3a46&SIGNAL=lan&KEYWORD=D1-384cv+efpwn&USER_LANG=de' Jul 13 12:16:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.165' Jul 13 12:16:48 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'd1nfmblh2wz0fd.cloudfront.net'/'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:16:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.165 Jul 13 12:16:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.165' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:17:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.219 08:2e:5f:05:23:47 Jul 13 12:17:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.219 08:2e:5f:05:23:47 anonymous-lan90-n2 Jul 13 12:17:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.237 Jul 13 12:17:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.237' mac: '40:a6:d9:9e:07:e2' dev: 'eth0' user: '' pass: '' signal: 'lan' lang: '' Jul 13 12:17:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'abdeb192f5d766b239e76afaa470b82c' Jul 13 12:17:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:17:06 CEST 2012' - IP:'10.10.2.237' - DNS:'unresolveable' = HASH:'abdeb192f5d766b239e76afaa470b82c' - MAC:'40:a6:d9:9e:07:e2' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:17:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=abdeb192f5d766b239e76afaa470b82c&MAC=40%3aa6%3ad9%3a9e%3a07%3ae2&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:17:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '79858b5365ad3e233fd9b00d30d2de3e' Jul 13 12:17:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:17:06 CEST 2012' - IP:'10.10.2.237' - DNS:'unresolveable' = HASH:'79858b5365ad3e233fd9b00d30d2de3e' - MAC:'40:a6:d9:9e:07:e2' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:17:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=79858b5365ad3e233fd9b00d30d2de3e&MAC=40%3aa6%3ad9%3a9e%3a07%3ae2&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:17:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'abdeb192f5d766b239e76afaa470b82c' Jul 13 12:17:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:17:07 CEST 2012' - IP:'10.10.2.237' - DNS:'unresolveable' = HASH:'abdeb192f5d766b239e76afaa470b82c' - MAC:'40:a6:d9:9e:07:e2' - SIGNAL:'lan' - KEYWORD:'40:a6:d9:9e Jul 13 12:17:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=abdeb192f5d766b239e76afaa470b82c&MAC=40%3aa6%3ad9%3a9e%3a07%3ae2&SIGNAL=lan&KEYWORD=40:a6:d9:9e:07:e2+&USER_LANG=de' Jul 13 12:17:07 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.237' Jul 13 12:17:14 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '00:0c:f6:07:41:40' is from 'eth0' = lan-DEV Jul 13 12:17:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.246 88:ae:1d:76:7c:71 Jul 13 12:17:45 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.246 88:ae:1d:76:7c:71 anonymous-lan117-n2 Jul 13 12:17:53 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.159 00:15:af:9e:3f:04 Jul 13 12:17:53 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.159 00:15:af:9e:3f:04 martin-PC Jul 13 12:17:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:17:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:17:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:17:55 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:17:55 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '00:0c:f6:07:41:40' is from 'eth0' = lan-DEV Jul 13 12:17:56 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for 'adaa910c6c60551e796867174c00de27' Jul 13 12:17:56 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:17:56 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'adaa910c6c60551e796867174c00de27' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'IH-ServerraumIn Jul 13 12:17:56 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=adaa910c6c60551e796867174c00de27&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:17:56 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '644f026ca8a056718967bab8aa72e1b2' Jul 13 12:17:56 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:17:56 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'644f026ca8a056718967bab8aa72e1b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'IH-ServerraumIn Jul 13 12:17:57 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=644f026ca8a056718967bab8aa72e1b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:17:57 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 00:0c:f6:07:41:40/IH-ServerraumInet-AP Jul 13 12:17:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:17:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 50:cc:f8:cc:6e:09 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.135 50:cc:f8:cc:6e:09 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.135 50:cc:f8:cc:6e:09 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.135 50:cc:f8:cc:6e:09 anonymous-lan6-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '50:cc:f8:cc:6e:09' is from 'eth0' = lan-DEV Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '52247b40c585c378e259c4b219222f9d' Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.175 00:0c:f6:07:41:40 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.175 00:0c:f6:07:41:40 anonymous-lan46-n2 Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:18:00 CEST 2012' - IP:'10.10.2.135' - DNS:'unresolveable' = HASH:'52247b40c585c378e259c4b219222f9d' - MAC:'50:cc:f8:cc:6e:09' - SIGNAL:'IH-ServerraumIn Jul 13 12:18:00 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=52247b40c585c378e259c4b219222f9d&MAC=50%3acc%3af8%3acc%3a6e%3a09&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:18:01 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for 'aa315639ba16cd6596e8fbc7ada39e4c' Jul 13 12:18:01 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:18:01 CEST 2012' - IP:'10.10.2.135' - DNS:'unresolveable' = HASH:'aa315639ba16cd6596e8fbc7ada39e4c' - MAC:'50:cc:f8:cc:6e:09' - SIGNAL:'IH-ServerraumIn Jul 13 12:18:01 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=aa315639ba16cd6596e8fbc7ada39e4c&MAC=50%3acc%3af8%3acc%3a6e%3a09&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:18:01 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 50:cc:f8:cc:6e:09/IH-ServerraumInet-AP Jul 13 12:18:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.135' with HTTP_HOST/USER_AGENT: 'clients3.google.com'/'Dalvik/1.6.0 (Linux; U; Android 4.0.3; GT-N7000 Build/IML74K)' Jul 13 12:18:17 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.135' with HTTP_HOST/USER_AGENT: 'www.google.com'/'Mozilla/5.0 (Linux; U; Android 4.0.3; de-de; GT-N7000 Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/ Jul 13 12:18:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.135 Jul 13 12:18:17 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.135' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Linux; U; Android 4.0.3; de-de; GT-N7000 Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30' Jul 13 12:18:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.130 00:1d:09:df:11:98 Jul 13 12:18:29 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.130 00:1d:09:df:11:98 anonymous-lan1-n2 Jul 13 12:18:40 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.135' with HTTP_HOST/USER_AGENT: 'clients3.google.com'/'Mozilla/5.0 (Linux; U; Android 4.0.3; de-de; GT-N7000 Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Sa Jul 13 12:18:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.135 Jul 13 12:18:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.135' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Linux; U; Android 4.0.3; de-de; GT-N7000 Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30' Jul 13 12:18:41 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ stopwatch_stop(): task 'ulog_squeeze_log' lasts 163.99 seconds (2min 43sec) Jul 13 12:18:41 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_squeeze_log(): squeezed to 20% (543007 bytes/9771 lines @ 59.9559 lines/sec, load: 1.57) Jul 13 12:18:42 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (126650 -> 31876 bytes -> 25% on file '/tmp/user-22f8410114ba5c49a0f7801cd5e1d7a3-00:0a:e4:eb:53:5b-10.10.2.254-2012jul13-node2-reboots0.ulog.up29593.gz.ulo Jul 13 12:18:43 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-22f8410114ba5c49a0f7801cd5e1d7a3-00:0a:e4:eb:53:5b-10.10.2.254-2012jul13-node2-reboots0.ulog.up29593.gz.ulog' (31876 bytes) was successful - removin Jul 13 12:18:44 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.154 00:08:02:9e:89:d6 Jul 13 12:18:44 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.154 00:08:02:9e:89:d6 anonymous-lan25-n2 Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 04:46:65:b6:85:ae Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.190 04:46:65:b6:85:ae Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.190 04:46:65:b6:85:ae Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.190 04:46:65:b6:85:ae anonymous-lan61-n2 Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '04:46:65:b6:85:ae' is from 'eth0' = lan-DEV Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): [OK] auth: existing /tmp/vds_user_04:46:65:b6:85:ae Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:18:48 CEST 2012' - IP:'10.10.2.190' - DNS:'unresolveable' = HASH:'2a0ac074d52cf3d83e98074d8f108bac' - MAC:'04:46:65:b6:85:ae' - SIGNAL:'IH-ServerraumIn Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '1' URL: 'locally_asked:?LOGIN=2a0ac074d52cf3d83e98074d8f108bac&MAC=04%3a46%3a65%3ab6%3a85%3aae&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYW Jul 13 12:18:48 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [OK] _weblogin login_check 04:46:65:b6:85:ae/IH-ServerraumInet-AP Jul 13 12:18:56 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (86485 -> 24433 bytes -> 28% on file '/tmp/user-931e72ce2ce55135658e21ff0185e3af-1c:75:08:56:4d:e5-10.10.2.254-2012jul13-node2-reboots0.ulog.up29608.gz.ulog Jul 13 12:18:57 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-931e72ce2ce55135658e21ff0185e3af-1c:75:08:56:4d:e5-10.10.2.254-2012jul13-node2-reboots0.ulog.up29608.gz.ulog' (24433 bytes) was successful - removin Jul 13 12:19:02 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (148509 -> 34851 bytes -> 23% on file '/tmp/user-c309ffecd52c0a5f1d02ec31853bf618-00:1e:68:29:4a:db-10.10.2.217-2012jul13-node2-reboots0.ulog.up29614.gz.ulo Jul 13 12:19:03 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.175' with HTTP_HOST/USER_AGENT: 'www.marina-boltenhagen.de'/'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:19:04 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-c309ffecd52c0a5f1d02ec31853bf618-00:1e:68:29:4a:db-10.10.2.217-2012jul13-node2-reboots0.ulog.up29614.gz.ulog' (34851 bytes) was successful - removin Jul 13 12:19:04 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): compressed (139200 -> 33720 bytes -> 24% on file '/tmp/user-e0ca0b21af96944f47c363e02a2908cb-00:15:af:9e:3f:04-10.10.2.159-2012jul13-node2-reboots0.ulog.up29616.gz.ulo Jul 13 12:19:06 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ ulog_logsaving(): copying '/tmp/user-e0ca0b21af96944f47c363e02a2908cb-00:15:af:9e:3f:04-10.10.2.159-2012jul13-node2-reboots0.ulog.up29616.gz.ulog' (33720 bytes) was successful - removin Jul 13 12:19:11 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: now context: db_backup Jul 13 12:19:11 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] wrote 48604 bytes to /tmp/db_backup.tgz.temp.30544 Jul 13 12:19:11 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_backup(): [OK] moved /tmp/db_backup.tgz.temp.30544 -> /www/cgi-bin/db_backup.tgz Jul 13 12:19:11 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ db_lock(): mode: free context: db_backup Jul 13 12:19:13 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.evaluate_ulogd_syslogemu_fff+ backup_userdata(): copying '/www/cgi-bin/db_backup.tgz' (48604 bytes) was successful Jul 13 12:19:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.175 Jul 13 12:19:20 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.175' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '18:a9:05:e7:cc:85' is from 'eth0' = lan-DEV Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.145 00:1f:3c:61:75:f2 anonymous-lan16-n2 Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '00:1f:3c:61:75:f2' is from 'eth0' = lan-DEV Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '46f48b5500edf76fed726add628899e0' Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:19:35 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'46f48b5500edf76fed726add628899e0' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'IH-ServerraumIn Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=46f48b5500edf76fed726add628899e0&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:19:35 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '6c29762fbf7a863071134c3accb14d9d' Jul 13 12:19:36 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:19:35 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'6c29762fbf7a863071134c3accb14d9d' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'IH-ServerraumIn Jul 13 12:19:36 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=6c29762fbf7a863071134c3accb14d9d&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:19:36 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 00:1f:3c:61:75:f2/IH-ServerraumInet-AP Jul 13 12:19:39 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.145' with HTTP_HOST/USER_AGENT: 'secure.logmein.com'/'Mozilla/4.0' Jul 13 12:20:06 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): error during fetching 'http://127.0.0.1/favicon.ico' - killing PID '8190' after 4 seconds Jul 13 12:20:06 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): killing 'wget-qO-http://127.0.0.1/favicon.ico' Jul 13 12:20:06 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:20:06 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 anonymous-lan36-n2 Jul 13 12:20:06 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): 'b8:70:f4:d1:07:46' is from 'eth0' = lan-DEV Jul 13 12:20:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'wget'-process Jul 13 12:20:09 IH-ServerraumInet-AP daemon.err fff+ /usr/bin/scheduler watch_webserver(): [ERR] gethttp not possible - restarting Jul 13 12:20:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_webserver(): [OK] trying to stop 'uhttpd' with PID '27282' Jul 13 12:20:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): executing /etc/init.d/uhttpd stop Jul 13 12:20:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Jul 13 12:20:11 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.165 b8:70:f4:d1:07:46 Armand Jul 13 12:20:11 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.145' with HTTP_HOST/USER_AGENT: 'ui.skype.com'/'Skype™ 3.8' Jul 13 12:20:18 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'uhttpd'-process Jul 13 12:20:19 IH-ServerraumInet-AP daemon.alert fff+ /usr/bin/scheduler watch_webserver(): [OK] server PID after restart: '8306' Jul 13 12:20:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): [ERR] returning 143 after fetching 'http://127.0.0.1:2006/all' Jul 13 12:20:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler olsr_build_tables(): wget-error trying again Jul 13 12:20:23 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:20:23 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] timediff > 60 sec = 319 Jul 13 12:20:23 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 319 sec Jul 13 12:20:23 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.175 Jul 13 12:20:24 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.175' mac: '00:0c:f6:07:41:40' dev: 'eth0' user: 'D1-dc22a' pass: 'su9j5' signal: 'lan' lang: '' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:25 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'adaa910c6c60551e796867174c00de27' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:25 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'adaa910c6c60551e796867174c00de27' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=adaa910c6c60551e796867174c00de27&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:20:25 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:20:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:26 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'D1-dc22a+su Jul 13 12:20:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=D1-dc22a+su9j5&USER_LANG=de' Jul 13 12:20:26 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.175' Jul 13 12:20:26 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'www.msftncsi.com'/'Microsoft NCSI' Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.145 00:1f:3c:61:75:f2 anonymous-lan16-n2 Jul 13 12:20:49 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_old(): '00:1f:3c:61:75:f2' is from 'eth0' = lan-DEV Jul 13 12:20:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.175 Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.175' mac: '00:0c:f6:07:41:40' dev: 'eth0' user: 'D1-dc22a' pass: 'su9j5' signal: 'lan' lang: '' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:51 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'adaa910c6c60551e796867174c00de27' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:51 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'adaa910c6c60551e796867174c00de27' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=adaa910c6c60551e796867174c00de27&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:20:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:20:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:20:52 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'D1-dc22a+su Jul 13 12:20:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=D1-dc22a+su9j5&USER_LANG=de' Jul 13 12:20:52 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.175' Jul 13 12:20:52 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.175' with HTTP_HOST/USER_AGENT: 'safebrowsing.clients.google.com'/'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:20:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.175 Jul 13 12:20:55 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.175' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:21:06 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): error during fetching 'http://127.0.0.1/favicon.ico' - killing PID '9238' after 4 seconds Jul 13 12:21:06 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): killing 'wget-qO-http://127.0.0.1/favicon.ico' Jul 13 12:21:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'wget'-process Jul 13 12:21:09 IH-ServerraumInet-AP daemon.err fff+ /usr/bin/scheduler watch_webserver(): [ERR] gethttp not possible - restarting Jul 13 12:21:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_webserver(): [OK] trying to stop 'uhttpd' with PID '8306' Jul 13 12:21:09 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): executing /etc/init.d/uhttpd stop Jul 13 12:21:18 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'uhttpd'-process Jul 13 12:21:19 IH-ServerraumInet-AP daemon.alert fff+ /usr/bin/scheduler watch_webserver(): [OK] server PID after restart: '9338' Jul 13 12:21:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): [ERR] returning 143 after fetching 'http://127.0.0.1:2006/all' Jul 13 12:21:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler olsr_build_tables(): wget-error trying again Jul 13 12:21:24 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:21:24 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 61 sec Jul 13 12:21:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.223 00:26:5e:16:90:97 Jul 13 12:21:28 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.223 00:26:5e:16:90:97 anonymous-lan94-n2 Jul 13 12:21:33 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/kalua_init gen_loader(): [OK] done '/tmp/loader' (in 1.99sec, using 396530 bytes in /tmp/kalua) - you MUST reinclude the new loader with '. /tmp/loader' if this is an interactive shell Jul 13 12:21:48 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.175 Jul 13 12:21:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.175' mac: '00:0c:f6:07:41:40' dev: 'eth0' user: 'D1-dc22a' pass: 'su9j5' signal: 'lan' lang: '' Jul 13 12:21:49 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:21:50 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for 'adaa910c6c60551e796867174c00de27' Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:21:50 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'adaa910c6c60551e796867174c00de27' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=adaa910c6c60551e796867174c00de27&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:21:50 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '3ca96c8e248c18fd938397acdba1b7b2' Jul 13 12:21:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:21:50 CEST 2012' - IP:'10.10.2.175' - DNS:'unresolveable' = HASH:'3ca96c8e248c18fd938397acdba1b7b2' - MAC:'00:0c:f6:07:41:40' - SIGNAL:'lan' - KEYWORD:'D1-dc22a+su Jul 13 12:21:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=3ca96c8e248c18fd938397acdba1b7b2&MAC=00%3a0c%3af6%3a07%3a41%3a40&SIGNAL=lan&KEYWORD=D1-dc22a+su9j5&USER_LANG=de' Jul 13 12:21:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.175' Jul 13 12:21:51 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR302 for IP '10.10.2.145' with HTTP_HOST/USER_AGENT: 'worldcraft-info.ovo.bg'/'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:21:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.145 Jul 13 12:21:51 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.145' lang: '' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:22:18 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): error during fetching 'http://127.0.0.1/favicon.ico' - killing PID '10429' after 16 seconds Jul 13 12:22:18 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): killing 'wget-qO-http://127.0.0.1/favicon.ico' Jul 13 12:22:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'wget'-process Jul 13 12:22:21 IH-ServerraumInet-AP daemon.err fff+ /usr/bin/scheduler watch_webserver(): [ERR] gethttp not possible - restarting Jul 13 12:22:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_webserver(): [OK] trying to stop 'uhttpd' with PID '9338' Jul 13 12:22:21 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): executing /etc/init.d/uhttpd stop Jul 13 12:22:30 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler watch_hanging_command(): successfully killed 'uhttpd'-process Jul 13 12:22:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.145 Jul 13 12:22:30 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.145' mac: '00:1f:3c:61:75:f2' dev: 'eth0' user: 'D1-qg83x' pass: 'tx7yw' signal: 'lan' lang: '' Jul 13 12:22:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '57c1bc2456327240c4523a8feffa611e' Jul 13 12:22:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:31 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:22:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:22:31 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '46f48b5500edf76fed726add628899e0' Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:31 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'46f48b5500edf76fed726add628899e0' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=46f48b5500edf76fed726add628899e0&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:22:32 IH-ServerraumInet-AP daemon.alert fff+ /usr/bin/scheduler watch_webserver(): [OK] server PID after restart: '10553' Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '57c1bc2456327240c4523a8feffa611e' Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:32 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'lan' - KEYWORD:'D1-qg83x+tx Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=lan&KEYWORD=D1-qg83x+tx7yw&USER_LANG=de' Jul 13 12:22:32 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.145' Jul 13 12:22:33 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler wget_do(): [ERR] returning 143 after fetching 'http://127.0.0.1:2006/all' Jul 13 12:22:33 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler olsr_build_tables(): wget-error trying again Jul 13 12:22:36 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:22:36 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] timediff > 60 sec = 72 Jul 13 12:22:36 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 72 sec Jul 13 12:22:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.145 Jul 13 12:22:41 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '10.10.2.145' lang: 'en' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:22:53 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '04:54:53:31:f8:c0' is from 'eth0' = lan-DEV Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: 10.10.2.145 Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '10.10.2.145' mac: '00:1f:3c:61:75:f2' dev: 'eth0' user: 'D1-qg83x' pass: 'tx7yw' signal: 'lan' lang: '' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '57c1bc2456327240c4523a8feffa611e' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:56 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '46f48b5500edf76fed726add628899e0' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:56 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'46f48b5500edf76fed726add628899e0' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'macauth_over_weblogin' - KE Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=46f48b5500edf76fed726add628899e0&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=macauth_over_weblogin&KEYWORD=&USER_LANG=de' Jul 13 12:22:56 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): query local db for '57c1bc2456327240c4523a8feffa611e' Jul 13 12:22:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:22:57 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'lan' - KEYWORD:'D1-qg83x+tx Jul 13 12:22:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=lan&KEYWORD=D1-qg83x+tx7yw&USER_LANG=de' Jul 13 12:22:57 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_failed(): ip: '10.10.2.145' Jul 13 12:22:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ocsp.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:22:59 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'crl.verisign.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:23:03 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '00:1f:16:33:fc:af' is from 'eth0' = lan-DEV Jul 13 12:23:18 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:23:18 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 42 sec Jul 13 12:23:58 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPINFORM(eth0) 10.10.2.188 10:0b:a9:54:45:2c Jul 13 12:23:58 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.188 10:0b:a9:54:45:2c CESAINB1205 Jul 13 12:23:58 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPRELEASE(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:23:58 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_del(): '00:1f:3c:61:75:f2' is from 'eth0' = lan-DEV Jul 13 12:23:58 IH-ServerraumInet-AP daemon.warn dnsmasq[476]: child process exited with status 1 Jul 13 12:24:02 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:02 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:02 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 00:1f:3c:61:75:f2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPDISCOVER(eth0) 00:1f:3c:61:75:f2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPOFFER(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.145 00:1f:3c:61:75:f2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.145 00:1f:3c:61:75:f2 anonymous-lan16-n2 Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript dhcp_add(): '00:1f:3c:61:75:f2' is from 'eth0' = lan-DEV Jul 13 12:24:03 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: :: Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: CONFIG_PROFILE='boltenhagendh_ap' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: CONTENT_LENGTH='57' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: CONTENT_TYPE='application/x-www-form-urlencoded' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: DOCUMENT_ROOT='/www' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: FFF_PLUS_VERSION='372779' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: FFF_VERSION='1.6.37' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: GATEWAY_INTERFACE='CGI/1.1' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HARDWARE='Buffalo WZR-HP-AG300H' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HOME='/root' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HOSTNAME='IH-ServerraumInet-AP' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT='text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_ENCODING='gzip, deflate' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_LANGUAGE='bg,en-us;q=0.7,en;q=0.3' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_CONNECTION='keep-alive' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_HOST='10.10.2.1' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_REFERER='http://10.10.2.1/cgi-bin-welcome.sh?REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: HTTP_USER_AGENT='Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: IFS=' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: ' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANADR='10.10.2.129' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANBRC='10.10.2.255' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANDEV='eth0' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANMSK='255.255.255.128' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANMTU='1500' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANNET='10.10.2.128' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANOLSR='' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LANPRE='25' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOADR='127.0.0.1' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOBRC='127.255.255.255' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LODEV='lo' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOMSK='255.0.0.0' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOMTU='16436' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LONET='127.0.0.0' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOOLSR='' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: LOPRE='8' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: OPTIND='1' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PATH='/sbin:/usr/sbin:/bin:/usr/bin' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PPID='10553' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PS1='\w \$ ' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PS2='> ' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PS4='+ ' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: PWD='/www' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: QUERY_STRING='REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: REDIRECT_STATUS='200' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: REMOTE_ADDR='::' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: REMOTE_HOST='::' Jul 13 12:24:03 IH-ServerraumInet-AP user.notice root: REMOTE_PORT='0' Jul 13 12:24:03 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '46f48b5500edf76fed726add628899e0' Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:24:03 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'46f48b5500edf76fed726add628899e0' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'IH-ServerraumIn Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=46f48b5500edf76fed726add628899e0&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): query local db for '6c29762fbf7a863071134c3accb14d9d' Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '::' mac: '' dev: '' user: 'D1-qg83x' pass: 'tx7yw' signal: 'lan' lang: '' Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): [OK] auth: existing /tmp/vds_user_ Jul 13 12:24:04 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:24:04 CEST 2012' - IP:'10.10.2.145' - DNS:'unresolveable' = HASH:'6c29762fbf7a863071134c3accb14d9d' - MAC:'00:1f:3c:61:75:f2' - SIGNAL:'IH-ServerraumIn Jul 13 12:24:05 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '' URL: 'locally_asked:?LOGIN=6c29762fbf7a863071134c3accb14d9d&MAC=00%3a1f%3a3c%3a61%3a75%3af2&SIGNAL=IH-ServerraumInet-AP_dhcp-add&KEYWO Jul 13 12:24:05 IH-ServerraumInet-AP daemon.info fff+ TERM:screen /etc/dhcp-script.d/10dhcpscript IH-ServerraumInet-AP_dhcp-add(): [ERR] _weblogin login_check 00:1f:3c:61:75:f2/IH-ServerraumInet-AP Jul 13 12:24:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:24:05 CEST 2012' - IP:'::' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:24:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '1' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:24:05 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh weblogin_success(): mac: '' ip: '::' Jul 13 12:24:05 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_redirect(): code/reason/destination: '302'/'Temporary Redirect'/'http://google.com' Jul 13 12:24:05 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:05 IH-ServerraumInet-AP user.notice root: /www/cgi-bin-404.sh: ERROR403 for IP '10.10.2.165' with HTTP_HOST/USER_AGENT: 'ctldl.windowsupdate.com'/'Microsoft-CryptoAPI/6.1' Jul 13 12:24:05 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:06 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: :: Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: CONFIG_PROFILE='boltenhagendh_ap' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: DOCUMENT_ROOT='/www' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: FFF_PLUS_VERSION='372779' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: FFF_VERSION='1.6.37' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: GATEWAY_INTERFACE='CGI/1.1' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HARDWARE='Buffalo WZR-HP-AG300H' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HOME='/root' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HOSTNAME='IH-ServerraumInet-AP' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT='text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_ENCODING='gzip, deflate' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_LANGUAGE='bg,en-us;q=0.7,en;q=0.3' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_CONNECTION='keep-alive' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_HOST='10.10.2.1' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_REFERER='http://10.10.2.1/cgi-bin-welcome.sh?REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: HTTP_USER_AGENT='Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: IFS=' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: ' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANADR='10.10.2.129' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANBRC='10.10.2.255' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANDEV='eth0' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANMSK='255.255.255.128' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANMTU='1500' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANNET='10.10.2.128' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANOLSR='' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LANPRE='25' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOADR='127.0.0.1' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOBRC='127.255.255.255' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LODEV='lo' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOMSK='255.0.0.0' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOMTU='16436' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LONET='127.0.0.0' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOOLSR='' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: LOPRE='8' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: OPTIND='1' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PATH='/sbin:/usr/sbin:/bin:/usr/bin' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PPID='10553' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PS1='\w \$ ' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PS2='> ' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PS4='+ ' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: PWD='/www' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: QUERY_STRING='REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG=en' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REDIRECT_STATUS='200' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REMOTE_ADDR='::' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REMOTE_HOST='::' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REMOTE_PORT='0' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REQUEST_METHOD='GET' Jul 13 12:24:06 IH-ServerraumInet-AP user.notice root: REQUEST_URI='/cgi-bin-welcome.sh?REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG=en' Jul 13 12:24:06 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_splash(): ip: '::' lang: 'en' HTTP_USER_AGENT: 'Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:24:06 IH-ServerraumInet-AP daemon.err uhttpd[10553]: Client(5) failed to obtain remote address [Transport endpoint is not connected] Jul 13 12:24:07 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh http_query_string_sanitize(): REMOTE_ADDR: :: Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: CONFIG_PROFILE='boltenhagendh_ap' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: CONTENT_LENGTH='58' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: CONTENT_TYPE='application/x-www-form-urlencoded' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: DOCUMENT_ROOT='/www' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: FFF_PLUS_VERSION='372779' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: FFF_VERSION='1.6.37' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: GATEWAY_INTERFACE='CGI/1.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HARDWARE='Buffalo WZR-HP-AG300H' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HOME='/root' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HOSTNAME='IH-ServerraumInet-AP' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT='text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_ENCODING='gzip, deflate' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_ACCEPT_LANGUAGE='bg,en-us;q=0.7,en;q=0.3' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_CONNECTION='keep-alive' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_HOST='10.10.2.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_REFERER='http://10.10.2.1/cgi-bin-welcome.sh?REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: HTTP_USER_AGENT='Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: IFS=' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: ' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANADR='10.10.2.129' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANBRC='10.10.2.255' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANDEV='eth0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANMSK='255.255.255.128' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANMTU='1500' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANNET='10.10.2.128' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANOLSR='' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LANPRE='25' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOADR='127.0.0.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOBRC='127.255.255.255' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LODEV='lo' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOMSK='255.0.0.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOMTU='16436' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LONET='127.0.0.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOOLSR='' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: LOPRE='8' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: OPTIND='1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PATH='/sbin:/usr/sbin:/bin:/usr/bin' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PPID='10553' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PS1='\w \$ ' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PS2='> ' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PS4='+ ' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: PWD='/www' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: QUERY_STRING='REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REDIRECT_STATUS='200' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REMOTE_ADDR='::' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REMOTE_HOST='::' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REMOTE_PORT='0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REQUEST_METHOD='POST' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: REQUEST_URI='/cgi-bin-welcome.sh?REDIRECTED=1&FORM_SHOW_PASSWORD_WRONG=true&FORM_LANG' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SCRIPT_FILENAME='/www/cgi-bin-welcome.sh' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SCRIPT_NAME='/cgi-bin-welcome.sh' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SERVER_ADDR='10.10.2.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SERVER_NAME='10.10.2.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SERVER_PORT='80' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SERVER_PROTOCOL='HTTP/1.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: SERVER_SOFTWARE='uHTTPd' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: TZ='CET-1CEST,M3.5.0,M10.5.0/3' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANADR='192.168.178.29' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANBRC='192.168.178.255' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANDEV='eth1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANMSK='255.255.255.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANMTU='1500' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANNET='192.168.178.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANOLSR='' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WANPRE='24' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIADR='10.10.2.1' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIBRC='10.255.255.255' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIDEV='wlan0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIMSK='255.0.0.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIMTU='1500' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFINET='10.0.0.0' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIOLSR='' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFIPRE='8' Jul 13 12:24:07 IH-ServerraumInet-AP user.notice root: WIFI_DEVS='wlan0' Jul 13 12:24:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_try(): ip: '::' mac: '' dev: '' user: 'D1-qg83x' pass: 'tx7yw' signal: 'lan' lang: '' Jul 13 12:24:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): [OK] auth: existing /tmp/vds_user_ Jul 13 12:24:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-sql.sh login_mismatch(): login_failed: 'Fri Jul 13 12:24:08 CEST 2012' - IP:'::' - DNS:'unresolveable' = HASH:'57c1bc2456327240c4523a8feffa611e' - MAC:'' - SIGNAL:'lan' - KEYWORD:'' - LANG:'' Jul 13 12:24:08 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh weblogin_login_check(): ANSWER: '0' (1=ok) FREE: '1' URL: 'locally_asked:?LOGIN=57c1bc2456327240c4523a8feffa611e&MAC=&SIGNAL=lan&KEYWORD=&USER_LANG=de' Jul 13 12:24:09 IH-ServerraumInet-AP daemon.alert fff+ /www/cgi-bin-welcome.sh weblogin_success(): mac: '' ip: '::' Jul 13 12:24:09 IH-ServerraumInet-AP daemon.info fff+ /www/cgi-bin-welcome.sh http_redirect(): code/reason/destination: '302'/'Temporary Redirect'/'http://google.com' Jul 13 12:24:11 IH-ServerraumInet-AP daemon.info fff+ /usr/sbin/cron.olsr-hna-slave net_local_inet_offer(): found local default-gateway over device 'eth1' = 'wan' Jul 13 12:24:11 IH-ServerraumInet-AP daemon.info fff+ /usr/bin/scheduler incoming_wifi_activity(): [ERR] framecounter for wlan0 old/new: 0 = 0 timediff: 53 sec Jul 13 12:24:27 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPREQUEST(eth0) 10.10.2.254 00:0a:e4:eb:53:5b Jul 13 12:24:27 IH-ServerraumInet-AP daemon.info dnsmasq-dhcp[476]: DHCPACK(eth0) 10.10.2.254 00:0a:e4:eb:53:5b anonymous-lan125-n2