As far as i can tell the first number is the date (year/month/day format), so you're looking for stuff that's from or after 131112. Maybe sifting through all the logs can help you see what's "standard" and what's not.
"Inspired" by defcon's endeavor to look through the logs i decided to check them out myself and see if i could spot something unusual. On my end, i don't have the error log he posted, but i looked a bit through the logs i do have and in the "Clientservercomm.log" i noticed that the normal behavior for logging into the…