################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Fri Dec 7 03:11:30 2012 Date Range Processed: yesterday ( 2012-Dec-06 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ A total of 2 sites probed the server 101.226.33.202 180.153.201.211 A total of 1 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): /releases/stable\xe3\x80\x81 HTTP Response 302 Requests with error response codes 404 Not Found //wp-content/plugins/radykal-fancy-gallery ... mage-upload.php: 4 Time(s) /OVirt_3.1_release_notes: 1 Time(s) /admin/board: 1 Time(s) /apple-touch-icon-precomposed.png: 11 Time(s) /apple-touch-icon.png: 11 Time(s) /board: 2 Time(s) /category/news/feed: 15 Time(s) /category/news/feed/: 76 Time(s) /community: 1 Time(s) /community-activity: 1 Time(s) /crossdomain.xml: 1 Time(s) /favicon.ico: 432 Time(s) /licensing: 1 Time(s) /listinfo/board: 1 Time(s) /meetings/ovirt/2012/ovirt.2012-01-17-14: 1 Time(s) /meetings/ovirt/2012/ovirt.2012-09-17-14.00.html: 1 Time(s) /meetings/ovirt/2012/ovirt.2012-09-17-14.00.log.html: 1 Time(s) /news-and-events/workshop: 1 Time(s) /news-and-events/workshop-1-to-3-november-2011/: 1 Time(s) /news-and-events/workshop/: 1 Time(s) /pipermail/announce/2012-february/000019.html: 1 Time(s) /pipermail/commits: 2 Time(s) /pipermail/infra/2012-March/index.php?titl ... gin&type=signup: 1 Time(s) /pipermail/infra/2012-March/wikka.php?wakka=UserSettings: 1 Time(s) /pipermail/infra/2012-November/001330.html ... %2Fgenerasi.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... i.com/multi.php: 2 Time(s) /pipermail/infra/2012-November/url(data:im ... SUVORK5CYII%3d): 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... %2Fgenerasi.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... i.com/multi.php: 2 Time(s) /pipermail/infra/2012-October//wp-content/ ... mage-upload.php: 5 Time(s) /pipermail/infra/2012-October/001269.html/ ... mage-upload.php: 22 Time(s) /pipermail/infra/2012-august/000871.html: 1 Time(s) /pipermail/infra/2012-september/001112.html: 1 Time(s) /pipermail/mom-devel: 1 Time(s) /pipermail/node-devel/2012-April/mobiquo/mobiquo.php: 1 Time(s) /pipermail/nomad-devel: 1 Time(s) /pipermail/patches: 1 Time(s) /pipermail/users/2012-February/mobiquo/mobiquo.php: 3 Time(s) /pipermail/users/2012-June/mobiquo/mobiquo.php: 1 Time(s) /pipermail/users/2012-May/mobiquo/mobiquo.php: 3 Time(s) /pipermail/users/2012-September/mobiquo/mobiquo.php: 1 Time(s) /releases/3.1/rpm/Fedora/17/ovirt-engine.repo: 1 Time(s) /releases/beta/fedora/17: 3 Time(s) /releases/beta/fedora/17/repodata/filelists.xml.gz: 24 Time(s) /releases/beta/fedora/17/repodata/other.xml.gz: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 28 Time(s) /releases/nightly/fedora: 1 Time(s) /releases/nightly/fedora/16/ovirt-engine.repo: 2 Time(s) /releases/nightly/fedora/16/ovirt-release-1-2.noarch.rpm: 1 Time(s) /releases/nightly/fedora/16/repodata/filelists.xml.gz: 18 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 338 Time(s) /releases/nightly/fedora/17: 1 Time(s) /releases/nightly/fedora/6/i386/repodata/repomd.xml: 3 Time(s) /releases/nightly/rpm/Fedora/17/ovirt-engine.repo: 1 Time(s) /releases/ovirt-releases-fedora.noarch.rpm: 1 Time(s) /releases/stable%e3%80%81: 2 Time(s) /releases/stable/binary/: 5 Time(s) /releases/stable/binary/ovirt-node-image-2.2.2-2.2.fc16.iso: 11 Time(s) /releases/stable/fedora/: 1 Time(s) /releases/stable/fedora/16: 1 Time(s) /releases/stable/fedora/16/: 3 Time(s) /releases/stable/fedora/16//repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/16/dists/natty/InRelease: 1 Time(s) /releases/stable/fedora/16/dists/natty/Release: 1 Time(s) /releases/stable/fedora/16/dists/natty/Release.gpg: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... /Translation-en: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... /Translation-ru: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 386/Packages.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 386/Packages.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 86/Packages.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-en.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-en.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru_RU: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... ation-ru_RU.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... lation-ru_RU.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... lation-ru_RU.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... nslation-en.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... nslation-ru.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... y-i386/Packages: 1 Time(s) /releases/stable/fedora/16/dists/natty/main/i18n/Index: 1 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 2 Time(s) /releases/stable/fedora/16/repodata/primary.xml.gz: 24 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 520 Time(s) /releases/stable/fedora/17/repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/17/x86_64/repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/6/$baserch/repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/6/i386/repodata/repomd.xml: 3 Time(s) /releases/stable/ovirt-engine.repo: 14 Time(s) /releases/stable/ovirt-engine.repo%20-O%20 ... irt-engine.repo: 1 Time(s) /releases/stable/ovirt-engine.repo%20-O%20 ... virtengine.repo: 1 Time(s) /releases/stable/ovirt-engine.repo%20-O%20/etc/: 1 Time(s) /releases/stable/ovirt-engine.repo%20-O%20/etc/yum.repos.d: 2 Time(s) /releases/stable/rpm/EL/6/6/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/EL/6/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/EL6/: 2 Time(s) /releases/stable/rpm/EL6/6.3/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 121 Time(s) /releases/stable/rpm/EL6/6Server/: 1 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 38 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 14 Time(s) /releases/stable/rpm/Fedora/14/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/Fedora/16: 1 Time(s) /releases/stable/rpm/Fedora/16/: 3 Time(s) /releases/stable/rpm/Fedora/16/repodata: 1 Time(s) /releases/stable/rpm/Fedora/16/repodata/: 1 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 135 Time(s) /releases/stable/tools/ovirt-node-iso-2.5.1-1.0.fc17.iso: 4 Time(s) /releases/stable\xe3\x80\x81: 1 Time(s) /robots.txt: 45 Time(s) /wiki/How_to_license_a_project: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... %2Fgenerasi.php: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... i.com/multi.php: 1 Time(s) /wp-content/uploads/2011/09/ovirt.png: 2 Time(s) /wp-login.php: 74 Time(s) 416 Request Range Not Satisfiable /releases/nightly/rpm/Fedora/17/repodata/filelists.xml.gz: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 2 *Warning: Pre-queue content-filter connection overload 9.334M Bytes accepted 9,787,098 104.751M Bytes delivered 109,839,080 ======== ================================================ 795 Accepted 99.50% 4 Rejected 0.50% -------- ------------------------------------------------ 799 Total 100.00% ======== ================================================ 2 Reject relay denied 50.00% 2 Reject unknown user 50.00% -------- ------------------------------------------------ 4 Total Rejects 100.00% ======== ================================================ 492 Connections made 22 Connections lost 492 Disconnections 787 Removed from queue 263 Delivered 13548 Sent via SMTP 4 Forwarded 34 Deferred 394 Deferrals 14 Bounce (local) 20 Bounce (remote) 34 DSNs undeliverable 185 Connection failure (outbound) 4 Timeout (inbound) 17 Hostname verification errors 138 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jenkins: 107.22.215.130 (ec2-107-22-215-130.compute-1.amazonaws.com): 1 time Received disconnect: 11: Bye Bye : 1387 Time(s) 11: PECL/ssh2 (http://pecl.php.net/packages/ssh2) : 4 Time(s) 11: disconnected by user : 3 Time(s) SFTP subsystem requests: 1 Time(s) **Unmatched Entries** Address 82.221.99.229 maps to tor-exit.burratino.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for ip223.hichina.com [223.4.148.150] failed - POSSIBLE BREAK-IN ATTEMPT! : 738 time(s) reverse mapping checking getaddrinfo for tor-exit.burratino.net [82.221.99.229] failed - POSSIBLE BREAK-IN ATTEMPT! : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 25G 24G 677M 98% / /dev/xvda => 98% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################