################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Sat Oct 20 03:17:35 2012 Date Range Processed: yesterday ( 2012-Oct-19 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ A total of 1 sites probed the server 91.121.115.109 A total of 2 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): //index.php?option=com_mailto&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP Response 301 /?option=com_mailto&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP Response 200 Requests with error response codes 404 Not Found /%20to%20try%20it%20out.: 1 Time(s) //favicon.ico: 2 Time(s) /Communication: 1 Time(s) /Talk:Architecture: 1 Time(s) /Talk:Features/Design/DetailedHotPlugNic: 1 Time(s) /Talk:Features/SPICERelatedFeatures: 1 Time(s) /Talk:Main_Page: 4 Time(s) /User_talk:91.236.74.177: 1 Time(s) /admin/categories.php/login.php?cPath=&act ... product_preview: 10 Time(s) /admin/sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) /apple-touch-icon-precomposed.png: 27 Time(s) /apple-touch-icon.png: 23 Time(s) /baks/: 1 Time(s) /category/information/mobiquo/mobiquo.php: 1 Time(s) /crossdomain.xml: 1 Time(s) /docs/Using_the_oVirt_Server_Suite_User_In ... ges/vmp-tab.png: 1 Time(s) /docs/Using_the_oVirt_Server_Suite_User_Interface/: 2 Time(s) /documentation.html: 2 Time(s) /download.html: 5 Time(s) /errors.php?error=http://ninoceram.ir/imag ... stom/rock.gif??: 1 Time(s) /errors.php?error=http://ninoceram.ir/imag ... ustom/pop.gif??: 1 Time(s) /errors.php?error=test??: 1 Time(s) /favicon.ico: 1492 Time(s) /get-ovirt/mobiquo/mobiquo.php: 1 Time(s) /index.html: 10 Time(s) /index.php=1': 3 Time(s) /install-instructions.html: 1 Time(s) /license.txt: 1 Time(s) /mailinglist.html: 1 Time(s) /page/Dashboard_UX: 1 Time(s) /page/FAQ: 2 Time(s) /page/Image:Details-sample.png: 1 Time(s) /page/MediaWiki:Ipb_expiry_invalid/: 2 Time(s) /page/Special:Recentchangeslinked/Image:Style2-terminal.png: 1 Time(s) /pipermail/infra/2012-February/000224.html ... hp?error=test??: 1 Time(s) /pipermail/infra/2012-February/000224.html ... stom/rock.gif??: 1 Time(s) /pipermail/infra/2012-February/000224.html ... ustom/pop.gif??: 1 Time(s) /pipermail/infra/2012-February/errors.php? ... stom/rock.gif??: 1 Time(s) /pipermail/infra/2012-February/errors.php? ... ustom/pop.gif??: 1 Time(s) /pipermail/infra/2012-February/errors.php?error=test??: 1 Time(s) /pipermail/infra/2012-March//admin/categor ... product_preview: 10 Time(s) /pipermail/infra/2012-March/000226.html//a ... product_preview: 10 Time(s) /pipermail/infra/2012-March/000226.html/ad ... ?action=execute: 2 Time(s) /pipermail/infra/2012-March/000226.html/index.php=1': 3 Time(s) /pipermail/infra/2012-March/admin/sqlpatch ... ?action=execute: 2 Time(s) /pipermail/infra/2012-March/index.php=1': 3 Time(s) /pipermail/users//index.php?option=com_mai ... lf/environ%0000: 1 Time(s) /pipermail/users/2012-April//index.php?opt ... lf/environ%0000: 1 Time(s) /promo/rhev3/benefits/: 2 Time(s) /rawhide-build-instructions.html: 1 Time(s) /rawhide-install-instructions.html: 1 Time(s) /readme.html: 1 Time(s) /register: 1 Time(s) /releases/3.0/rpm/EL6/6/repodata/repomd.xml: 2 Time(s) /releases/3.0/rpm/el-ovirt-engine.repo: 1 Time(s) /releases/3.1/rpm/Fedora/17/ovirt-engine.repo: 1 Time(s) /releases/3.1/rpm/Fedora/6/x86_64/: 1 Time(s) /releases/3.1/rpm/Fedora/x86_64/: 1 Time(s) /releases/3.1/tools/ovirt-node-iso-2.5.0-2.0.fc17.iso: 1 Time(s) /releases/3.1/tools/ovirt-node-iso-2.5.1-1.0.fc17.iso: 1 Time(s) /releases/beta/fedora/16/: 1 Time(s) /releases/beta/fedora/17/: 1 Time(s) /releases/beta/fedora/17/repodata/filelists.xml.gz: 24 Time(s) /releases/beta/fedora/17/repodata/other.xml.gz: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 43 Time(s) /releases/beta/rpm/Fedora/16/: 1 Time(s) /releases/mobiquo/mobiquo.php: 1 Time(s) /releases/nightly/fedora/16/: 2 Time(s) /releases/nightly/fedora/16/ovirt-engine-s ... fc16.noarch.rpm: 1 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 327 Time(s) /releases/nightly/fedora/17/: 2 Time(s) /releases/nightly/fedora/18/: 1 Time(s) /releases/nightly/rpm/EL6/6/repodata/repomd.xml: 1 Time(s) /releases/ovirt%2A.rpm: 1 Time(s) /releases/ovirt-release-fedora-noarch.rpm: 1 Time(s) /releases/ovirt-release-rhel.noarch.rpm: 1 Time(s) /releases/stable/binary/: 8 Time(s) /releases/stable/binary/ovirt-node-image-2.2.2-2.2.fc16.iso: 1 Time(s) /releases/stable/fedora: 3 Time(s) /releases/stable/fedora/: 3 Time(s) /releases/stable/fedora/16/: 2 Time(s) /releases/stable/fedora/16//repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/16/dists/natty/InRelease: 1 Time(s) /releases/stable/fedora/16/dists/natty/Release: 1 Time(s) /releases/stable/fedora/16/dists/natty/Release.gpg: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... /Translation-en: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... /Translation-ru: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 386/Packages.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 386/Packages.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... 86/Packages.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-en.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-en.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... anslation-ru_RU: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... ation-ru_RU.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... lation-ru_RU.gz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... lation-ru_RU.xz: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... nslation-en.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... nslation-ru.bz2: 1 Time(s) /releases/stable/fedora/16/dists/natty/mai ... y-i386/Packages: 1 Time(s) /releases/stable/fedora/16/dists/natty/main/i18n/Index: 1 Time(s) /releases/stable/fedora/16/ovirt-engine.re ... 20not%20working: 2 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 6 Time(s) /releases/stable/fedora/16/repodata/primary.xml.gz: 29 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 548 Time(s) /releases/stable/fedora/17/repodata/repomd.xml: 3 Time(s) /releases/stable/ovirt-engine.repo: 7 Time(s) /releases/stable/rpm/EL/6/6/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/EL/6/repodata/repomd.xml: 3 Time(s) /releases/stable/rpm/EL/6/repodata/repomd.xml:: 1 Time(s) /releases/stable/rpm/EL6/: 1 Time(s) /releases/stable/rpm/EL6/6.3/repodata/repomd.xml: 3 Time(s) /releases/stable/rpm/EL6/6/: 2 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd ... %2014]%20PYCURL: 2 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 637 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml:: 1 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 19 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 20 Time(s) /releases/stable/rpm/Fedora/17/ovirt-engine.repo: 1 Time(s) /releases/stable/tools/ovirt-node-iso-2.5.1-1.0.fc17.iso: 2 Time(s) /repos/ovirt/10/x86_64/repodata/repomd.xml: 24 Time(s) /repos/ovirt/15/i386/repodata/repomd.xml: 2 Time(s) /repos/ovirt/15/x86_64/repodata/repomd.xml: 2 Time(s) /repos/ovirt/ovirt-release-LATEST.noarch.rpm: 1 Time(s) /robots.txt: 70 Time(s) /screenshots.html: 3 Time(s) /screenshots/ViewVMPool.png: 3 Time(s) /signup.php: 2 Time(s) /sitemap.xml: 1 Time(s) /sitemap_index.xml: 1 Time(s) /styles/diagram4.png: 3 Time(s) /styles/et_logo.png: 1 Time(s) /styles/front-graphic.png: 1 Time(s) /undefined: 1 Time(s) /user/register: 2 Time(s) /w/.../OVirt-3.0-Installation_Guide-en-US.pd: 1 Time(s) /w/images/a/a9/OVirt-3.1-Installation_Guide-en-US.pdf: 1 Time(s) /w/index.php?title=-&action=raw&ge ... onobook&270: 22 Time(s) /w/index.php?title=-&action=raw&ma ... 000&gen=css: 20 Time(s) /wiki/$1: 1 Time(s) /wiki/BE_-_oVirt_workshop_November_2011: 1 Time(s) /wiki/Building_Ovirt_engine: 2 Time(s) /wiki/Category:Foo_Project: 2 Time(s) /wiki/Category:Meetings: 2 Time(s) /wiki/Category:ProjectName: 1 Time(s) /wiki/Category_talk:Api: 1 Time(s) /wiki/Category_talk:Automation: 1 Time(s) /wiki/Category_talk:Draft_documentation: 1 Time(s) /wiki/Category_talk:How_to: 1 Time(s) /wiki/Category_talk:Infrastructure: 2 Time(s) /wiki/Category_talk:Ovirt_guest_agent: 1 Time(s) /wiki/Category_talk:Project_proposal: 1 Time(s) /wiki/Category_talk:Scheduling: 1 Time(s) /wiki/Category_talk:Source_code_repository: 1 Time(s) /wiki/Category_talk:Travel: 1 Time(s) /wiki/Category_talk:Workshop_November_2011: 1 Time(s) /wiki/Category_talk:Workshops: 1 Time(s) /wiki/File_talk:Fosdem2012-ovirt-clean.pdf: 1 Time(s) /wiki/File_talk:OVirt-3.0-Installation_Guide-en-US.pdf: 1 Time(s) /wiki/File_talk:Ovirt-engine-core_fosdem_2012.pdf: 1 Time(s) /wiki/Getting_involved_-_oVirt_workshop_November_2011: 2 Time(s) /wiki/Governance_-_oVirt_workshop_November_2011: 2 Time(s) /wiki/Help:Moving_a_page: 1 Time(s) /wiki/Help_talk:Contents: 1 Time(s) /wiki/Help_talk:Redirect: 1 Time(s) /wiki/Help_talk:Wiki_structure: 1 Time(s) /wiki/Index.php: 11 Time(s) /wiki/OVirt_Administration_Guide: 5 Time(s) /wiki/OVirt_Evaluation_Guide: 2 Time(s) /wiki/OVirt_User_Portal_Guide: 2 Time(s) /wiki/Ovirt_build_on_debian/mobiquo/mobiquo.php: 1 Time(s) /wiki/Packaging_-_oVirt_workshop_November_2011: 2 Time(s) /wiki/Register.php: 2 Time(s) /wiki/Release_Notes/: 1 Time(s) /wiki/Session_name_-_oVirt_workshop_November_2011: 1 Time(s) /wiki/Setting_Management_Develop: 1 Time(s) /wiki/Talk:Allinone: 4 Time(s) /wiki/Talk:Architecture: 1 Time(s) /wiki/Talk:Backlog: 1 Time(s) /wiki/Talk:Engine_Adding_Messages: 1 Time(s) /wiki/Talk:Engine_tweeks_for_ovirt_node_and_regular_host: 1 Time(s) /wiki/Talk:Features/Design/DetailedHotPlugNic: 1 Time(s) /wiki/Talk:Features/Design/DetailedStableDeviceAddresses: 1 Time(s) /wiki/Talk:Features/Design/StableDeviceAddresses: 1 Time(s) /wiki/Talk:Features/DetailedLockMechanism: 1 Time(s) /wiki/Talk:Features/Gluster_Support: 2 Time(s) /wiki/Talk:Features/NodeAutomation: 1 Time(s) /wiki/Talk:Features/Quota-3.2: 2 Time(s) /wiki/Talk:Features/SPICERelatedFeatures: 1 Time(s) /wiki/Talk:Features/TUIredesign: 1 Time(s) /wiki/Talk:IRC: 1 Time(s) /wiki/Talk:Main_Page: 4 Time(s) /wiki/Talk:OVirt_3.0_Feature_Guide: 1 Time(s) /wiki/Talk:SetupNetworks_SyncNetworks: 1 Time(s) /wiki/Talk:Testing/FedoraTestDay: 1 Time(s) /wiki/Talk:Testing/PythonApi: 1 Time(s) /wiki/Talk:Workshop_November_2011_-_Day_Three: 1 Time(s) /wiki/Template:Autolang: 1 Time(s) /wiki/User:157.56.95.143: 1 Time(s) /wiki/User:91.201.64.28: 1 Time(s) /wiki/User:Ekohl: 1 Time(s) /wiki/User:Emesika: 1 Time(s) /wiki/User:Eyal: 1 Time(s) /wiki/User:Iheim: 1 Time(s) /wiki/User:Kmayilsa: 1 Time(s) /wiki/User:Lvroyce: 1 Time(s) /wiki/User:Mgoldboi: 1 Time(s) /wiki/User:Oschreib: 1 Time(s) /wiki/User:Ykaul: 1 Time(s) /wiki/User_talk:157.56.95.143: 1 Time(s) /wiki/User_talk:209.132.188.26: 2 Time(s) /wiki/User_talk:91.201.64.28: 1 Time(s) /wiki/User_talk:91.236.74.177: 1 Time(s) /wiki/User_talk:Ekohl: 1 Time(s) /wiki/User_talk:Emesika: 1 Time(s) /wiki/User_talk:Quaid: 1 Time(s) /wiki/User_talk:Quaid/SCALE_10x_presentation: 1 Time(s) /wiki/index.php?title=Special:UserLogin&type=signup: 23 Time(s) /wiki/index.php?title=UML_Diagrams&printable=yes: 1 Time(s) /wiki/mobiquo/mobiquo.php: 1 Time(s) /wiki/oVirtWiki:About: 1 Time(s) /wiki/oVirtWiki:Privacy_policy: 1 Time(s) /wiki/oVirtWiki:Users: 3 Time(s) /wiki/wikka.php?wakka=UserSettings: 3 Time(s) /wikka.php?wakka=UserSettings: 1 Time(s) /wp-content/themes/coraline-ovirt/screenshot.png: 1 Time(s) http://wiki.ovirt.org/wiki/index.php?title ... gin&type=signup: 2 Time(s) http://www.yazoodle.net/azenv.php: 3 Time(s) 405 Method Not Allowed /w/images/0/00/Guest-agent-arch.png: 3 Time(s) /w/images/1/1c/Storage-nfs.png: 1 Time(s) /w/images/2/21/Overall-arch.png: 8 Time(s) /w/images/2/23/Vdsm-arch.png: 8 Time(s) /w/images/2/29/New-network-interface.png: 1 Time(s) /w/images/3/36/Fedora-server-clone.png: 1 Time(s) /w/images/4/43/New-win-desktop.png: 1 Time(s) /w/images/4/4c/Storage-iscsi-lun.png: 1 Time(s) /w/images/4/4f/Iso-images-uploaded.png: 1 Time(s) /w/images/5/5b/Newvm-guide.png: 1 Time(s) /w/images/5/5d/Vm-add-perm.png: 1 Time(s) /w/images/7/73/New-vm-allocation.png: 1 Time(s) /w/images/7/76/New-fedora-server.png: 1 Time(s) /w/images/7/7a/Power-user-portal.png: 1 Time(s) /w/images/9/96/Data-center-view.png: 1 Time(s) /w/images/9/99/Edit-and-approve.png: 1 Time(s) /w/images/a/a8/Basic-user-portal.png: 1 Time(s) /w/images/a/af/Engine-arch2.png: 7 Time(s) /w/images/b/b5/Approve-hypervisor-new.png: 1 Time(s) /w/images/b/bb/Logical-network-view.png: 1 Time(s) /w/images/c/ca/Storage-iscsi.png: 1 Time(s) /w/images/c/cf/Hook-arch.png: 2 Time(s) /w/images/d/d2/Admin-portal-label.png: 1 Time(s) /w/images/d/dd/Attach-iso-library.png: 1 Time(s) /w/images/e/e0/Engine-arch.png: 9 Time(s) /w/images/e/e3/Run-fedora-vm.png: 1 Time(s) /w/images/e/e4/New-host.png: 1 Time(s) /w/images/e/e7/Cluster-view.png: 1 Time(s) /w/images/f/f6/New-virtual-disk.png: 1 Time(s) /w/images/f/f9/Make-template.png: 1 Time(s) /wp-content/uploads/2011/09/ovirt.png: 12 Time(s) 416 Request Range Not Satisfiable /releases/3.1/rpm/Fedora/17/i386/vdsm-pyth ... 6.fc17.i686.rpm: 1 Time(s) /releases/3.1/rpm/Fedora/17/noarch/ovirt-n ... fc17.noarch.rpm: 1 Time(s) /releases/3.1/rpm/Fedora/17/noarch/vdsm-ho ... fc17.noarch.rpm: 10 Time(s) /releases/3.1/rpm/Fedora/17/noarch/vdsm-re ... fc17.noarch.rpm: 1 Time(s) /releases/3.1/rpm/Fedora/17/noarch/vdsm-te ... fc17.noarch.rpm: 1 Time(s) /releases/3.1/rpm/Fedora/17/x86_64/vdsm-py ... fc17.x86_64.rpm: 2 Time(s) /releases/beta/rpm/Fedora/17/repodata/filelists.xml.gz: 9 Time(s) /releases/stable/rpm/Fedora/17/repodata/filelists.xml.gz: 8 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 1 *Warning: Pre-queue content-filter connection overload 2 Miscellaneous warnings 5.205M Bytes accepted 5,458,311 153.113M Bytes delivered 160,550,117 ======== ================================================ 427 Accepted 99.30% 3 Rejected 0.70% -------- ------------------------------------------------ 430 Total 100.00% ======== ================================================ 3 Reject unknown user 100.00% -------- ------------------------------------------------ 3 Total Rejects 100.00% ======== ================================================ 250 Connections made 2 Connections lost 250 Disconnections 411 Removed from queue 134 Delivered 9067 Sent via SMTP 5 Forwarded 67 Deferred 910 Deferrals 1 Bounce (local) 13 Bounce (remote) 5 Expired and returned to sender 19 DSNs undeliverable 1344 Connection failure (outbound) 7 Timeout (inbound) 5 Hostname verification errors 52 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jenkins: 107.22.215.130 (ec2-107-22-215-130.compute-1.amazonaws.com): 1 time quaid: 50.1.51.127 (50-1-51-127.dsl.dynamic.fusionbroadband.com): 1 time Received disconnect: 11: Bye Bye : 163 Time(s) 11: disconnected by user : 3 Time(s) SFTP subsystem requests: 1 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for 18.246.97.119.broad.wh.hb.dynamic.163data.com.cn [119.97.246.18] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for adsl-pool2-185.metrotel.net.co [190.1.159.185] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for rt1bb246-84-149.routit.net [84.246.1.149] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 25G 23G 1.3G 95% / /dev/xvda => 95% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################