Logwatch for linode01.ovirt.org (Linux)
by logwatch＠lists.ovirt.org
################### Logwatch 7.3.6 (05/19/07) ####################
Processing Initiated: Wed Nov 18 03:32:08 2015
Date Range Processed: yesterday
( 2015-Nov-17 )
Period is day.
Detail Level of Output: 0
Type of Output: unformatted
Logfiles for Host: linode01.ovirt.org
##################################################################
--------------------- Dovecot Begin ------------------------
Dovecot disconnects:
no auth attempts: 1 Time(s)
---------------------- Dovecot End -------------------------
--------------------- httpd Begin ------------------------
Requests with error response codes
404 Not Found
/: 576 Time(s)
/': 1 Time(s)
//wp-admin/admin-ajax.php: 1 Time(s)
//wp-admin/admin-ajax.php?action=revslider ... ./wp-config.php: 2 Time(s)
//xmlrpc.php: 3 Time(s)
/admin.php: 10 Time(s)
/admin/: 9 Time(s)
/admin/Cms_Wysiwyg/directive/index/: 1 Time(s)
/admin/login.php: 9 Time(s)
/administrator/index.php: 9 Time(s)
/apple-touch-icon-precomposed.png: 2 Time(s)
/apple-touch-icon.png: 2 Time(s)
/assets/modules/evogallery/js/uploadify/uploadify.php: 8 Time(s)
/bitrix/admin/index.php?lang=en: 9 Time(s)
/blog/: 1 Time(s)
/blog/robots.txt: 1 Time(s)
/blog/wp-admin/: 10 Time(s)
/category/news/feed: 1 Time(s)
/category/news/feed/: 21 Time(s)
/favicon.ico: 724 Time(s)
/index.php?option=com_search: 1 Time(s)
/mailman/listin: 1 Time(s)
/old/wp-admin/: 10 Time(s)
/pipermail: 1 Time(s)
/pipermail/arch/2013-june/001475.html: 1 Time(s)
/pipermail/engine-patches/2012-April/012366.html: 1 Time(s)
/pipermail/engine-patches/2012-April/012762.html: 1 Time(s)
/pipermail/engine-patches/2012-April/013981.html: 1 Time(s)
/pipermail/engine-patches/2012-December/043249.html: 1 Time(s)
/pipermail/engine-patches/2012-December/044817.html: 1 Time(s)
/pipermail/engine-patches/2012-December/045334.html: 1 Time(s)
/pipermail/engine-patches/2012-February/004845.html: 1 Time(s)
/pipermail/engine-patches/2012-January/002565.html: 1 Time(s)
/pipermail/engine-patches/2012-June/023182.html: 1 Time(s)
/pipermail/engine-patches/2012-June/023827.html: 1 Time(s)
/pipermail/engine-patches/2012-March/009637.html: 1 Time(s)
/pipermail/engine-patches/2012-March/009843.html: 1 Time(s)
/pipermail/engine-patches/2012-March/011783.html: 1 Time(s)
/pipermail/engine-patches/2012-March/011935.html: 1 Time(s)
/pipermail/engine-patches/2012-November/041192.html: 1 Time(s)
/pipermail/engine-patches/2012-October/036976.html: 1 Time(s)
/pipermail/engine-patches/2012-October/037538.html: 1 Time(s)
/pipermail/engine-patches/2012-October/038258.html: 1 Time(s)
/pipermail/engine-patches/2013-April/064783.html: 1 Time(s)
/pipermail/engine-patches/2013-April/067707.html: 1 Time(s)
/pipermail/engine-patches/2013-August/092640.html: 1 Time(s)
/pipermail/engine-patches/2013-August/094533.html: 1 Time(s)
/pipermail/engine-patches/2013-August/096385.html: 1 Time(s)
/pipermail/engine-patches/2013-February/053918.html: 1 Time(s)
/pipermail/engine-patches/2013-February/054894.html: 1 Time(s)
/pipermail/engine-patches/2013-January/052024.html: 1 Time(s)
/pipermail/engine-patches/2013-January/052060.html: 1 Time(s)
/pipermail/engine-patches/2013-July/082636.html: 1 Time(s)
/pipermail/engine-patches/2013-July/089675.html: 1 Time(s)
/pipermail/engine-patches/2013-June/075361.html: 1 Time(s)
/pipermail/engine-patches/2013-June/080372.html: 1 Time(s)
/pipermail/engine-patches/2013-June/081005.html: 1 Time(s)
/pipermail/engine-patches/2013-March/059263.html: 1 Time(s)
/pipermail/engine-patches/2013-October/111674.html: 1 Time(s)
/pipermail/engine-patches/2013-October/117849.html: 1 Time(s)
/pipermail/infra/2012-December/001738.html/trackback/: 1 Time(s)
/pipermail/infra/2012-March/000227.html/trackback/: 1 Time(s)
/pipermail/infra/2012-November/001420.html/trackback/: 1 Time(s)
/pipermail/infra/2012-November/001445.html/trackback/: 1 Time(s)
/pipermail/infra/2012-September/001045.html/trackback/: 1 Time(s)
/pipermail/infra/2012-September/001149.html/trackback/: 1 Time(s)
/pipermail/infra/2012-September/001161.html/trackback/: 1 Time(s)
/pipermail/infra/2013-August/tiki-register.php: 1 Time(s)
/pipermail/infra/2013-December/tiki-register.php: 2 Time(s)
/pipermail/infra/2013-February/xmlrpc.php: 2 Time(s)
/pipermail/infra/2013-January/001797.html/trackback/: 1 Time(s)
/pipermail/infra/2013-January/001832.html/trackback/: 1 Time(s)
/pipermail/infra/2013-January/001854.html/trackback/: 1 Time(s)
/pipermail/infra/2013-January/wp-content/t ... g.com%2Flin.php: 1 Time(s)
/pipermail/infra/2013-January/xmlrpc.php: 11 Time(s)
/pipermail/infra/2013-July/tiki-register.php: 5 Time(s)
/pipermail/infra/2013-June/003194.html/trackback/: 1 Time(s)
/pipermail/infra/2013-June/xmlrpc.php: 1 Time(s)
/pipermail/infra/2013-March/002484.html/trackback/: 1 Time(s)
/pipermail/infra/2013-March/tiki-register.php: 1 Time(s)
/pipermail/infra/2013-May/003136.html/wp-c ... es/timthumb.php: 4 Time(s)
/pipermail/infra/2013-May/003148.html/trackback/: 1 Time(s)
/pipermail/infra/2013-May/tiki-register.php: 12 Time(s)
/pipermail/infra/2013-May/wp-content/theme ... es/timthumb.php: 4 Time(s)
/pipermail/infra/2013-May/wp-content/theme ... g.com%2Flin.php: 5 Time(s)
/pipermail/infra/2013-May/xmlrpc.php: 7 Time(s)
/pipermail/infra/2013-May/zboard.php?id=te ... hp?REMOTE_ADDR=: 4 Time(s)
/pipermail/infra/2013-November/tiki-register.php: 2 Time(s)
/pipermail/infra/2014-March//xmlrpc.php: 1 Time(s)
/pipermail/infra/2015-April//wp-admin/admi ... ./wp-config.php: 2 Time(s)
/pipermail/infra/2015-April//xmlrpc.php: 1 Time(s)
/pipermail/infra/2015-April/009473.html&am ... U_A//xmlrpc.php: 2 Time(s)
/pipermail/infra/2015-April/009509.html&am ... ./wp-config.php: 1 Time(s)
/pipermail/infra/2015-April/index.php?option=com_search: 1 Time(s)
/pipermail/infra/2015-April/wp-admin/admin ... ./wp-config.php: 1 Time(s)
/pipermail/infra/2015-April/wp-admin/admin-ajax.php: 3 Time(s)
/pipermail/infra/2015-April/wp-content/plu ... vslider/get.php: 2 Time(s)
/pipermail/infra/2015-February/tiki-register.php: 1 Time(s)
/pipermail/infra/2015-February/xmlrpc.php: 2 Time(s)
/pipermail/infra/2015-May//xmlrpc.php: 1 Time(s)
/pipermail/infra/2015-May/009724.html& ... V4Q//xmlrpc.php: 1 Time(s)
/pipermail/infra/2015-May/xmlrpc.php: 1 Time(s)
/plus/av.php:: 1 Time(s)
/repos/ci-tools/EL/6/repodata/repomd.xml: 48 Time(s)
/robots.txt: 120 Time(s)
/test/wp-admin/: 9 Time(s)
/user: 1 Time(s)
/user/: 8 Time(s)
/wordpress/: 1 Time(s)
/wordpress/wp-admin/: 9 Time(s)
/wp-admin/: 9 Time(s)
/wp-admin/admin-ajax.php: 3 Time(s)
/wp-admin/admin-ajax.php?action=revolution ... ./wp-config.php: 1 Time(s)
/wp-content/plugins/revslider/temp/update_ ... vslider/get.php: 1 Time(s)
/wp-content/plugins/showbiz/temp/update_ex ... vslider/get.php: 1 Time(s)
/wp-content/themes/TheTravelTheme/includes ... g.com%2Flin.php: 6 Time(s)
/wp-content/themes/TheTravelTheme/includes/timthumb.php: 4 Time(s)
/wp-content/uploads/style.php: 5 Time(s)
/wp-login.php: 14 Time(s)
/wp-login.php?action=register: 2 Time(s)
/wp/: 1 Time(s)
/wp/wp-admin/: 11 Time(s)
/wpinfos.php: 8 Time(s)
/wpinfos.php?osc=cm0gLXJmIHp1Yi4qOyBybSAtc ... SAtcmYgenViLio=: 16 Time(s)
/xmlrpc.php: 20 Time(s)
/xmlrpc.php?rsd: 1 Time(s)
/zboard.php?id=test/lib.php?REMOTE_ADDR=: 4 Time(s)
---------------------- httpd End -------------------------
--------------------- Postfix Begin ------------------------
786 *Warning: Database file needs update
1321 *Warning: Pre-queue content-filter connection overload
58 Miscellaneous warnings
14.923M Bytes accepted 15,648,098
160.173M Bytes delivered 167,953,255
======== ================================================
1412 Accepted 84.15%
266 Rejected 15.85%
-------- ------------------------------------------------
1678 Total 100.00%
======== ================================================
3 Reject relay denied 1.13%
12 Reject HELO/EHLO 4.51%
251 Reject unknown user 94.36%
-------- ------------------------------------------------
266 Total Rejects 100.00%
======== ================================================
947 4xx Reject recipient address 91.41%
89 4xx Reject sender address 8.59%
-------- ------------------------------------------------
1036 Total 4xx Rejects 100.00%
======== ================================================
3232 Connections made
74 Connections lost
3232 Disconnections
1411 Removed from queue
863 Delivered
23460 Sent via SMTP
1 Forwarded
20 Deferred
87 Deferrals
66 Bounce (remote)
45 DSNs undeliverable
347 Connection failure (outbound)
5 Timeout (inbound)
282 Hostname verification errors
14 Hostname validation error
136 Enabled PIX workaround
**Unmatched Entries**
1 Nov 17 11:05:38 linode01 postfix/smtp[25720]: B30B83D4011: Cannot start TLS: handshake failure
1 Nov 17 10:45:07 linode01 postfix/smtp[24977]: C285B3D0148: Cannot start TLS: handshake failure
1 Nov 17 12:07:12 linode01 postfix/smtp[27526]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 11:30:14 linode01 postfix/smtp[26469]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 08:34:26 linode01 postfix/smtp[21261]: 8B858C5BC: Cannot start TLS: handshake failure
1 Nov 17 12:07:12 linode01 postfix/smtp[27526]: 7C4B8C5A9: Cannot start TLS: handshake failure
1 Nov 17 10:43:59 linode01 postfix/smtp[24981]: 4CD213D4011: Cannot start TLS: handshake failure
1 Nov 17 09:34:28 linode01 postfix/smtp[22934]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:04:43 linode01 postfix/smtp[22000]: A7E4AC5BC: Cannot start TLS: handshake failure
1 Nov 17 12:31:21 linode01 postfix/smtp[28167]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:48:28 linode01 postfix/smtp[23564]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:04:43 linode01 postfix/smtp[22000]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 17:49:54 linode01 postfix/smtp[2493]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 11:05:38 linode01 postfix/smtp[25720]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:32:12 linode01 postfix/smtp[22764]: 5BD26C5BC: Cannot start TLS: handshake failure
1 Nov 17 05:47:56 linode01 postfix/smtp[17254]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 17:49:54 linode01 postfix/smtp[2493]: E2B17C74B: Cannot start TLS: handshake failure
1 Nov 17 11:04:35 linode01 postfix/smtp[25704]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:32:12 linode01 postfix/smtp[22764]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 04:52:58 linode01 postfix/smtp[15834]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:38:19 linode01 postfix/smtp[23049]: 9A883C752: Cannot start TLS: handshake failure
1 Nov 17 10:30:38 linode01 postfix/smtp[24713]: 15F6F3D0147: Cannot start TLS: handshake failure
1 Nov 17 09:34:13 linode01 postfix/smtp[22906]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 02:47:19 linode01 postfix/smtp[11738]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 07:25:46 linode01 postfix/smtp[19517]: CDF1CC5A9: Cannot start TLS: handshake failure
1 Nov 17 10:43:59 linode01 postfix/smtp[24981]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:48:28 linode01 postfix/smtp[23564]: BBF99C754: Cannot start TLS: handshake failure
1 Nov 17 07:51:55 linode01 postfix/smtp[20227]: 345F4C5A9: Cannot start TLS: handshake failure
1 Nov 17 03:14:24 linode01 postfix/smtp[12150]: 5752AC71B: Cannot start TLS: handshake failure
1 Nov 17 12:41:02 linode01 postfix/smtp[28356]: 7AE90C5BC: Cannot start TLS: handshake failure
1 Nov 17 02:47:19 linode01 postfix/smtp[11738]: 476A2C71B: Cannot start TLS: handshake failure
1 Nov 17 12:41:02 linode01 postfix/smtp[28356]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 11:04:35 linode01 postfix/smtp[25704]: 801183D4011: Cannot start TLS: handshake failure
1 Nov 17 10:30:38 linode01 postfix/smtp[24713]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 10:45:07 linode01 postfix/smtp[24977]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 06:03:49 linode01 postfix/smtp[17554]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 11:30:14 linode01 postfix/smtp[26469]: 86E5E3D4011: Cannot start TLS: handshake failure
1 Nov 17 09:54:05 linode01 postfix/smtp[23749]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 03:14:24 linode01 postfix/smtp[12150]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 07:25:46 linode01 postfix/smtp[19517]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 05:47:56 linode01 postfix/smtp[17254]: 905DDC5BC: Cannot start TLS: handshake failure
1 Nov 17 03:44:21 linode01 postfix/smtp[13835]: 03182C754: Cannot start TLS: handshake failure
1 Nov 17 09:38:19 linode01 postfix/smtp[23049]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 05:42:00 linode01 postfix/smtp[16812]: E090FC71B: Cannot start TLS: handshake failure
1 Nov 17 07:51:55 linode01 postfix/smtp[20227]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 12:31:21 linode01 postfix/smtp[28167]: 84B6CC71B: Cannot start TLS: handshake failure
1 Nov 17 03:44:21 linode01 postfix/smtp[13835]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
1 Nov 17 09:34:13 linode01 postfix/smtp[22906]: F2D90C74B: Cannot start TLS: handshake failure
1 Nov 17 09:54:05 linode01 postfix/smtp[23749]: 61FC1C755: Cannot start TLS: handshake failure
1 Nov 17 04:52:58 linode01 postfix/smtp[15834]: 96BBAC726: Cannot start TLS: handshake failure
1 Nov 17 05:42:00 linode01 postfix/smtp[16812]: SSL_connect error to tacos.lugy.net[70.85.31.174]:25: -1
1 Nov 17 09:34:28 linode01 postfix/smtp[22934]: A7D9A3D0146: Cannot start TLS: handshake failure
1 Nov 17 06:03:49 linode01 postfix/smtp[17554]: AAFEAC726: Cannot start TLS: handshake failure
1 Nov 17 08:34:26 linode01 postfix/smtp[21261]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1
---------------------- Postfix End -------------------------
--------------------- SSHD Begin ------------------------
Users logging in through sshd:
eedri:
209.132.186.36 (nat-pool-tlv-t.redhat.com): 1 time
Received disconnect:
11: : 36 Time(s)
11: Bye Bye : 11 Time(s)
11: Normal Shutdown, Thank you for playing : 1 Time(s)
11: disconnected by user : 1 Time(s)
3: com.jcraft.jsch.JSchException: Auth fail : 22 Time(s)
3: java.net.SocketTimeoutException: Read timed out : 1 Time(s)
**Unmatched Entries**
reverse mapping checking getaddrinfo for 46x146x220x219.static-business.perm.ertelecom.ru [46.146.220.219] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s)
reverse mapping checking getaddrinfo for 210-61-150-154.hinet-ip.hinet.net [210.61.150.154] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s)
Address 113.160.158.43 maps to static.vdc.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s)
reverse mapping checking getaddrinfo for dynamic.vdc.vn [113.163.173.23] failed - POSSIBLE BREAK-IN ATTEMPT! : 3 time(s)
---------------------- SSHD End -------------------------
--------------------- Sudo (secure-log) Begin ------------------------
==============================================================================
eedri => root
-------------
/bin/bash - 1 Times.
==============================================================================
nrpe => root
------------
/sbin/service - 288 Times.
---------------------- Sudo (secure-log) End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/xvda 97G 70G 27G 73% /
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################
