
################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Sun Feb 10 03:25:12 2013 Date Range Processed: yesterday ( 2013-Feb-09 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found //appserv/main.php?appserv_root=http://www ... cache/css.jpg??: 1 Time(s) //appserv/main.php?appserv_root=http://www ... cache/log.jpg??: 1 Time(s) //appserv/main.php?appserv_root=test??: 1 Time(s) //wp-content/plugins/radykal-fancy-gallery ... mage-upload.php: 2 Time(s) /admin/banner_manager.php/login.php: 4 Time(s) /admin/categories.php/login.php: 4 Time(s) /admin/categories.php/login.php?cPath=&act ... product_preview: 4 Time(s) /admin/file_manager.php/login.php: 4 Time(s) /admin/sqlpatch.php/password_forgotten.php?action=execute: 140 Time(s) /apple-touch-icon-precomposed.png: 19 Time(s) /apple-touch-icon.png: 19 Time(s) /category/news/feed: 36 Time(s) /category/news/feed/: 26 Time(s) /community: 4 Time(s) /community-activity: 2 Time(s) /favicon.ico: 244 Time(s) /licensing: 5 Time(s) /manager/html: 1 Time(s) /pipermail/2012-December/author.html: 1 Time(s) /pipermail/2012-December/subject.html: 1 Time(s) /pipermail/2013-January/author.html: 1 Time(s) /pipermail/commits: 2 Time(s) /pipermail/infra/2011-September/000027.htm ... F0%E0%E2%EA%E8;: 1 Time(s) /pipermail/infra/2012-February/admin/sqlpa ... ?action=execute: 1 Time(s) /pipermail/infra/2012-March/admin/sqlpatch ... ?action=execute: 4 Time(s) /pipermail/infra/2012-November//wp-content ... mage-upload.php: 2 Time(s) /pipermail/infra/2012-November/001288.html ... om%2Fstunxx.php: 1 Time(s) /pipermail/infra/2012-November/001288.html ... t.net%2Fbad.php: 3 Time(s) /pipermail/infra/2012-November/001330.html ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... t.net%2Fbad.php: 4 Time(s) /pipermail/infra/2012-November/001432.html ... na.tk%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... rts.net/IDC.php: 1 Time(s) /pipermail/infra/2012-November/001445.html ... 12.tr/kikok.php: 1 Time(s) /pipermail/infra/2012-November/001445.html ... na.tk%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001462.html ... t.net%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001462.html ... y.com%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/001471.html ... om%2Fstunxx.php: 1 Time(s) /pipermail/infra/2012-November/001478.html ... com%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-November/001506.html ... com%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-November/001552.html ... ens.dk/user.php: 1 Time(s) /pipermail/infra/2012-November/001552.html ... g.net%2Fbad.php: 13 Time(s) /pipermail/infra/2012-November/001552.html ... grens.dk/xx.php: 1 Time(s) /pipermail/infra/2012-November/001552.html ... rens.dk/bot.php: 1 Time(s) /pipermail/infra/2012-November/001572.html ... ?action=execute: 46 Time(s) /pipermail/infra/2012-November/001572.html ... mage-upload.php: 1 Time(s) /pipermail/infra/2012-November/001572.html ... t.net%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/admin/sqlpa ... ?action=execute: 49 Time(s) /pipermail/infra/2012-November/wp-content/ ... 12.tr/kikok.php: 3 Time(s) /pipermail/infra/2012-November/wp-content/ ... c.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... com%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... e.com%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... ens.dk/user.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... g.net%2Fbad.php: 4 Time(s) /pipermail/infra/2012-November/wp-content/ ... grens.dk/xx.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... ie.ro%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... l.ro%2Fvera.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... ma.ro%2Fbad.php: 4 Time(s) /pipermail/infra/2012-November/wp-content/ ... na.tk%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... om%2Fstunxx.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... rens.dk/bot.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... rts.net/IDC.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... s.com%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... t.net%2Fbad.php: 3 Time(s) /pipermail/infra/2012-November/wp-content/ ... y.com%2Fbad.php: 2 Time(s) /pipermail/infra/2012-October//appserv/mai ... cache/css.jpg??: 1 Time(s) /pipermail/infra/2012-October//appserv/mai ... cache/log.jpg??: 1 Time(s) /pipermail/infra/2012-October//appserv/mai ... erv_root=test??: 1 Time(s) /pipermail/infra/2012-October/001235.html/ ... .ru/tsunami.php: 1 Time(s) /pipermail/infra/2012-October/001244.html/ ... cache/css.jpg??: 1 Time(s) /pipermail/infra/2012-October/001244.html/ ... cache/log.jpg??: 1 Time(s) /pipermail/infra/2012-October/001244.html/ ... erv_root=test??: 1 Time(s) /pipermail/infra/2012-October/admin/sqlpat ... ?action=execute: 11 Time(s) /pipermail/infra/2012-October/wp-content/t ... .ru/tsunami.php: 1 Time(s) /pipermail/infra/2012-September/001106.htm ... ?action=execute: 46 Time(s) /pipermail/infra/2012-September/001139.htm ... .com%2Fmail.php: 1 Time(s) /pipermail/infra/2012-September/001139.htm ... com%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-September/001144.htm ... ?action=execute: 46 Time(s) /pipermail/infra/2012-September/admin/sqlp ... ?action=execute: 92 Time(s) /pipermail/infra/2012-September/wp-content ... .com%2Fmail.php: 1 Time(s) /pipermail/infra/2012-September/wp-content ... com%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-September/wp-content ... ie.ro%2Fbad.php: 1 Time(s) /pipermail/infra/admin/sqlpatch.php/passwo ... ?action=execute: 40 Time(s) /pipermail/infra/wp-content/themes/auction ... 12.tr/kikok.php: 2 Time(s) /pipermail/infra/wp-content/themes/edupres ... l.ro%2Fvera.php: 1 Time(s) /pipermail/infra/wp-content/themes/typebas ... s.com%2Fbad.php: 1 Time(s) /pipermail/mom-devel: 2 Time(s) /pipermail/node-devel/2012-April/000216.ht ... q=user/register: 1 Time(s) /pipermail/node-devel/2012-April/000216.html/user/register: 1 Time(s) /pipermail/node-devel/2012-April/user/register: 1 Time(s) /pipermail/node-devel/user/register: 1 Time(s) /pipermail/nomad-devel: 2 Time(s) /pipermail/patches: 2 Time(s) /pipermail/user/password: 1 Time(s) /pipermail/user/register: 3 Time(s) /releases/3.2/src/ovirt-iso-uploader-3.2.0_master.tar.gz: 8 Time(s) /releases/beta/fedora/17/: 1 Time(s) /releases/beta/fedora/17/repodata/filelists.xml.gz: 24 Time(s) /releases/beta/fedora/17/repodata/other.xml.gz: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 25 Time(s) /releases/beta/ovirt-engine.repo: 1 Time(s) /releases/beta/rpm/EL/6/: 1 Time(s) /releases/beta/rpm/Fedora/$releasever/: 1 Time(s) /releases/beta/rpm/Fedora/17/noarch/?C=N;O=D: 1 Time(s) /releases/beta/rpm/Fedora/17/repodata/repomd.xml: 61 Time(s) /releases/beta/rpm/Fedora/17/x86_64/?C=N;O=A: 1 Time(s) /releases/beta/rpm/Fedora/17/x86_64/?C=N;O=D: 1 Time(s) /releases/beta/rpm/Fedora/19/noarch/old/: 1 Time(s) /releases/nightly/binary/: 1 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 364 Time(s) /releases/nightly/tools/ovirt-node-iso-2.5 ... c5.448.fc17.iso: 1 Time(s) /releases/nightly/tools/ovirt-node-iso-2.5 ... c5.449.fc17.iso: 1 Time(s) /releases/nightly/tools/ovirt-node-iso-2.6 ... 8a.571.fc18.iso: 1 Time(s) /releases/stable/binary/: 1 Time(s) /releases/stable/fedora/16//repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 1 Time(s) /releases/stable/fedora/16/repodata/primary.xml.gz: 24 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 128 Time(s) /releases/stable/ovirt-engine.repo%20-O%20 ... virtengine.repo: 1 Time(s) /releases/stable/rpm/EL/6/repodata/repomd.xml: 3 Time(s) /releases/stable/rpm/EL6/6.3/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 36 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 16 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 104 Time(s) /releases/stable/src/ovirt-iso-uploader-3.2.0_master.tar.gz: 10 Time(s) /robots.txt: 42 Time(s) /user/register: 1 Time(s) /wiki: 1 Time(s) /wp-content/plugins/radykal-fancy-gallery/ ... t.net%2Fbad.php: 1 Time(s) /wp-content/plugins/spotlightyour/thumb.ph ... na.tk%2Fbad.php: 1 Time(s) /wp-content/themes/Envisioned/timthumb.php ... g.net%2Fbad.php: 4 Time(s) /wp-content/themes/Envisioned/timthumb.php ... ma.ro%2Fbad.php: 1 Time(s) /wp-content/themes/Nyke/timthumb.php?src=h ... .ru/tsunami.php: 1 Time(s) /wp-content/themes/OptimizePress/timthumb. ... c.com%2Fbad.php: 1 Time(s) /wp-content/themes/OptimizePress/timthumb. ... om%2Fstunxx.php: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... t.net%2Fbad.php: 1 Time(s) /wp-content/themes/auctionpress/thumbs/_tb ... 12.tr/kikok.php: 2 Time(s) /wp-content/themes/auctionpress/thumbs/_tb ... y.com%2Fbad.php: 2 Time(s) /wp-content/themes/eStore/timthumb.php?src ... e.com%2Fbad.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... s.com%2Fbad.php: 1 Time(s) /wp-content/themes/edupress/scripts/timthu ... l.ro%2Fvera.php: 1 Time(s) /wp-content/themes/flashnews/thumb.php?src ... 12.tr/kikok.php: 1 Time(s) /wp-content/themes/gazette/thumb.php?src=h ... om%2Fstunxx.php: 1 Time(s) /wp-content/themes/kratalistic/thumb.php?s ... ie.ro%2Fbad.php: 1 Time(s) /wp-content/themes/multidesign/scripts/tim ... rts.net/IDC.php: 1 Time(s) /wp-content/themes/newspress-v1.2/timthumb ... com%2Fjahat.php: 1 Time(s) /wp-content/themes/overeasy/thumb.php?src= ... ens.dk/user.php: 1 Time(s) /wp-content/themes/overeasy/thumb.php?src= ... grens.dk/xx.php: 1 Time(s) /wp-content/themes/overeasy/thumb.php?src= ... ma.ro%2Fbad.php: 2 Time(s) /wp-content/themes/overeasy/thumb.php?src= ... rens.dk/bot.php: 1 Time(s) /wp-content/themes/r755/thumb.php?src=http ... .com%2Fmail.php: 1 Time(s) /wp-content/themes/skeptical/thumb.php?src ... e.com%2Fbad.php: 1 Time(s) /wp-content/themes/thedawn/lib/scripts/tim ... ma.ro%2Fbad.php: 1 Time(s) /wp-content/themes/themorningafter/timthum ... t.net%2Fbad.php: 1 Time(s) /wp-content/themes/typebased/thumb.php?src ... s.com%2Fbad.php: 1 Time(s) /wp-content/themes/welcome_inn/thumb.php?s ... ie.ro%2Fbad.php: 1 Time(s) /wp-content/uploads/2011/09/ovirt.png: 3 Time(s) /wp-login.php: 105 Time(s) http://www.ovirt.org/azenv.php: 1 Time(s) 416 Request Range Not Satisfiable /releases/beta/rpm/Fedora/18/noarch/ovirt- ... fc18.noarch.rpm: 2 Time(s) /releases/nightly/rpm/Fedora/17/repodata/other.xml.gz: 40 Time(s) /releases/nightly/rpm/Fedora/18/noarch/ovi ... fc18.noarch.rpm: 1 Time(s) /releases/nightly/rpm/Fedora/18/repodata/other.xml.gz: 13 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... fc17.noarch.rpm: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ su-l: Sessions Opened: root -> root: 1 Time(s) root -> supybot: 1 Time(s) sudo: Authentication Failures: rydekull(0) -> rydekull: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 2.205M Bytes accepted 2,311,771 19.014M Bytes delivered 19,937,285 ======== ================================================ 305 Accepted 98.71% 4 Rejected 1.29% -------- ------------------------------------------------ 309 Total 100.00% ======== ================================================ 1 Reject relay denied 25.00% 3 Reject unknown user 75.00% -------- ------------------------------------------------ 4 Total Rejects 100.00% ======== ================================================ 201 Connections made 3 Connections lost 201 Disconnections 291 Removed from queue 124 Delivered 3416 Sent via SMTP 5 Forwarded 17 Deferred 275 Deferrals 2 Bounce (local) 8 Bounce (remote) 2 Expired and returned to sender 12 DSNs undeliverable 75 Connection failure (outbound) 3 Hostname verification errors 45 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jenkins: 107.22.215.130 (ec2-107-22-215-130.compute-1.amazonaws.com): 1 time rydekull: 79.136.69.32 (h-69-32.a165.priv.bahnhof.se): 1 time Received disconnect: 11: Bye Bye : 402 Time(s) 11: disconnected by user : 3 Time(s) SFTP subsystem requests: 1 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for hst-188.ist.lt [91.216.163.188] failed - POSSIBLE BREAK-IN ATTEMPT! : 5 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== root => supybot --------------- /usr/bin/supybot - 1 Times. ============================================================================== rydekull => root ---------------- /bin/su - 1 Times. ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 48G 40G 7.7G 84% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################