################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Wed Jan 22 03:29:27 2014 Date Range Processed: yesterday ( 2014-Jan-21 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- Cron Begin ------------------------ MAIL sending errors 4 Time(s) ---------------------- Cron End ------------------------- --------------------- httpd Begin ------------------------ A total of 1 sites probed the server 125.19.132.179 Requests with error response codes 403 Forbidden /wordpress/wp-admin/: 1 Time(s) 404 Not Found /**mailman/listinfo/users%3Chttp://lists.o ... /listinfo/users: 1 Time(s) //admin/categories.php/login.php?cPath=&ac ... product_preview: 9 Time(s) //images/stories/bkht.php?rf: 2 Time(s) //index.php?option=com_jce&task=plugin&plu ... ion=1576&cid=20: 1 Time(s) //wp-content/themes/Envisioned/timthumb.php: 1 Time(s) //wp-content/themes/mainstream/thumb.php?s ... a.com/kikok.php: 1 Time(s) /__mailman/listinfo/users: 6 Time(s) /admin.php: 3 Time(s) /admin/: 3 Time(s) /admin/banner_manager.php/login.php: 1 Time(s) /admin/board: 1 Time(s) /admin/categories.php/login.php: 1 Time(s) /admin/file_manager.php/login.php: 1 Time(s) /admin/login.php: 3 Time(s) /administrator/components/com_acymailing/i ... pload_image.php: 2 Time(s) /administrator/components/com_civicrm/civi ... pload_image.php: 2 Time(s) /administrator/components/com_jinc/classes ... pload_image.php: 2 Time(s) /administrator/components/com_jnewsletter/ ... pload_image.php: 2 Time(s) /administrator/index.php: 3 Time(s) /apple-touch-icon-precomposed.png: 1 Time(s) /bitrix/admin/index.php?lang=en: 3 Time(s) /blog/wp-admin/: 1 Time(s) /board: 2 Time(s) /category/news/feed: 25 Time(s) /category/news/feed/: 49 Time(s) /components/com_acymailing/inc/openflash/p ... pload_image.php: 2 Time(s) /components/com_jnews/includes/openflashch ... pload_image.php: 2 Time(s) /favicon.ico: 914 Time(s) /index.php?option=com_jce&task=plugin&plug ... 86d0dd595c8e20b: 2 Time(s) /index.php?option=com_jce&task=plugin&plug ... ion=1576&cid=20: 2 Time(s) /listinfo/board: 1 Time(s) /mailman/user/register: 2 Time(s) /pipermail: 1 Time(s) /pipermail/engine: 1 Time(s) /pipermail/engine-patches//images/stories/bkht.php?rf: 2 Time(s) /pipermail/engine-patches/2012-August//ima ... ies/bkht.php?rf: 2 Time(s) /pipermail/engine-patches/2012-August/inde ... 86d0dd595c8e20b: 2 Time(s) /pipermail/engine-patches/2012-August/inde ... ion=1576&cid=20: 2 Time(s) /pipermail/engine-patches/2012-June/cvnrpzsgcxfyivbv.html: 1 Time(s) /pipermail/engine-patches/index.php?option ... 86d0dd595c8e20b: 2 Time(s) /pipermail/engine-patches/index.php?option ... ion=1576&cid=20: 2 Time(s) /pipermail/infra//admin/categories.php/log ... product_preview: 9 Time(s) /pipermail/infra/2012-August//admin/catego ... product_preview: 3 Time(s) /pipermail/infra/2012-November/tiki-register.php: 1 Time(s) /pipermail/infra/2013-April//admin/categor ... product_preview: 3 Time(s) /pipermail/infra/2013-April//wp-content/th ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-April/002521.html&am ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-February//admin/cate ... product_preview: 3 Time(s) /pipermail/infra/2013-January//wp-content/ ... ed/timthumb.php: 1 Time(s) /pipermail/infra/2013-January/001854.html& ... ed/timthumb.php: 1 Time(s) /pipermail/infra/2013-January/001949.html& ... ed/timthumb.php: 1 Time(s) /pipermail/infra/2013-January/001967.html& ... ed/timthumb.php: 1 Time(s) /pipermail/infra/2013-July//wp-content/the ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-July/003447.html& ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-March//admin/categor ... product_preview: 6 Time(s) /pipermail/infra/2013-March//wp-content/th ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-March/002447.html&am ... a.com/kikok.php: 1 Time(s) /pipermail/infra/2013-May//admin/categorie ... product_preview: 3 Time(s) /pipermail/infra/2013-May/003154.html/: 1 Time(s) /pipermail/infra/2013-May/YaBB.pl?action=register: 2 Time(s) /pipermail/infra/2013-May/admin/banner_manager.php/login.php: 1 Time(s) /pipermail/infra/2013-May/admin/categories.php/login.php: 1 Time(s) /pipermail/infra/2013-May/admin/file_manager.php/login.php: 1 Time(s) /pipermail/infra/2013-May/index.php?action=register: 2 Time(s) /pipermail/infra/2013-May/tiki-register.php: 2 Time(s) /pipermail/infra/2013-May/wp-content/theme ... com%2Fpagat.php: 1 Time(s) /pipermail/infra/wp-content/themes/ecobiz/ ... com%2Fpagat.php: 1 Time(s) /pipermail/ovirt-engine: 2 Time(s) /pipermail/user/register: 1 Time(s) /pipermail/users/2012-March/user/register: 1 Time(s) /pipermail/users/2013-October//index.php?o ... ion=1576&cid=20: 1 Time(s) /pipermail/users/2013-October/016787.html& ... ion=1576&cid=20: 1 Time(s) /pub/ovirt-snapshot/: 1 Time(s) /pub/ovirt-snapshot/rpm/Fedora/20/: 1 Time(s) /releases/%5C: 2 Time(s) /releases//3.3.2-rc.backup/rpm/EL/: 1 Time(s) /releases//3.3.2-rc.backup/rpm/EL/6/repoda ... b5-other.xml.gz: 1 Time(s) /releases//beta/rpm/EL/6Server/repodata/8c ... -primary.xml.gz: 1 Time(s) /releases/3.2/rpm/EL/$releasever/: 3 Time(s) /releases/3.2/src/%25: 1 Time(s) /releases/3.2/tools/ovirt-live-1.0.iso_myaime_: 1 Time(s) /releases/3.3.2-beta/rpm/EL/: 1 Time(s) /releases/3.3.2/rpm/EL/6.5/x86_64/0: 1 Time(s) /releases/3.3.2/rpm/Fedora/17/repodata/repomd.xml: 5 Time(s) /releases/3.3.2/rpm/Fedora/18/repodata/repomd.xml: 31 Time(s) /releases/3.3.2/rpm/Fedora/19/repodata/9fb ... -primary.xml.gz: 1 Time(s) /releases/3.3.2/rpm/Fedora/20/repodata/repomd.xml: 218 Time(s) /releases/3.3.2/rpm/Fedora/20/repodata/repomd.xml:: 1 Time(s) /releases/3.3/iso/ovirt-node-iso-3.0.0-5.0.3.vdsm.fc19.iso: 1 Time(s) /releases/3.3/rpm/EL/$releasever: 1 Time(s) /releases/3.3/rpm/EL/$releasever/: 2 Time(s) /releases/3.3/rpm/EL/6.5/noarch/,,: 1 Time(s) /releases/3.3/rpm/EL/6.5/noarch/vdsm-python/: 1 Time(s) /releases/3.3/rpm/EL/6.5/repodata/8f8d65d7 ... -primary.xml.gz: 1 Time(s) /releases/3.3/rpm/EL/6/.treeinfo: 1 Time(s) /releases/3.3/rpm/EL/6/treeinfo: 1 Time(s) /releases/3.3/rpm/Fedora/18//repodata/repomd.xml: 9 Time(s) /releases/3.3/rpm/Fedora/18/repodata/repomd.xml: 9 Time(s) /releases/3.4.0-alpha/rpm/EL/%24releasever: 5 Time(s) /releases/3.4.0-alpha/rpm/Fedora/20/noarch ... fc20.noarch.rpm: 5 Time(s) /releases/3.4/rpm/EL/6/noarch/: 1 Time(s) /releases/alpha/rpm/Fedora/20/repodata/repomd.xml: 49 Time(s) /releases/beta.old/rpm/EL/6/noarch/: 1 Time(s) /releases/beta.old/rpm/EL/6/ppc64/: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 2 Time(s) /releases/beta/iso/ovirt-node-iso-2.6.1-20120228.fc18.iso: 55 Time(s) /releases/beta/rpm/EL/6/repodata/8c5c4e615 ... -primary.xml.gz: 1 Time(s) /releases/beta/rpm/Fedora/18: 1 Time(s) /releases/beta/rpm/Fedora/18/n: 1 Time(s) /releases/beta/rpm/Fedora/18/x86_64/: 1 Time(s) /releases/beta/rpm/Fedora/20/repodata/repomd.xml: 65 Time(s) /releases/beta/tools/: 1 Time(s) /releases/nightly.bkp/rpm/Fedora/19/noarch/: 1 Time(s) /releases/nightly/RHEL/6/repodata/repomd.xml: 2 Time(s) /releases/nightly/fedora/16/: 2 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 227 Time(s) /releases/nightly/rpm/%40distro%40/6Server ... data/repomd.xml: 12 Time(s) /releases/nightly/rpm/EL/6/hooks/vdsm-hook ... .el6.noarch.rpm: 5 Time(s) /releases/nightly/rpm/Fedora/$releasever: 1 Time(s) /releases/nightly/rpm/Fedora/$releasever/: 1 Time(s) /releases/nightly/rpm/Fedora/$releasever/repodata/repomd.xml: 1 Time(s) /releases/nightly/rpm/Fedora/17/noarch/: 1 Time(s) /releases/nightly/rpm/Fedora/17/repodata/repomd.xml: 2 Time(s) /releases/nightly/rpm/Fedora/18/n: 1 Time(s) /releases/nightly/rpm/Fedora/18/repodata/2 ... ther.sqlite.bz2: 11 Time(s) /releases/nightly/rpm/Fedora/19/repodata/1 ... ists.sqlite.bz2: 1 Time(s) /releases/nightly/rpm/Fedora/19/repodata/2 ... -primary.xml.gz: 1 Time(s) /releases/nightly/rpm/Fedora/19/repodata/2 ... ther.sqlite.bz2: 4 Time(s) /releases/nightly/rpm/Fedora/19/repodata/6 ... ther.sqlite.bz2: 3 Time(s) /releases/nightly/rpm/Fedora/19/repodata/9 ... ists.sqlite.bz2: 1 Time(s) /releases/nightly/rpm/Fedora/19/repodata/b ... ther.sqlite.bz2: 1 Time(s) /releases/nightly/rpm/Fedora/19/repodata/c ... ther.sqlite.bz2: 5 Time(s) /releases/nightly/rpm/Fedora/19/repodata/e ... ther.sqlite.bz2: 3 Time(s) /releases/nightly/rpm/Fedora/5Server/repodata/repomd.xml: 6 Time(s) /releases/nightly/rpm/fedora/$releasever/: 1 Time(s) /releases/ovirt-release-10-2-fedora.noarch.rpm: 1 Time(s) /releases/ovirt-release-Fedora.noarch.rpm/ ... data/repomd.xml: 1 Time(s) /releases/ovirt-release-centos.noarch.rpm: 1 Time(s) /releases/ovirt-release-el6-10-1.noarch.rpm: 6 Time(s) /releases/ovirt-release-el6-8-1.noarch.rpm: 18 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... data/repomd.xml: 1 Time(s) /releases/ovirt-release-rhel.noarch.rpm: 1 Time(s) /releases/ovirt-release.noarch.rpm: 3 Time(s) /releases/stable/binary: 3 Time(s) /releases/stable/binary/: 6 Time(s) /releases/stable/binary/ovirt-node-image-2.2.2-2.2.fc16.iso: 2 Time(s) /releases/stable/fedora/: 1 Time(s) /releases/stable/fedora/16: 3 Time(s) /releases/stable/fedora/16/: 4 Time(s) /releases/stable/fedora/16/repodata/: 1 Time(s) /releases/stable/fedora/16/repodata/filelists.xml.gz: 32 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 251 Time(s) /releases/stable/ovirt-engine.repo: 5 Time(s) /releases/stable/rpm/EL/19/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/EL/20/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/EL/6.4/repodata/8f8d6 ... -primary.xml.gz: 1 Time(s) /releases/stable/rpm/EL/6.5/repodata/8f8d6 ... -primary.xml.gz: 1 Time(s) /releases/stable/rpm/EL/6/.treeinfo: 3 Time(s) /releases/stable/rpm/EL/6/images/pxeboot/: 1 Time(s) /releases/stable/rpm/EL/6/treeinfo: 3 Time(s) /releases/stable/rpm/EL/6/x86_64/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/EL/6Server/repodata/4 ... ary.sqlite.bz2:: 6 Time(s) /releases/stable/rpm/EL/6Server/repodata/4 ... y.sqlite.bz2%3A: 6 Time(s) /releases/stable/rpm/EL/6Workstation/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 8 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 11 Time(s) /releases/stable/rpm/Fedora/$releasever: 3 Time(s) /releases/stable/rpm/Fedora//repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/Fedora/15/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 12 Time(s) /releases/stable/rpm/Fedora/18/n: 1 Time(s) /releases/stable/rpm/Fedora/20/noarch/otop ... fc19.noarch.rpm: 2 Time(s) /releases/stable/rpm/Fedora/20/noarch/ovir ... fc19.noarch.rpm: 15 Time(s) /releases/stable/rpm/Fedora/20/repodata/repomd.xml: 388 Time(s) /releases/stable/rpm/Fedora/6Server/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/Fedora/7Everything/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/Fedora/repodata/repomd.xml: 8 Time(s) /releases/stable/rpm/el/6Server/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/fedora/$releasever/: 1 Time(s) /releases/stable/rpm/fedora/19/repodata/repomd.xml: 6 Time(s) /releases/stable/src/%25: 1 Time(s) /releases/stable/src/ovirt-log-collector-%25: 1 Time(s) /releases/updates-testing/rpm/Fedora/20/repodata/repomd.xml: 78 Time(s) /robots.txt: 139 Time(s) /user/: 3 Time(s) /user/register: 2 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... com%2Fpagat.php: 1 Time(s) /wp-login.php: 3 Time(s) /wp-login.php?action=register: 8 Time(s) /wp/wp-admin/: 1 Time(s) 416 Request Range Not Satisfiable /releases/stable/rpm/Fedora/17/noarch/old/ ... fc17.noarch.rpm: 90 Time(s) /releases/stable/rpm/Fedora/17/noarch/ovir ... fc17.noarch.rpm: 171 Time(s) /releases/stable/rpm/Fedora/17/x86_64/ovir ... fc17.x86_64.rpm: 36 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... -7-1.noarch.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... fc18.noarch.rpm: 5 Time(s) 501 Not Implemented null: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ su-l: Sessions Opened: root -> root: 3 Time(s) sudo: Unknown Entries: auth could not identify password for [knesenko]: 1 Time(s) conversation failed: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 2 *Fatal: General fatal 7 *Warning: Error writing queue file 1 *Warning: Pre-queue content-filter connection overload 15 Miscellaneous warnings 35.168M Bytes accepted 36,876,174 895.864M Bytes delivered 939,381,069 ======== ================================================ 3399 Accepted 98.15% 64 Rejected 1.85% -------- ------------------------------------------------ 3463 Total 100.00% ======== ================================================ 2 Reject relay denied 3.12% 62 Reject unknown user 96.88% -------- ------------------------------------------------ 64 Total Rejects 100.00% ======== ================================================ 1877 Connections made 33 Connections lost 1878 Disconnections 3395 Removed from queue 1095 Delivered 72756 Sent via SMTP 11 Forwarded 35 Deferred 97 Deferrals 26 Bounce (remote) 6 DSNs undeliverable 379 Connection failure (outbound) 6 Timeout (inbound) 52 Hostname verification errors 891 Enabled PIX workaround **Unmatched Entries** 1 Jan 21 13:35:39 linode01 postfix/smtpd[2533]: NOQUEUE: reject: MAIL from e24smtp01.br.ibm.com[32.104.18.85]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<e24smtp01.br.ibm.com> 1 Jan 21 12:56:44 linode01 postfix/smtpd[2354]: NOQUEUE: reject: MAIL from unknown[46.149.111.243]: 452 4.3.1 Insufficient system storage; proto=SMTP helo=<thousleer.com> 1 Jan 21 13:42:52 linode01 postfix/smtpd[2555]: disconnect fJan 21 13:43:26 linode01 postfix/smtpd[2555]: connect from snt0-omc4-s40.snt0.hotmail.com[65.54.51.91] 1 Jan 21 13:42:29 linode01 postfix/smtpd[2555]: NOQUEUE: reject: MAIL from localhost[::1]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<linode01.ovirt.org> 1 Jan 21 13:35:27 linode01 postfix/smtpd[2533]: NOQUEUE: reject: MAIL from gerrit.ovirt.org[107.22.212.69]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<gerrit.ovirt.org> 1 Jan 21 13:42:52 linode01 postfix/smtpd[2555]: NOQUEUE: reject: MAIL from alterway01.ovirt.org[89.31.150.215]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<jenkins.ovirt.org> 1 Jan 21 13:34:50 linode01 postfix/smtpd[2533]: NOQUEUE: reject: MAIL from gerrit.ovirt.org[107.22.212.69]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<gerrit.ovirt.org> 1 Jan 21 13:35:26 linode01 postfix/smtpd[2533]: NOQUEUE: reject: MAIL from snt0-omc4-s40.snt0.hotmail.com[65.54.51.91]: 452 4.3.1 Insufficient system storage; proto=ESMTP helo=<snt0-omc4-s40.snt0.hotmail.com> 1 Jan 21 12:56:44 linode01 postfix/smtpd[2354]: lost connection after MAIL from unknown[46.149.111.2Jan 21 13:34:25 linode01 postfix/qmgr[7094]: 5D72AC11E: from=<users-bounces@ovirt.org>, size=4061, nrcpt=20 (queue active) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: jenkins (46097255) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: dcaro: 83.53.213.176 (176.Red-83-53-213.dynamicIP.rima-tde.net): 5 times 209.132.186.34 (nat-pool-brq-t.redhat.com): 3 times gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 2 times jenkins: 89.31.150.215 (alterway01.ovirt.org): 6 times 66.187.237.11 (nat-pool-tlv-u1.redhat.com): 1 time knesenko: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 3 times Received disconnect: 11: Bye Bye : 540 Time(s) 11: disconnected by user : 6 Time(s) SFTP subsystem requests: 7 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for 221.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.221] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 215.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.215] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 210.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.210] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) Address 93.174.93.51 maps to server.anonymous-hosting-service.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dcaro => root ------------- /bin/bash - 2 Times. /bin/rm - 1 Times. ============================================================================== knesenko => root ---------------- /bin/su - 3 Times. **Unmatched Entries** pam_unix(sudo:auth): auth could not identify password for [knesenko]: 1 Time(s) pam_unix(sudo:auth): conversation failed: 1 Time(s) ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 59G 57G 2.3G 97% / /dev/xvda => 97% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################