################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Wed Jul 17 03:11:34 2013 Date Range Processed: yesterday ( 2013-Jul-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 400 Bad Request /Features/Design/jasper_in_webadmin: 1 Time(s) /Features/Node/Bridgeless_Networking: 1 Time(s) /Features/Node_vdsm_plugin: 1 Time(s) /OVirt_3.2_release_notes: 1 Time(s) /Special:RequestAccount: 1 Time(s) /oVirt_Wiki:General_disclaimer: 1 Time(s) /repos/ovirt/ARCHIVE/src/selinux-policy-mi ... 1-107.fc9.patch: 1 Time(s) /www.mediawiki.org: 1 Time(s) 404 Not Found /%2A%2Amailman/listinfo/users: 1 Time(s) //c.txt: 2 Time(s) //logx.txt: 2 Time(s) //thumb_editor.php: 2 Time(s) //wp-content/uploads/images.php: 2 Time(s) //wp-includes/class-wp-customize-client.php: 2 Time(s) //wp-includes/jahat.php: 2 Time(s) //wp-includes/wp-script.php: 2 Time(s) //wp-includes/wp-services.php: 2 Time(s) //wp-login.php: 1 Time(s) //x.txt: 2 Time(s) /CHANGELOG.txt: 1 Time(s) /______mailman/listinfo/users: 1 Time(s) /__mailman/listinfo/users: 2 Time(s) /admin.php: 1 Time(s) /admin/board: 1 Time(s) /administrator/index.php: 1 Time(s) /apple-touch-icon-114x114-precomposed.png: 2 Time(s) /apple-touch-icon-114x114.png: 2 Time(s) /apple-touch-icon-precomposed.png: 2 Time(s) /apple-touch-icon.png: 2 Time(s) /board: 2 Time(s) /category/news/feed: 1 Time(s) /category/news/feed/: 153 Time(s) /favicon.ico: 890 Time(s) /index.php?action=register: 3 Time(s) /listinfo/board: 1 Time(s) /manager/html: 1 Time(s) /node-base/: 1 Time(s) /node-base/3.0.0/: 1 Time(s) /node-base/3.0.0/rpm/Fedora/18/: 1 Time(s) /node-base/3.0.0/rpm/Fedora/18/repodata/repomd.xml: 1 Time(s) /node-base/3.0.0/rpm/Fedora/18/repodata/repomd.xml:: 1 Time(s) /pipermail: 1 Time(s) /pipermail/arch/2012-November/000976.html),occurredin: 1 Time(s) /pipermail/index.php?act=Reg&CODE=00: 1 Time(s) /pipermail/index.php?app=core&module=global§ion=register: 1 Time(s) /pipermail/infra/2012-December/001588.html ... 58FQ/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... %3Ca%20href=%22: 1 Time(s) /pipermail/infra/2012-November/001330.html ... com%2Fpagat.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... %3Ca%20href=%22: 11 Time(s) /pipermail/infra/2012-November/001420.html ... .html%3C//c.txt: 1 Time(s) /pipermail/infra/2012-November/001420.html ... .html%3C//x.txt: 1 Time(s) /pipermail/infra/2012-November/001420.html ... 001420.html%3C/: 1 Time(s) /pipermail/infra/2012-November/001420.html ... humb_editor.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... ludes/jahat.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... mize-client.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... ml%3C//logx.txt: 1 Time(s) /pipermail/infra/2012-November/001420.html ... oads/images.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... s/wp-script.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... ve.kz%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... wp-services.php: 1 Time(s) /pipermail/infra/2012-November/001471.html ... CKoA/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001471.html ... XNww/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... com%2Fpagat.php: 1 Time(s) /pipermail/infra/2012-October/001202.html/trackback/: 1 Time(s) /pipermail/infra/2012-September/001072.html/trackback/: 1 Time(s) /pipermail/infra/2012-September/zboard.php?id=byroe: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... %3Ca%20href=%22: 11 Time(s) /pipermail/infra/2013-April/002521.html%22 ... .html%3C//c.txt: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... .html%3C//x.txt: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... 002521.html%3C/: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... humb_editor.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... ludes/jahat.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... mize-client.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... ml%3C//logx.txt: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... oads/images.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... s/wp-script.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... ve.kz%2Fbad.php: 1 Time(s) /pipermail/infra/2013-April/002521.html%22 ... wp-services.php: 1 Time(s) /pipermail/infra/2013-June/003234.html& ... .com%2Finfo.php: 1 Time(s) /pipermail/infra/2013-June/wp-content/them ... .com%2Finfo.php: 1 Time(s) /pipermail/infra/zboard.php?id=byroe: 1 Time(s) /pipermail/node-devel/2011-december/000057.html: 1 Time(s) /pipermail/node-devel/2011-october/000012.html: 1 Time(s) /pipermail/user/register: 6 Time(s) /pipermail/users/2012-january/000291.html: 1 Time(s) /pipermail/users/2012-september/009449.html: 1 Time(s) /pipermail/users/2013-april/013827.html: 1 Time(s) /releaes/: 1 Time(s) /releases/,: 1 Time(s) /releases/3.1/rpm/Fedora/17/ovirt-engine.repo: 1 Time(s) /releases/3.1/rpm/Fedora/17/ovirt-engine.repo2: 2 Time(s) /releases/3.2.1/iso: 1 Time(s) /releases/3.2.1/iso/: 2 Time(s) /releases/3.2_bak/: 1 Time(s) /releases/:: 1 Time(s) /releases/alpha/rpm/EL/6/repodata/475a9e33 ... -primary.xml.gz: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 2 Time(s) /releases/grubby%20fatal%20error:%20unable ... able%20template: 1 Time(s) /releases/nightly/RHEL/6/repodata/repomd.xml: 1 Time(s) /releases/nightly/fedo: 1 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 249 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml:: 1 Time(s) /releases/nightly/rpm/EL/6/hooks/vdsm-hook ... .el6.noarch.rpm: 3 Time(s) /releases/nightly/rpm/EL/6/testing/repodata/repomd.xml: 1 Time(s) /releases/nightly/rpm/Fedora/$releasever/: 1 Time(s) /releases/nightly/rpm/Fedora/17/repodata/8 ... ther.sqlite.bz2: 10 Time(s) /releases/nightly/rpm/Fedora/18/repodata/7 ... ther.sqlite.bz2: 59 Time(s) /releases/nightly/rpm/Fedora/19/noarch/vds ... c18.noarch.rpm:: 1 Time(s) /releases/nightly/rpm/Fedora/19/noarch/vds ... fc18.noarch.rpm: 2 Time(s) /releases/nightly/rpm/Fedora/19/x86_64/vds ... fc18.x86_64.rpm: 1 Time(s) /releases/node-base/3.0.0/iso/ovirt-node-i ... -3.0.1.fc19.iso: 1 Time(s) /releases/node-base/3.0.0/rpm/Fedora/$releasever/: 2 Time(s) /releases/node-base/nightly/rpm/Fedora/19/ ... -primary.xml.gz: 1 Time(s) /releases/ovirt-release-fedora.moarch.rpm: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... /Translation-en: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... 386/Packages.gz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... 386/Packages.xz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... 6/Packages.lzma: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... 86/Packages.bz2: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... anslation-en.gz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... anslation-en.xz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... anslation-en_CA: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... ation-en_CA.bz2: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... ise/Release.gpg: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... lation-en_CA.gz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... lation-en_CA.xz: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... nslation-en.bz2: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... precise/Release: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... slation-en.lzma: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... tion-en_CA.lzma: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm/ ... y-i386/Packages: 1 Time(s) /releases/stable/binary/: 6 Time(s) /releases/stable/binary/ovirt-node-image-2.2.0-0.iso: 1 Time(s) /releases/stable/f16: 2 Time(s) /releases/stable/fedora/: 1 Time(s) /releases/stable/fedora/16/: 1 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 81 Time(s) /releases/stable/ovirt-engine.repo: 29 Time(s) /releases/stable/rpm/EL/6.4/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/EL/6/noarch/jboss-as- ... .el6.x86_64.rpm: 1 Time(s) /releases/stable/rpm/EL/6/noarch/ovirt-eng ... .el6.noarch.rpm: 2 Time(s) /releases/stable/rpm/EL/6/noarch/python-ki ... .el6.noarch.rpm: 1 Time(s) /releases/stable/rpm/EL/6/noarch/python-pl ... .el6.noarch.rpm: 1 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 18 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 16 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 48 Time(s) /releases/stable/src/ovirt-engine-sdk-1.3.tar.gz: 1 Time(s) /robots.txt: 113 Time(s) /user/register: 2 Time(s) /wp-content/themes/LondonLive/thumb.php?sr ... com%2Fpagat.php: 1 Time(s) /wp-content/themes/deliciousmagazine/thumb ... ve.kz%2Fbad.php: 1 Time(s) /wp-content/themes/eStore/timthumb.php?src ... .com%2Finfo.php: 1 Time(s) /wp-content/themes/mainstream/thumb.php?sr ... ve.kz%2Fbad.php: 1 Time(s) /wp-login.php: 8 Time(s) /wp-login.php?action=register: 11 Time(s) /xmlrpc.php: 2 Time(s) /zboard.php?id=byroe: 1 Time(s) http://www.ovirt.org/azenv.php: 2 Time(s) 416 Request Range Not Satisfiable /releases/nightly/rpm/Fedora/18/noarch/oto ... fc18.noarch.rpm: 2 Time(s) /releases/nightly/rpm/Fedora/18/noarch/vds ... fc18.noarch.rpm: 1 Time(s) /releases/nightly/rpm/Fedora/18/x86_64/pyt ... fc18.x86_64.rpm: 2 Time(s) /releases/stable/rpm/Fedora/18/i686/vdsm-4 ... 6.fc18.i686.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/i686/vdsm-4 ... 8.fc18.i686.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/otop ... fc18.noarch.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... -7-1.noarch.rpm: 10 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... fc18.noarch.rpm: 6 Time(s) /releases/stable/rpm/Fedora/18/noarch/vdsm ... fc18.noarch.rpm: 20 Time(s) /releases/stable/rpm/Fedora/18/x86_64/vdsm ... fc18.x86_64.rpm: 3 Time(s) ---------------------- httpd End ------------------------- --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present [<c011f140>] ? mm_fault_error+0xe0/0xe0 ...: 4 Time(s) [<c06903c6>] ? error_code+0x5a/0x60 ...: 2 Time(s) ---------------------- Kernel End ------------------------- --------------------- pam_unix Begin ------------------------ su-l: Sessions Opened: root -> root: 1 Time(s) sudo: Authentication Failures: jbrooks(506) -> jbrooks: 1 Time(s) Unknown Entries: auth could not identify password for [jbrooks]: 1 Time(s) conversation failed: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 1 *Fatal: Configuration error 1 *Warning: Startup error 9 *Warning: Pre-queue content-filter connection overload 1 Process exited 27 Miscellaneous warnings 35.875M Bytes accepted 37,617,294 488.735M Bytes delivered 512,475,562 ======== ================================================ 4647 Accepted 99.76% 11 Rejected 0.24% -------- ------------------------------------------------ 4658 Total 100.00% ======== ================================================ 6 Reject relay denied 54.55% 5 Reject unknown user 45.45% -------- ------------------------------------------------ 11 Total Rejects 100.00% ======== ================================================ 2679 Connections made 19 Connections lost 2679 Disconnections 4575 Removed from queue 1492 Delivered 67386 Sent via SMTP 5 Forwarded 117 Deferred 1848 Deferrals 104 Bounce (local) 46 Bounce (remote) 9 Expired and returned to sender 158 DSNs undeliverable 1505 Connection failure (outbound) 28 Timeout (inbound) 1 SMTP commands dialog error 115 Hostname verification errors 880 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: ekohl: 217.119.231.199 (bogey.xentower.nl): 1 time gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jbrooks: 50.156.124.199 (c-50-156-124-199.hsd1.ca.comcast.net): 1 time jenkins: 50.19.1.136 (ec2-50-19-1-136.compute-1.amazonaws.com): 1 time jslave: 23.20.17.161 (ec2-23-20-17-161.compute-1.amazonaws.com): 1 time knesenko: 66.187.237.11 (nat-pool-tlv-u1.redhat.com): 1 time mburns: 24.63.186.29 (c-24-63-186-29.hsd1.vt.comcast.net): 3 times Received disconnect: 11: Bye Bye : 44 Time(s) 11: disconnected by user : 7 Time(s) SFTP subsystem requests: 2 Time(s) **Unmatched Entries** Address 192.198.107.216 maps to mta4.champsender.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 8 time(s) reverse mapping checking getaddrinfo for 198-136-57-92.static.lvnoc.com [198.136.57.92] failed - POSSIBLE BREAK-IN ATTEMPT! : 37 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== ekohl => root ------------- /bin/bash - 1 Times. /sbin/service - 1 Times. /usr/bin/less - 2 Times. ============================================================================== jbrooks => root --------------- /usr/bin/less - 1 Times. ============================================================================== knesenko => root ---------------- /bin/su - 1 Times. ============================================================================== mburns => root -------------- /usr/bin/yum - 1 Times. **Unmatched Entries** pam_unix(sudo:auth): conversation failed: 1 Time(s) pam_unix(sudo:auth): auth could not identify password for [jbrooks]: 1 Time(s) ---------------------- Sudo (secure-log) End ------------------------- --------------------- yum Begin ------------------------ Packages Installed: pax-3.4-10.1.el6.i686 ---------------------- yum End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 59G 57G 1.9G 97% / /dev/xvda => 97% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################