################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Sun Nov 15 03:41:15 2015 Date Range Processed: yesterday ( 2015-Nov-14 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ A total of 4 sites probed the server 188.165.243.126 213.241.55.180 220.227.161.85 66.7.204.148 Requests with error response codes 400 Bad Request //gajdn85085.txt: 1 Time(s) 404 Not Found /: 577 Time(s) //wp-admin/admin-ajax.php: 2 Time(s) //wp-admin/admin-ajax.php?action=revslider ... ./wp-config.php: 3 Time(s) //xmlrpc.php: 2 Time(s) /Quick_Start_Guide: 1 Time(s) /admin.php: 7 Time(s) /admin/: 6 Time(s) /admin/board: 3 Time(s) /admin/login.php: 6 Time(s) /administrator/index.php: 7 Time(s) /bitrix/admin/index.php?lang=en: 6 Time(s) /blog/: 1 Time(s) /blog/robots.txt: 1 Time(s) /blog/wp-admin/: 10 Time(s) /board: 6 Time(s) /category/news/feed: 1 Time(s) /category/news/feed/: 1 Time(s) /favicon.ico: 304 Time(s) /listinfo/board: 3 Time(s) /old/wp-admin/: 10 Time(s) /pipermail/2011-September/author.html: 1 Time(s) /pipermail/2012-February/author.html: 1 Time(s) /pipermail/2012-September/thread.html: 1 Time(s) /pipermail/2013-February/subject.html: 1 Time(s) /pipermail/2013-January/thread.html: 1 Time(s) /pipermail/2013-July/thread.html: 1 Time(s) /pipermail/2013-June/date.html: 1 Time(s) /pipermail/2013-October/thread.html: 1 Time(s) /pipermail/2013-September/thread.html: 1 Time(s) /pipermail/2014-August/date.html: 1 Time(s) /pipermail/2014-July/date.html: 1 Time(s) /pipermail/2014-May/date.html: 1 Time(s) /pipermail/2014-November/author.html: 1 Time(s) /pipermail/2014-October/thread.html: 1 Time(s) /pipermail/2015-April/thread.html: 1 Time(s) /pipermail/2015-August/date.html: 1 Time(s) /pipermail/2015-July/subject.html: 1 Time(s) /pipermail/engine-patches/2012-September/033508.html: 1 Time(s) /pipermail/engine-patches/2012-September/036055.html: 1 Time(s) /pipermail/engine-patches/2013-August/102927.html: 1 Time(s) /pipermail/engine-patches/2013-February/054911.html: 1 Time(s) /pipermail/engine-patches/2013-October/112980.html: 1 Time(s) /pipermail/infra/2012-February/000224.html/trackback/: 1 Time(s) /pipermail/infra/2012-March/000226.html/trackback/: 1 Time(s) /pipermail/infra/2012-October//wp-admin/ad ... ./wp-config.php: 2 Time(s) /pipermail/infra/2013-December/tiki-register.php: 1 Time(s) /pipermail/infra/2013-February//wp-admin/a ... ./wp-config.php: 1 Time(s) /pipermail/infra/2013-January/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-July/tiki-register.php: 1 Time(s) /pipermail/infra/2013-June/tiki-register.php: 3 Time(s) /pipermail/infra/2013-June/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-March//wp-admin/admin-ajax.php: 1 Time(s) /pipermail/infra/2013-March/002309.html/trackback/: 1 Time(s) /pipermail/infra/2013-March/002508.html&am ... /admin-ajax.php: 1 Time(s) /pipermail/infra/2013-March/tiki-register.php: 2 Time(s) /pipermail/infra/2013-May/003136.html/trackback/: 1 Time(s) /pipermail/infra/2013-May/tiki-register.php: 5 Time(s) /pipermail/infra/2013-November/004282.html/trackback/: 1 Time(s) /pipermail/infra/2015-April/wp-admin/admin ... ./wp-config.php: 2 Time(s) /pipermail/infra/2015-April/wp-admin/admin-ajax.php: 4 Time(s) /pipermail/infra/2015-July/wp-admin/admin- ... ./wp-config.php: 2 Time(s) /pipermail/infra/2015-July/wp-admin/admin-ajax.php: 2 Time(s) /pipermail/infra/2015-June//xmlrpc.php: 2 Time(s) /pipermail/infra/2015-June/010089.html& ... R0g//xmlrpc.php: 3 Time(s) /pipermail/infra/2015-March/wp-admin/admin ... ./wp-config.php: 2 Time(s) /pipermail/kimchi-devel/2014-April/004498.html/trackback/: 1 Time(s) /pipermail/users/2013-april/013638.html: 1 Time(s) /pipermail/users/2013-august/015578.html: 1 Time(s) /pipermail/users/2013-july/015099.html: 1 Time(s) /pipermail/users/2013-june/014937.html: 1 Time(s) /pipermail/users/2013-october/017001.html: 1 Time(s) /repos/ci-tools/EL/6/repodata/repomd.xml: 48 Time(s) /robots.txt: 177 Time(s) /setup.php: 1 Time(s) /test/wp-admin/: 7 Time(s) /user: 1 Time(s) /user/: 6 Time(s) /wordpress/: 1 Time(s) /wordpress/wp-admin/: 10 Time(s) /wp-admin/: 10 Time(s) /wp-admin/admin-ajax.php: 6 Time(s) /wp-admin/admin-ajax.php?action=revslider_ ... ./wp-config.php: 16 Time(s) /wp-content/plugins/wysija-newsletters/readme.txt: 2 Time(s) /wp-content/uploads/back.php: 1 Time(s) /wp-login.php: 7 Time(s) /wp/: 1 Time(s) /wp/wp-admin/: 7 Time(s) /xmlrpc.php: 1 Time(s) /xmlrpc.php?rsd: 1 Time(s) /yishuihan/china-ysh.asp:: 1 Time(s) http://lists.ovirt.org/pipermail/infra/201 ... ki-register.php: 1 Time(s) 501 Not Implemented null: 865 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 185 *Warning: Pre-queue content-filter connection overload 17 Miscellaneous warnings 7.221M Bytes accepted 7,571,383 48.024M Bytes delivered 50,356,769 ======== ================================================ 617 Accepted 93.77% 41 Rejected 6.23% -------- ------------------------------------------------ 658 Total 100.00% ======== ================================================ 8 Reject HELO/EHLO 19.51% 33 Reject unknown user 80.49% -------- ------------------------------------------------ 41 Total Rejects 100.00% ======== ================================================ 427 4xx Reject recipient address 94.89% 23 4xx Reject sender address 5.11% -------- ------------------------------------------------ 450 Total 4xx Rejects 100.00% ======== ================================================ 747 Connections made 77 Connections lost 747 Disconnections 273 Removed from queue 179 Delivered 6038 Sent via SMTP 4 Forwarded 347 Deferred 13920 Deferrals 18 Bounce (remote) 2 Expired and returned to sender 20 DSNs undeliverable 97 Connection failure (outbound) 3 Timeout (inbound) 12 Numeric hostname 151 Hostname verification errors 5 Hostname validation error 39 Enabled PIX workaround **Unmatched Entries** 1 Nov 14 14:29:19 linode01 postfix/smtp[19782]: 62D4DC8F4: Cannot start TLS: handshake failure 1 Nov 14 13:23:16 linode01 postfix/smtp[18018]: 52E08C8F2: Cannot start TLS: handshake failure 1 Nov 14 08:00:56 linode01 postfix/smtp[10759]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 14:38:39 linode01 postfix/smtp[20009]: E8728C8F5: Cannot start TLS: handshake failure 1 Nov 14 06:15:24 linode01 postfix/smtp[7889]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 02:42:54 linode01 postfix/smtp[2461]: BCEAFC8E2: Cannot start TLS: handshake failure 1 Nov 14 02:42:54 linode01 postfix/smtp[2461]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 17:01:12 linode01 postfix/smtp[23184]: 3410CC8E4: Cannot start TLS: handshake failure 1 Nov 14 17:01:12 linode01 postfix/smtp[23184]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 14:38:39 linode01 postfix/smtp[20009]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 14:29:19 linode01 postfix/smtp[19782]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 05:26:20 linode01 postfix/smtp[6863]: 78622C8E7: Cannot start TLS: handshake failure 1 Nov 14 13:23:16 linode01 postfix/smtp[18018]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Nov 14 06:15:24 linode01 postfix/smtp[7889]: A6EC1C8E8: Cannot start TLS: handshake failure 1 Nov 14 08:00:56 linode01 postfix/smtp[10759]: 9B10CC8E9: Cannot start TLS: handshake failure 1 Nov 14 05:26:20 linode01 postfix/smtp[6863]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Received disconnect: 11: : 32 Time(s) 11: Bye Bye : 958 Time(s) 3: com.jcraft.jsch.JSchException: Auth fail : 33 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for 12.145.195.113.adsl-pool.jx.chinaunicom.com [113.195.145.12] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) Address 162.213.230.98 maps to 162-213-230-98.socswireless.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== nrpe => root ------------ /sbin/service - 288 Times. ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 97G 70G 27G 73% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################