################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Mon Aug 17 03:15:53 2015 Date Range Processed: yesterday ( 2015-Aug-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 400 Bad Request /: 1 Time(s) 404 Not Found /: 576 Time(s) /**mailman/listinfo/engine-devel%3Chttp:// ... fo/engine-devel: 1 Time(s) /**mailman/listinfo/users%3Chttp://lists.o ... /listinfo/users: 1 Time(s) /Edit/js/aux.asp:: 1 Time(s) /Images/hou.asp:: 1 Time(s) /Templates/f1kj/html/error.asp;.html:: 1 Time(s) /___: 2 Time(s) /_h5ai/client/icons/96/folder-parent.png: 1 Time(s) /_h5ai/client/images/app-16x16.ico: 17 Time(s) /admin.php: 3 Time(s) /admin/: 3 Time(s) /admin/_system/AspCms_SiteSetting.asp?action=saves: 1 Time(s) /admin/login.php: 3 Time(s) /administrator/index.php: 3 Time(s) /authentication/login/:: 1 Time(s) /bitrix/admin/index.php?lang=en: 3 Time(s) /blog/wp-admin/: 11 Time(s) /category/news/feed: 1 Time(s) /category/news/feed/: 2 Time(s) /comad/coon.asp:: 1 Time(s) /config/AspCms_Config.asp: 2 Time(s) /dxyylc/md5.php:: 1 Time(s) /favicon.ico: 256 Time(s) /imgnewsup/image/cache.asp:: 1 Time(s) /incdata/admin_inc.php:: 2 Time(s) /index.php?dll=register:: 1 Time(s) /index.php?gf_page=upload: 3 Time(s) /index.php?option=com_adsmanager&task=upload&tmpl=component: 3 Time(s) /install123/: 1 Time(s) /install2/: 1 Time(s) /installqwe/: 1 Time(s) /juhua/juhua.asp:: 1 Time(s) /mailman/xxx: 1 Time(s) /meetings/ovirt/2013/3.3: 1 Time(s) /metri.php: 1 Time(s) /myluph.php?thumb: 1 Time(s) /newssaw/confings.asp:: 1 Time(s) /old/wp-admin/: 11 Time(s) /phpThumb.php?src=file.jpg&fltr[]=blur%7C9 ... phpThumbDebug=9: 2 Time(s) /phpThumb/metri.php: 1 Time(s) /phpThumb/myluph.php?thumb: 1 Time(s) /phpThumb/phpThumb.php?src=file.jpg&fltr[] ... phpThumbDebug=9: 2 Time(s) /phpThumb/recky.php: 1 Time(s) /pipermail/devel/2012-january/000483.html: 1 Time(s) /pipermail/engine-commits/2012-October/002 ... html/trackback/: 1 Time(s) /pipermail/engine-patches/2012-May/017127.html: 1 Time(s) /pipermail/engine-patches/2013-June/079724.html: 1 Time(s) /pipermail/engine-patches/2013-November/subject.html: 4 Time(s) /pipermail/engine-patches/2014-March/subject.html: 5 Time(s) /pipermail/infra/2012-December/tiki-register.php: 2 Time(s) /pipermail/infra/2013-December/wp-content/ ... i.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-December/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-February/wp-content/ ... i.com%2Fbad.php: 2 Time(s) /pipermail/infra/2013-February/xmlrpc.php: 3 Time(s) /pipermail/infra/2013-January/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-June/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-March/tiki-register.php: 8 Time(s) /pipermail/infra/2013-March/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-May/tiki-register.php: 2 Time(s) /pipermail/infra/2013-September/tiki-register.php: 1 Time(s) /pipermail/infra/2014-December/metri.php: 1 Time(s) /pipermail/infra/2014-December/myluph.php?thumb: 1 Time(s) /pipermail/infra/2014-December/phpThumb.ph ... phpThumbDebug=9: 2 Time(s) /pipermail/infra/2014-December/phpThumb/metri.php: 1 Time(s) /pipermail/infra/2014-December/phpThumb/myluph.php?thumb: 1 Time(s) /pipermail/infra/2014-December/phpThumb/ph ... phpThumbDebug=9: 2 Time(s) /pipermail/infra/2014-December/phpThumb/recky.php: 1 Time(s) /pipermail/infra/2014-December/recky.php: 1 Time(s) /pipermail/infra/2014-December/xmlrpc.php: 5 Time(s) /pipermail/infra/2015-January/xmlrpc.php: 2 Time(s) /pipermail/infra/2015-March/wp-admin/admin ... ./wp-config.php: 2 Time(s) /pipermail/node-devel/2012-July/000284.html/trackback/: 1 Time(s) /pipermail/node-patches/2012-August/002219.html/trackback/: 1 Time(s) /pipermail/users/2013-September/016256.html.: 1 Time(s) /pipermail/users/2014-August/026535.html/trackback/: 1 Time(s) /pipermail/users/2014-november/029490.html: 1 Time(s) /plus/av.php:: 1 Time(s) /plus/e7xue.php:: 1 Time(s) /plus/long.php:: 1 Time(s) /pub/ovirt-/rpm/el6/repodata/repomd.xml: 2 Time(s) /pub/ovirt-3.5-pre/iso/ovirt-guest-tools/o ... tools-3.5_5.exe: 2 Time(s) /pub/ovirt-3.5-pre/rpm/el7/.treeinfo: 2 Time(s) /pub/ovirt-3.5-pre/rpm/el7/treeinfo: 2 Time(s) /pub/ovirt-3.5-pre/rpm/fc6/repodata/repomd.xml: 2 Time(s) /pub/ovirt-3.5-snapshot/rpm/el6.6/repodata ... 7b-other.xml.gz: 1 Time(s) /pub/ovirt-3.5-snapshot/rpm/el6Server/repo ... -primary.xml.gz: 1 Time(s) /pub/ovirt-3.5-snapshot/rpm/el7/repodata/6 ... ther.sqlite.bz2: 4 Time(s) /pub/ovirt-3.5-snapshot/rpm/el7Server/repo ... -primary.xml.gz: 1 Time(s) /pub/ovirt-3.5-snapshot/rpm/el7Server/repo ... 65-other.xml.gz: 1 Time(s) /pub/ovirt-3.5-snapshot/rpm/el7Server/repo ... ilelists.xml.gz: 1 Time(s) /pub/ovirt-3.5-snapshot/src/ovirt-engine-a ... 0150704.tar.gz/: 1 Time(s) /pub/ovirt-3.5/rpm/el6/.treeinfo: 5 Time(s) /pub/ovirt-3.5/rpm/el6/treeinfo: 5 Time(s) /pub/ovirt-3.5/rpm/el6Server/.treeinfo: 2 Time(s) /pub/ovirt-3.5/rpm/el6Server/treeinfo: 2 Time(s) /pub/ovirt-3.5/rpm/el7/.treeinfo: 4 Time(s) /pub/ovirt-3.5/rpm/el7/treeinfo: 4 Time(s) /pub/ovirt-3.5/rpm/el7Server/.treeinfo: 2 Time(s) /pub/ovirt-3.5/rpm/el7Server/treeinfo: 2 Time(s) /pub/ovirt-3.6: 3 Time(s) /pub/ovirt-3.6-pre/debian/source/Release: 2 Time(s) /pub/ovirt-3.6-pre/rpm/el7/.treeinfo: 2 Time(s) /pub/ovirt-3.6-pre/rpm/el7/treeinfo: 2 Time(s) /pub/ovirt-3.6-pre/rpm/fc20/repodata/repomd.xml: 6 Time(s) /pub/ovirt-3.6/rpm/el6/repodata/repomd.xml: 3 Time(s) /pub/ovirt-master-snapshot-static/iso/ovir ... -el7-master.iso: 1 Time(s) /pub/ovirt-master-snapshot-static/rmp/fc22 ... data/repomd.xml: 2 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc19 ... data/repomd.xml: 1 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc20 ... data/repomd.xml: 82 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc20 ... mary.sqlite.bz2: 6 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc20/noarch/: 1 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc7/ ... data/repomd.xml: 7 Time(s) /pub/ovirt-master-snapshot-static/rpm/fc@2 ... data/repomd.xml: 5 Time(s) /pub/ovirt-master-snapshot/rpm/el6.6/repod ... -primary.xml.gz: 1 Time(s) /pub/ovirt-master-snapshot/rpm/el6.6/repod ... f1-other.xml.gz: 1 Time(s) /pub/ovirt-master-snapshot/rpm/el7/noarch/ ... ntos.noarch.rpm: 2 Time(s) /pub/ovirt-master-snapshot/rpm/fc19/noarch/: 1 Time(s) /pub/ovirt-master-snapshot/rpm/fc19/repodata/repomd.xml: 24 Time(s) /pub/ovirt-master-snapshot/rpm/fc22/repoda ... -primary.xml.gz: 1 Time(s) /pub/ovirt-master-snapshot/rpm/fc22/repoda ... ac-other.xml.gz: 1 Time(s) /pub/ovirt-master-snapshot/rpm/fc22/repoda ... ilelists.xml.gz: 1 Time(s) /pub/ovirt-master-snapshot/rpm/fc7/repodata/repomd.xml: 7 Time(s) /pub/ovirt-master-snapshot/src/@PACKAGE_NA ... VERSION@.tar.gz: 1 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=D;O=A: 6 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=D;O=D: 4 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=M;O=A: 5 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=M;O=D: 5 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=N;O=A: 6 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=N;O=D: 5 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=S;O=A: 6 Time(s) /pub/ovirt-master-snapshot/src/ovirt-engin ... tar.gz/?C=S;O=D: 3 Time(s) /pub/ovirt-snapshot-static/rpm/el6/repodata/repomd.xml: 2 Time(s) /pub/ovirt-snapshot/rpm/el6/noarch/otopi-1 ... .el6.noarch.rpm: 1 Time(s) /pub/ovirt-snapshot/rpm/el6/noarch/otopi-j ... .el6.noarch.rpm: 1 Time(s) /pub/ovirt-snapshot/rpm/el6/noarch/ovirt-e ... .el6.noarch.rpm: 14 Time(s) /pub/ovirt-snapshot/rpm/el6/noarch/ovirt-h ... .el6.noarch.rpm: 2 Time(s) /pub/ovirt-snapshot/rpm/el6/repodata/repomd.xml: 2 Time(s) /pub/yum-repo/ovirt-releaseXY.rpm: 1 Time(s) /recky.php: 1 Time(s) /repos/clean_pub/ovirt-master-snapshot/src ... 0140707.tar.gz/: 2 Time(s) /repos/ovirt-3.5-bak-2015-06-15/src/: 1 Time(s) /repos/ovirt-3.5-bak-2015-06-15/src/ovirt-image-uploader/: 1 Time(s) /repos/ovirt-3.6-pre-bak-2015-06-09/iso/: 2 Time(s) /repos/staging/: 1 Time(s) /robots.txt: 107 Time(s) /robots.txt:: 1 Time(s) /test/wp-admin/: 11 Time(s) /user/: 3 Time(s) /windows.asp;.jpg:: 1 Time(s) /wordpress/wp-admin/: 11 Time(s) /wp-admin/: 10 Time(s) /wp-admin/admin-ajax.php?action=revslider_ ... ./wp-config.php: 2 Time(s) /wp-admin/admin-ajax.php?action=revslider_ajax_action: 3 Time(s) /wp-content/_input_3_.txt: 3 Time(s) /wp-content/plugins/wysija-newsletters/readme.txt: 2 Time(s) /wp-content/themes/Nyke/timthumb.php?websh ... i.com%2Fbad.php: 1 Time(s) /wp-content/themes/suffusion/timthumb.php? ... i.com%2Fbad.php: 2 Time(s) /wp-login.php: 4 Time(s) /wp-login.php?action=register:: 1 Time(s) /wp/wp-admin/: 11 Time(s) /xmlrpc.php: 25 Time(s) /xsoxs/juhua.asp:: 1 Time(s) /yishuihan/china-ysh.asp:: 1 Time(s) /ymine76978.asp;.jpg:: 1 Time(s) 405 Method Not Allowed /webscan38502863.txt: 2 Time(s) 416 Request Range Not Satisfiable /pub/ovirt-3.5/rpm/el7/: 1 Time(s) /pub/ovirt-master-snapshot/rpm/el7/noarch/ ... .el7.noarch.rpm: 6 Time(s) /pub/ovirt-master-snapshot/rpm/el7/noarch/ ... ntos.noarch.rpm: 36 Time(s) /pub/ovirt-master-snapshot/rpm/el7/x86_64/ ... .el7.x86_64.rpm: 6 Time(s) 500 Internal Server Error /pub/ovirt-3.5-pre/iso/ovirt-live/el6-3.5.4_rc1/: 1 Time(s) /pub/ovirt-3.5/exe/: 3 Time(s) /pub/ovirt-3.5/iso/: 178 Time(s) /pub/ovirt-3.5/rpm/el6.6/: 2 Time(s) /pub/ovirt-3.5/rpm/el6.6/x86_64/: 2 Time(s) /pub/ovirt-3.5/src/: 4 Time(s) /pub/ovirt-3.6-pre/iso/ovirt-live/el7-beta2/: 4 Time(s) 503 Service Unavailable /pub/ovirt-3.5-pre/iso/ovirt-guest-tools/o ... tools-3.5_5.exe: 1 Time(s) /pub/ovirt-3.5/: 2 Time(s) /pub/ovirt-3.5/exe/: 2 Time(s) /pub/ovirt-3.5/exe/ovirt-guest-tools/ovirt ... tools-3.5_5.exe: 13 Time(s) /pub/ovirt-3.5/iso/: 3 Time(s) /pub/ovirt-3.5/src/ovirt-engine-jboss-as/j ... 7.1.1.Final.zip: 248 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 612 *Warning: Pre-queue content-filter connection overload 11 Miscellaneous warnings 4.363M Bytes accepted 4,574,916 40.195M Bytes delivered 42,147,268 ======== ================================================ 546 Accepted 84.65% 99 Rejected 15.35% -------- ------------------------------------------------ 645 Total 100.00% ======== ================================================ 30 Reject relay denied 30.30% 15 Reject HELO/EHLO 15.15% 54 Reject unknown user 54.55% -------- ------------------------------------------------ 99 Total Rejects 100.00% ======== ================================================ 1180 4xx Reject recipient address 91.76% 106 4xx Reject sender address 8.24% -------- ------------------------------------------------ 1286 Total 4xx Rejects 100.00% ======== ================================================ 1922 Connections made 203 Connections lost 1922 Disconnections 512 Removed from queue 393 Delivered 7768 Sent via SMTP 4 Forwarded 53 Deferred 750 Deferrals 64 Bounce (remote) 12 Expired and returned to sender 17 DSNs undeliverable 184 Connection failure (outbound) 5 Timeout (inbound) 1 Illegal address syntax in SMTP command 516 Hostname verification errors 37 Enabled PIX workaround **Unmatched Entries** 1 Aug 16 14:31:23 linode01 postfix/smtp[13287]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 08:36:17 linode01 postfix/smtp[26043]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 20:46:22 linode01 postfix/smtp[8187]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 08:25:38 linode01 postfix/smtp[25289]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 08:36:17 linode01 postfix/smtp[26043]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 13:16:16 linode01 postfix/smtp[9501]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 09:36:17 linode01 postfix/smtp[29514]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 12:05:24 linode01 postfix/smtp[5253]: SSL_connect error to 126mx02.mxmail.netease.com[220.181.15.195]:25: -1 1 Aug 16 18:16:25 linode01 postfix/smtp[25527]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 19:31:15 linode01 postfix/smtp[29175]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 18:16:25 linode01 postfix/smtp[25527]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 14:31:23 linode01 postfix/smtp[13287]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 12:01:22 linode01 postfix/smtp[5032]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 22:01:18 linode01 postfix/smtp[12999]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 08:25:38 linode01 postfix/smtp[25289]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 19:31:15 linode01 postfix/smtp[29175]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 12:01:22 linode01 postfix/smtp[5032]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 12:05:24 linode01 postfix/smtp[5253]: 8A3F0C30D: Cannot start TLS: handshake failure 1 Aug 16 20:46:22 linode01 postfix/smtp[8187]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 13:16:16 linode01 postfix/smtp[9501]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 09:36:17 linode01 postfix/smtp[29514]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 23:16:42 linode01 postfix/smtp[17217]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 1 Aug 16 23:16:42 linode01 postfix/smtp[17217]: 176A1C213: Cannot start TLS: handshake failure 1 Aug 16 22:01:18 linode01 postfix/smtp[12999]: SSL_connect error to mx3.mail.139.com[221.176.9.178]:25: -1 ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: jenkins: 89.31.150.215 (alterway01.ovirt.org): 3 times mirror: 192.87.102.41: 13 times 193.84.206.135 (mirror.slu.cz): 6 times 129.21.171.98 (kirby.main.ad.rit.edu): 4 times 128.61.111.12 (zaphod.gtlib.gatech.edu): 1 time 130.89.149.129 (vlaai.snt.utwente.nl): 1 time 152.3.102.53 (archive.linux.duke.edu): 1 time 152.19.134.30 (jobbot1.ibiblio.org): 1 time rsync: 209.132.186.36 (nat-pool-tlv-t.redhat.com): 1 time Received disconnect: 11: : 52 Time(s) 11: Bye Bye : 310 Time(s) 11: disconnected by user : 27 Time(s) 3: com.jcraft.jsch.JSchException: Auth fail : 23 Time(s) SFTP subsystem requests: 3 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for 50-57-99-176.static.cloud-ips.com [50.57.99.176] failed - POSSIBLE BREAK-IN ATTEMPT! : 8 time(s) Address 66.162.88.202 maps to mail.plunkett-gibson.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 217.30.65.218.broad.xy.jx.dynamic.163data.com.cn [218.65.30.217] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 23.30.65.218.broad.xy.jx.dynamic.163data.com.cn [218.65.30.23] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 203-69-143-70.hinet-ip.hinet.net [203.69.143.70] failed - POSSIBLE BREAK-IN ATTEMPT! : 16 time(s) reverse mapping checking getaddrinfo for 38.30.65.218.broad.xy.jx.dynamic.163data.com.cn [218.65.30.38] failed - POSSIBLE BREAK-IN ATTEMPT! : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== nrpe => root ------------ /sbin/service - 288 Times. ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 97G 82G 15G 86% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################