Logwatch for linode01.ovirt.org (Linux)

################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Sun Jan 17 03:22:25 2016 Date Range Processed: yesterday ( 2016-Jan-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 400 Bad Request /index.php?option=com_jce&task=plugin&plug ... 86d0dd595c8e20b: 4 Time(s) /pipermail/board/2012-January/000385.html& ... 86d0dd595c8e20b: 2 Time(s) /pipermail/infra/2015-January/008772.html& ... 86d0dd595c8e20b: 2 Time(s) 404 Not Found /: 1 Time(s) //index.php?option=com_jdownloads&Itemid=0&view=upload: 1 Time(s) //wp-admin/admin-ajax.php?action=revolutio ... ./wp-config.php: 2 Time(s) //wp-admin/admin-ajax.php?action=revslider ... ./wp-config.php: 2 Time(s) /__mailman/listinfo/engine-devel: 1 Time(s) /__mailman/listinfo/users: 1 Time(s) /admin.php: 13 Time(s) /admin/: 13 Time(s) /admin/board: 1 Time(s) /admin/login.php: 13 Time(s) /admin/upload.asp: 1 Time(s) /admin/upload.aspx: 1 Time(s) /administrator/ckfinder/ckfinder.html: 1 Time(s) /administrator/index.php: 13 Time(s) /administrator/upload.asp: 1 Time(s) /administrator/upload.aspx: 1 Time(s) /bitrix/admin/index.php?lang=en: 13 Time(s) /blog/: 1 Time(s) /blog/robots.txt: 1 Time(s) /blog/wp-admin/: 7 Time(s) /board: 2 Time(s) /category/news/feed: 1 Time(s) /category/news/feed/: 1 Time(s) /ckfinder/ckfinder.html: 1 Time(s) /comment/class: 1 Time(s) /default_Image.asp: 1 Time(s) /favicon.ico: 7275 Time(s) /favicon.png: 1 Time(s) /inc/ckfinder/ckfinder.html: 1 Time(s) /inc/upload.asp: 1 Time(s) /include/upload.asp: 1 Time(s) /index.php?option=com_easyblog&view=dashboard&layout=write: 1 Time(s) /index.php?option=com_jce&task=plugin&plug ... ion=1576&cid=20: 4 Time(s) /index.php?option=com_users&view=registration: 2 Time(s) /listinfo/board: 1 Time(s) /m/pipermail/users/2012-September/009441.html: 1 Time(s) /m/pipermail/users/2013-March/013462.html: 1 Time(s) /manage/upload.asp: 1 Time(s) /manager/ckfinder/ckfinder.html: 1 Time(s) /metri.php: 1 Time(s) /mobile/pipermail/users/2013-March/013462.html: 1 Time(s) /mobile/pipermail/users/2013-October/017497.html: 1 Time(s) /mobile/pipermail/users/2015-March/031627.html: 1 Time(s) /myluph.php?thumb: 1 Time(s) /old/wp-admin/: 8 Time(s) /photo/upload.aspx: 1 Time(s) /phpThumb.php?src=file.jpg&fltr[]=blur%7C9 ... phpThumbDebug=9: 2 Time(s) /phpThumb/metri.php: 1 Time(s) /phpThumb/myluph.php?thumb: 1 Time(s) /phpThumb/phpThumb.php?src=file.jpg&fltr[] ... phpThumbDebug=9: 2 Time(s) /phpThumb/recky.php: 1 Time(s) /pipermail/arch/2011-December/000130.html/trackback/: 1 Time(s) /pipermail/board/2012-January/000385.html& ... Q/tmp/metri.php: 2 Time(s) /pipermail/board/2012-January/000385.html& ... Q/tmp/recky.php: 1 Time(s) /pipermail/board/2012-January/000385.html& ... ion=1576&cid=20: 2 Time(s) /pipermail/board/2012-January/000385.html& ... mp/bogel.php?db: 1 Time(s) /pipermail/board/2012-January/index.php?op ... 86d0dd595c8e20b: 2 Time(s) /pipermail/board/2012-January/index.php?op ... ion=1576&cid=20: 2 Time(s) /pipermail/board/2012-January/tmp/bogel.php?db: 1 Time(s) /pipermail/board/2012-January/tmp/metri.php: 2 Time(s) /pipermail/board/2012-January/tmp/recky.php: 1 Time(s) /pipermail/engine-patches/2011-October/000002.html: 1 Time(s) /pipermail/engine-patches/2012-April/012037.html: 1 Time(s) /pipermail/engine-patches/2012-April/012247.html: 1 Time(s) /pipermail/engine-patches/2012-April/013352.html: 1 Time(s) /pipermail/engine-patches/2012-April/013420.html: 1 Time(s) /pipermail/engine-patches/2012-August/030299.html: 1 Time(s) /pipermail/engine-patches/2012-August/031687.html: 1 Time(s) /pipermail/engine-patches/2012-August/032502.html: 1 Time(s) /pipermail/engine-patches/2012-December/046678.html: 2 Time(s) /pipermail/engine-patches/2012-December/047553.html: 1 Time(s) /pipermail/engine-patches/2012-February/006346.html: 1 Time(s) /pipermail/engine-patches/2012-January/003872.html: 1 Time(s) /pipermail/engine-patches/2012-January/003888.html: 1 Time(s) /pipermail/engine-patches/2012-July/025874.html: 1 Time(s) /pipermail/engine-patches/2012-July/028135.html: 1 Time(s) /pipermail/engine-patches/2012-June/022217.html: 1 Time(s) /pipermail/engine-patches/2012-June/024004.html: 1 Time(s) /pipermail/engine-patches/2012-June/024039.html: 1 Time(s) /pipermail/engine-patches/2012-June/024550.html: 1 Time(s) /pipermail/engine-patches/2012-March/010059.html: 1 Time(s) /pipermail/engine-patches/2012-March/010229.html: 1 Time(s) /pipermail/engine-patches/2012-March/011194.html: 1 Time(s) /pipermail/engine-patches/2012-March/011532.html: 1 Time(s) /pipermail/engine-patches/2012-November/042239.html: 1 Time(s) /pipermail/engine-patches/2012-October/036982.html: 1 Time(s) /pipermail/engine-patches/2012-October/038044.html: 1 Time(s) /pipermail/engine-patches/2012-October/038950.html: 1 Time(s) /pipermail/engine-patches/2012-October/039437.html: 1 Time(s) /pipermail/engine-patches/2012-September/034145.html: 1 Time(s) /pipermail/engine-patches/2012-September/034917.html: 1 Time(s) /pipermail/engine-patches/2013-April/067059.html: 1 Time(s) /pipermail/engine-patches/2013-April/068686.html: 1 Time(s) /pipermail/engine-patches/2013-April/069164.html: 1 Time(s) /pipermail/engine-patches/2013-August/093429.html: 1 Time(s) /pipermail/engine-patches/2013-August/098254.html: 1 Time(s) /pipermail/engine-patches/2013-August/098389.html: 1 Time(s) /pipermail/engine-patches/2013-August/098622.html: 1 Time(s) /pipermail/engine-patches/2013-August/098811.html: 1 Time(s) /pipermail/engine-patches/2013-August/101934.html: 1 Time(s) /pipermail/engine-patches/2013-August/102042.html: 1 Time(s) /pipermail/engine-patches/2013-December/134764.html: 1 Time(s) /pipermail/engine-patches/2013-February/055360.html: 1 Time(s) /pipermail/engine-patches/2013-February/057187.html: 1 Time(s) /pipermail/engine-patches/2013-January/048185.html: 1 Time(s) /pipermail/engine-patches/2013-January/048703.html: 1 Time(s) /pipermail/engine-patches/2013-January/048833.html: 1 Time(s) /pipermail/engine-patches/2013-January/049531.html: 1 Time(s) /pipermail/engine-patches/2013-January/049614.html: 1 Time(s) /pipermail/engine-patches/2013-January/050267.html: 1 Time(s) /pipermail/engine-patches/2013-July/082215.html: 1 Time(s) /pipermail/engine-patches/2013-July/083188.html: 1 Time(s) /pipermail/engine-patches/2013-July/086286.html: 1 Time(s) /pipermail/engine-patches/2013-July/087848.html: 1 Time(s) /pipermail/engine-patches/2013-July/088243.html: 1 Time(s) /pipermail/engine-patches/2013-June/074734.html: 2 Time(s) /pipermail/engine-patches/2013-June/075203.html: 1 Time(s) /pipermail/engine-patches/2013-June/075407.html: 1 Time(s) /pipermail/engine-patches/2013-June/077171.html: 1 Time(s) /pipermail/engine-patches/2013-June/077363.html: 1 Time(s) /pipermail/engine-patches/2013-June/081012.html: 1 Time(s) /pipermail/engine-patches/2013-June/081480.html: 1 Time(s) /pipermail/engine-patches/2013-March/059046.html: 1 Time(s) /pipermail/engine-patches/2013-March/061087.html: 1 Time(s) /pipermail/engine-patches/2013-March/063834.html: 1 Time(s) /pipermail/engine-patches/2013-November/124751.html: 1 Time(s) /pipermail/engine-patches/2013-October/109249.html: 1 Time(s) /pipermail/engine-patches/2013-October/109948.html: 1 Time(s) /pipermail/engine-patches/2013-October/110752.html: 1 Time(s) /pipermail/engine-patches/2013-September/105029.html: 1 Time(s) /pipermail/engine-patches/2013-September/108266.html: 1 Time(s) /pipermail/engine-patches/2014-April/181335.html: 1 Time(s) /pipermail/engine-patches/2014-February/153152.html: 1 Time(s) /pipermail/engine-patches/2014-January/142183.html: 1 Time(s) /pipermail/engine-patches/2014-January/148274.html: 1 Time(s) /pipermail/infra/2012-November/001552.html/trackback/: 1 Time(s) /pipermail/infra/2012-November/tiki-register.php: 4 Time(s) /pipermail/infra/2013-December/004471.html/trackback/: 1 Time(s) /pipermail/infra/2013-December/tiki-register.php: 2 Time(s) /pipermail/infra/2013-February/wp-content/ ... com%2Fpagat.php: 2 Time(s) /pipermail/infra/2013-January/xmlrpc.php: 3 Time(s) /pipermail/infra/2013-July/003475.html/trackback/: 1 Time(s) /pipermail/infra/2013-July/tiki-register.php: 6 Time(s) /pipermail/infra/2013-March/xmlrpc.php: 2 Time(s) /pipermail/infra/2013-May/003091.html/trackback/: 1 Time(s) /pipermail/infra/2013-May/003154.html/: 1 Time(s) /pipermail/infra/2013-May/tiki-register.php: 2 Time(s) /pipermail/infra/2013-October/004224.html/trackback/: 1 Time(s) /pipermail/infra/2014-September/tiki-register.php: 1 Time(s) /pipermail/infra/2015-April//wp-admin/admi ... ./wp-config.php: 4 Time(s) /pipermail/infra/2015-April/009521.html&am ... ./wp-config.php: 6 Time(s) /pipermail/infra/2015-April/009521.html/trackback/: 1 Time(s) /pipermail/infra/2015-April/wp-admin/admin ... ./wp-config.php: 2 Time(s) /pipermail/infra/2015-April/wp-admin/admin-ajax.php: 4 Time(s) /pipermail/infra/2015-April/wp-content/plu ... lider/demit.php: 1 Time(s) /pipermail/infra/2015-April/wp-content/plu ... showbiz/ari.php: 1 Time(s) /pipermail/infra/2015-August/metri.php: 1 Time(s) /pipermail/infra/2015-August/myluph.php?thumb: 1 Time(s) /pipermail/infra/2015-August/phpThumb.php? ... phpThumbDebug=9: 2 Time(s) /pipermail/infra/2015-August/phpThumb/metri.php: 1 Time(s) /pipermail/infra/2015-August/phpThumb/myluph.php?thumb: 1 Time(s) /pipermail/infra/2015-August/phpThumb/phpT ... phpThumbDebug=9: 2 Time(s) /pipermail/infra/2015-August/phpThumb/recky.php: 1 Time(s) /pipermail/infra/2015-August/recky.php: 1 Time(s) /pipermail/infra/2015-February/tiki-register.php: 2 Time(s) /pipermail/infra/2015-February/xmlrpc.php: 1 Time(s) /pipermail/infra/2015-January/008772.html& ... Q/tmp/metri.php: 2 Time(s) /pipermail/infra/2015-January/008772.html& ... Q/tmp/recky.php: 1 Time(s) /pipermail/infra/2015-January/008772.html& ... ion=1576&cid=20: 2 Time(s) /pipermail/infra/2015-January/008772.html& ... mp/bogel.php?db: 1 Time(s) /pipermail/infra/2015-January/index.php?op ... 86d0dd595c8e20b: 2 Time(s) /pipermail/infra/2015-January/index.php?op ... ion=1576&cid=20: 2 Time(s) /pipermail/infra/2015-January/tmp/bogel.php?db: 1 Time(s) /pipermail/infra/2015-January/tmp/metri.php: 2 Time(s) /pipermail/infra/2015-January/tmp/recky.php: 1 Time(s) /pipermail/infra/2015-July//index.php?opti ... d=0&view=upload: 1 Time(s) /pipermail/infra/2015-July/010165.html& ... ./wp-config.php: 1 Time(s) /pipermail/infra/2015-July/wp-admin/admin- ... ./wp-config.php: 1 Time(s) /pipermail/node-devel/2012-February/000146.html/trackback/: 1 Time(s) /pipermail/node-patches/2011-November/000039.html/trackback/: 1 Time(s) /pipermail/node-patches/2012-June/001507.html/trackback/: 1 Time(s) /pipermail/users/2011-November/000092.html/trackback/: 1 Time(s) /pipermail/users/2012-April/001632.html/trackback/: 1 Time(s) /pipermail/users/2012-February/006642.html/trackback/: 1 Time(s) /pipermail/users/2012-June/008085.html/trackback/: 1 Time(s) /pipermail/users/2012-May/007545.html/trackback/: 1 Time(s) /pipermail/users/2012-November/010570.html/trackback/: 1 Time(s) /pipermail/users/2013-february/012269.html: 1 Time(s) /pipermail/users/2014-november/029596.html: 1 Time(s) /pipermail/users/2014-september/027225.html: 1 Time(s) /project/resources/workshop-invitation/: 2 Time(s) /recky.php: 1 Time(s) /repos/ci-tools/EL/6/repodata/repomd.xml: 48 Time(s) /robots.txt: 374 Time(s) /system/ckfinder/ckfinder.html: 1 Time(s) /test/wp-admin/: 6 Time(s) /tmp/bogel.php?db: 2 Time(s) /tmp/metri.php: 4 Time(s) /tmp/recky.php: 2 Time(s) /upfile/upload.aspx: 1 Time(s) /upload.asp: 1 Time(s) /upload.aspx: 1 Time(s) /upload/upload.aspx: 1 Time(s) /user/: 13 Time(s) /web/upload.aspx: 1 Time(s) /wordpress/: 1 Time(s) /wordpress/wp-admin/: 8 Time(s) /wp-admin/: 8 Time(s) /wp-admin/admin-ajax.php: 5 Time(s) /wp-admin/admin-ajax.php?action=revslider_ ... ./wp-config.php: 3 Time(s) /wp-content/plugins/revslider/temp/update_ ... lider/demit.php: 1 Time(s) /wp-content/plugins/showbiz/temp/update_ex ... showbiz/ari.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... com%2Fpagat.php: 2 Time(s) /wp-content/uploads/style.php: 1 Time(s) /wp-login.php: 15 Time(s) /wp-signup.php: 2 Time(s) /wp/: 1 Time(s) /wp/wp-admin/: 8 Time(s) /xmlrpc.php: 17 Time(s) /xmlrpc.php?rsd: 1 Time(s) 408 Request Timeout /mailman/subscribe/automation: 1 Time(s) /mailman/subscribe/engine-devel: 1 Time(s) /mailman/subscribe/engine-patches: 1 Time(s) 416 Request Range Not Satisfiable /pipermail/users/2015-November/035918.html: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 355 *Warning: Pre-queue content-filter connection overload 20 Miscellaneous warnings 3.766M Bytes accepted 3,948,415 47.175M Bytes delivered 49,466,727 ======== ================================================ 601 Accepted 97.88% 13 Rejected 2.12% -------- ------------------------------------------------ 614 Total 100.00% ======== ================================================ 1 Reject relay denied 7.69% 3 Reject HELO/EHLO 23.08% 9 Reject unknown user 69.23% -------- ------------------------------------------------ 13 Total Rejects 100.00% ======== ================================================ 401 4xx Reject recipient address 99.01% 4 4xx Reject sender address 0.99% -------- ------------------------------------------------ 405 Total 4xx Rejects 100.00% ======== ================================================ 917 Connections made 39 Connections lost 916 Disconnections 586 Removed from queue 318 Delivered 4765 Sent via SMTP 4 Forwarded 128 Deferred 557 Deferrals 199 Bounce (remote) 1 Expired and returned to sender 188 DSNs undeliverable 305 Connection failure (outbound) 1 Timeout (inbound) 1 SMTP commands dialog error 220 Hostname verification errors 5 Hostname validation error 36 Enabled PIX workaround **Unmatched Entries** 1 Jan 16 02:50:45 linode01 postfix/smtp[4408]: BC670C76C: Cannot start TLS: handshake failure 1 Jan 16 00:07:27 linode01 postfix/smtp[711]: 1821AC757: Cannot start TLS: handshake failure 1 Jan 16 04:19:03 linode01 postfix/smtp[7189]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 04:13:57 linode01 postfix/smtp[7074]: E20FDC775: Cannot start TLS: handshake failure 1 Jan 16 04:19:03 linode01 postfix/smtp[7189]: 14845C78F: Cannot start TLS: handshake failure 1 Jan 16 02:00:16 linode01 postfix/smtp[3216]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 00:07:27 linode01 postfix/smtp[711]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 02:56:36 linode01 postfix/smtp[4537]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 04:13:57 linode01 postfix/smtp[7074]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 02:50:45 linode01 postfix/smtp[4408]: SSL_connect error to mail.albasoft.com[80.36.199.64]:25: -1 1 Jan 16 02:56:36 linode01 postfix/smtp[4537]: 57C4DC78F: Cannot start TLS: handshake failure 1 Jan 16 02:00:16 linode01 postfix/smtp[3216]: 8B9A8C785: Cannot start TLS: handshake failure ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Received disconnect: 11: : 3 Time(s) 11: Bye Bye : 481 Time(s) 3: com.jcraft.jsch.JSchException: Auth fail : 2 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for hostby.guardomicro.com [85.93.0.77] failed - POSSIBLE BREAK-IN ATTEMPT! : 8 time(s) reverse mapping checking getaddrinfo for sdnbotnetbitch [141.138.154.126] failed - POSSIBLE BREAK-IN ATTEMPT! : 7 time(s) reverse mapping checking getaddrinfo for 197.254.27.214.acesskenya.net [197.254.27.214] failed - POSSIBLE BREAK-IN ATTEMPT! : 6 time(s) Address 84.17.2.152 maps to compumir.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 97G 71G 26G 74% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################
participants (1)
-
logwatch@lists.ovirt.org