
################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Wed Jan 15 03:32:59 2014 Date Range Processed: yesterday ( 2014-Jan-14 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ A total of 1 sites probed the server 213.192.60.19 Requests with error response codes 400 Bad Request /mailman/listinfo/users/../../listinfo/../ ... /listinfo/arch/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... engine-commits/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... engine-patches/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... listinfo/board/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... listinfo/infra/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... nfo/automation/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../ ... tinfo/announce/: 1 Time(s) /mailman/listinfo/users/../../listinfo/../../../../../admin/: 1 Time(s) 403 Forbidden /wordpress/wp-admin/: 1 Time(s) 404 Not Found /**mailman/listinfo/users<http://lists. ... listinfo/users/: 1 Time(s) //images/stories/explore.gif: 1 Time(s) //wp-content/themes/nova/timthumb.php?src= ... t.com%2Fbad.php: 1 Time(s) /__**mailman/listinfo/users%3Chttp://lists ... /listinfo/users: 1 Time(s) /__mailman/listinfo/users: 4 Time(s) /admin.php: 5 Time(s) /admin/: 4 Time(s) /admin/board: 5 Time(s) /admin/login.php: 4 Time(s) /administrator/index.php: 6 Time(s) /bitrix/admin/index.php?lang=en: 4 Time(s) /blog/wp-admin/: 1 Time(s) /board: 10 Time(s) /category/news/feed: 1 Time(s) /category/news/feed/: 25 Time(s) /favicon.gif: 1 Time(s) /favicon.ico: 708 Time(s) /favicon.png: 1 Time(s) /images/stories/config.inc.php?rf: 2 Time(s) /images/stories/food.php?rf: 1 Time(s) /index.php?action=register: 2 Time(s) /index.php?option=com_jce&task=plugin&plug ... 86d0dd595c8e20b: 8 Time(s) /index.php?option=com_jce&task=plugin&plug ... ion=1576&cid=20: 6 Time(s) /listinfo/board: 5 Time(s) /n: 1 Time(s) /nightly/: 1 Time(s) /nightly/rpm: 1 Time(s) /nightly/rpm/EL/6/: 1 Time(s) /nightly/rpm/EL/6/repodata/repomd.xml: 2 Time(s) /ovirt-release.rpm: 1 Time(s) /pipermail: 1 Time(s) /pipermail//wp-login.php?action=register: 1 Time(s) /pipermail/engine-devel/2012-january/000483.html: 1 Time(s) /pipermail/index.php?act=Reg&CODE=00: 1 Time(s) /pipermail/index.php?app=core&module=global§ion=register: 1 Time(s) /pipermail/infra-private/2013-May/000003.html: 1 Time(s) /pipermail/infra/2012-December/tiki-register.php: 1 Time(s) /pipermail/infra/2012-November/tiki-register.php: 3 Time(s) /pipermail/infra/2013-May//wp-content/them ... t.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-May/002991.html& ... t.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-May/tiki-register.php: 1 Time(s) /pipermail/node-devel/2011-december/000055.html: 1 Time(s) /pipermail/node-devel/2011-november/000046.html: 2 Time(s) /pipermail/node-devel/2012-april/000216.html: 1 Time(s) /pipermail/node-devel/2012-january/000091.html: 1 Time(s) /pipermail/node-devel/2012-march/000174.html: 1 Time(s) /pipermail/node-devel/2012-may/000245.html: 1 Time(s) /pipermail/node-devel/2013-june/000462.html: 1 Time(s) /pipermail/node-patches/2012-april/000876.html: 1 Time(s) /pipermail/node-patches/2013-march/004724.html: 1 Time(s) /pipermail/node-patches/2013-may/005564.html: 1 Time(s) /pipermail/node-patches/2013-may/005901.html: 1 Time(s) /pipermail/project-planning/2011-September ... 86d0dd595c8e20b: 6 Time(s) /pipermail/project-planning/2011-September ... ies/food.php?rf: 1 Time(s) /pipermail/project-planning/2011-September ... ion=1576&cid=20: 6 Time(s) /pipermail/project-planning/2011-September ... nfig.inc.php?rf: 2 Time(s) /pipermail/registration: 1 Time(s) /pipermail/users/2012-July/003088.html/registration: 1 Time(s) /pipermail/users/2012-July/registration: 1 Time(s) /pipermail/users/2013-October//images/stories/explore.gif: 1 Time(s) /pipermail/users/2013-december/019125.html: 2 Time(s) /pipermail/users/2014-january/019656.html: 2 Time(s) /pipermail/users/attachments/20130915/781d ... :<br><br/: 1 Time(s) /pipermail/users/attachments/20130915/781d ... ;<br><br/: 2 Time(s) /pipermail/users/attachments/20131030/e471 ... nt.html>: 1 Time(s) /pipermail/users/registration: 1 Time(s) /r: 1 Time(s) /registration: 1 Time(s) /rel: 1 Time(s) /relea: 1 Time(s) /release: 1 Time(s) /releases/%E3%80%81: 1 Time(s) /releases//beta/rpm/EL/6Server/repodata/ad ... 08-other.xml.gz: 1 Time(s) /releases/3.2/rpm/EL/$releasever/: 3 Time(s) /releases/3.3.2/rpm/EL/6.2/repodata/repomd.xml: 40 Time(s) /releases/3.3.2/rpm/Fedora/$releasever/: 1 Time(s) /releases/3.3.2/rpm/Fedora/17/repodata/repomd.xml: 3 Time(s) /releases/3.3.2/rpm/Fedora/18/repodata/repomd.xml: 6 Time(s) /releases/3.3.2/rpm/Fedora/19/repodata/repodata/repomd.xml: 3 Time(s) /releases/3.3.2/rpm/Fedora/20/repodata/repomd.xml: 319 Time(s) /releases/3.3.2/rpm/Fedora/noarch: 1 Time(s) /releases/3.3.3/rpm/Fedora/19/repodata/repomd.xml: 1 Time(s) /releases/3.3/rpm/EL/6/.treeinfo: 2 Time(s) /releases/3.3/rpm/EL/6/enabled%3D1/repodata/repomd.xml: 5 Time(s) /releases/3.3/rpm/EL/6/treeinfo: 2 Time(s) /releases/3.3/rpm/Fedora/18//repodata/repomd.xml: 9 Time(s) /releases/3.3/rpm/Fedora/18/noarch/repodat ... -primary.xml.gz: 1 Time(s) /releases/3.3/rpm/Fedora/18/repodata/repomd.xml: 9 Time(s) /releases/3.3/rpm/Fedora/19/repodata/44458 ... -primary.xml.gz: 1 Time(s) /releases/3.4.0-alpha/rpm/EL/$releasever: 1 Time(s) /releases/3.4.0-alpha/rpm/EL/6.4/repodata/repomd.xml: 2 Time(s) /releases/3.4/rpm/EL/6/repodata/repomd.xml: 1 Time(s) /releases/administrator/index.php: 1 Time(s) /releases/alpha/rpm/Fedora/20/repodata/repomd.xml: 65 Time(s) /releases/beta/fedora/$releasever/: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 6 Time(s) /releases/beta/iso/ovirt-node-iso-2.6.1-20120228.fc18.iso: 29 Time(s) /releases/beta/ovirt-engine.repo: 2 Time(s) /releases/beta/repodata/repomd.xml: 2 Time(s) /releases/beta/rpm/EL/6.4/repodata/repomd.xml: 2 Time(s) /releases/beta/rpm/EL/6Server/noarch/jaspe ... .el6.noarch.rpm: 1 Time(s) /releases/beta/rpm/EL/6Server/noarch/ovirt ... .el6.noarch.rpm: 36 Time(s) /releases/beta/rpm/EL/6Server/noarch/vdsm- ... .el6.noarch.rpm: 96 Time(s) /releases/beta/rpm/EL/6Server/ppc64/vdsm-4 ... 2.el6.ppc64.rpm: 1 Time(s) /releases/beta/rpm/EL/6Server/ppc64/vdsm-d ... 2.el6.ppc64.rpm: 1 Time(s) /releases/beta/rpm/EL/6Server/ppc64/vdsm-p ... 2.el6.ppc64.rpm: 2 Time(s) /releases/beta/rpm/Fedora/18/repodata/03eb ... ists.sqlite.bz2: 1 Time(s) /releases/beta/rpm/Fedora/18/repodata/repomd.xml: 136 Time(s) /releases/beta/rpm/Fedora/20/repodata/repomd.xml: 79 Time(s) /releases/nightly/RHEL/6/repodata/repomd.xml: 2 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 226 Time(s) /releases/nightly/rpm/EL/6.4/repodata/repomd.xml: 2 Time(s) /releases/nightly/rpm/EL/6/hooks/vdsm-hook ... .el6.noarch.rpm: 6 Time(s) /releases/nightly/rpm/EL/6/noarch/ovirt-en ... .el6.noarch.rpm: 12 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-api ... .el6.noarch.rpm: 2 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-cli ... .el6.noarch.rpm: 1 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-deb ... .el6.noarch.rpm: 1 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-glu ... .el6.noarch.rpm: 2 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-hoo ... .el6.noarch.rpm: 16 Time(s) /releases/nightly/rpm/EL/6/noarch/vdsm-yaj ... .el6.noarch.rpm: 1 Time(s) /releases/nightly/rpm/EL/6/x86_64/vdsm-4.1 ... .el6.x86_64.rpm: 1 Time(s) /releases/nightly/rpm/EL/6/x86_64/vdsm-deb ... .el6.x86_64.rpm: 1 Time(s) /releases/nightly/rpm/EL/6/x86_64/vdsm-pyt ... .el6.x86_64.rpm: 1 Time(s) /releases/nightly/rpm/Fedora/17/repodata/repomd.xml: 2 Time(s) /releases/nightly/rpm/Fedora/18/repodata/9 ... ther.sqlite.bz2: 3 Time(s) /releases/nightly/rpm/Fedora/18/repodata/b ... ists.sqlite.bz2: 2 Time(s) /releases/nightly/rpm/Fedora/19/repodata/7 ... ists.sqlite.bz2: 1 Time(s) /releases/nightly/rpm/Fedora/19/repodata/b ... ther.sqlite.bz2: 5 Time(s) /releases/o: 1 Time(s) /releases/ovirt-fedora.noarch.rpm: 4 Time(s) /releases/ovirt-relase-el.noarch.rpm: 1 Time(s) /releases/ovirt-release-@distro@.noarch.rpm: 1 Time(s) /releases/ovirt-release-el6-10-1.noarch.rpm: 5 Time(s) /releases/ovirt-release-el6-8-1.noarch.rpm: 22 Time(s) /releases/ovirt-release-el6.noarch.rpm: 1 Time(s) /releases/ovirt-release-fedora.noarch.rpm%e2%80%9d: 1 Time(s) /releases/ovirt-release.noarch.rpm: 1 Time(s) /releases/ovirt-releases-el.noarch.rpm: 2 Time(s) /releases/stable/binary: 1 Time(s) /releases/stable/binary/: 5 Time(s) /releases/stable/fedora/16/: 2 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 2 Time(s) /releases/stable/fedora/16/repodata/filelists.xml.gz: 25 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 242 Time(s) /releases/stable/rpm/EL/19/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/EL/20/repodata/repomd.xml: 6 Time(s) /releases/stable/rpm/EL/6.2/repodata/repomd.xml: 40 Time(s) /releases/stable/rpm/EL/6.3/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/EL/6/.treeinfo: 3 Time(s) /releases/stable/rpm/EL/6/images/pxeboot/: 1 Time(s) /releases/stable/rpm/EL/6/treeinfo: 3 Time(s) /releases/stable/rpm/EL/6Server/repodata/4 ... ary.sqlite.bz2:: 3 Time(s) /releases/stable/rpm/EL/6Server/repodata/4 ... y.sqlite.bz2%3A: 4 Time(s) /releases/stable/rpm/EL/6Workstation/repodata/repomd.xml: 2 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 8 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 12 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 9 Time(s) /releases/stable/rpm/Fedora/$releasever/: 2 Time(s) /releases/stable/rpm/Fedora//repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 6 Time(s) /releases/stable/rpm/Fedora/20/: 1 Time(s) /releases/stable/rpm/Fedora/20/noarch/otop ... fc19.noarch.rpm: 2 Time(s) /releases/stable/rpm/Fedora/20/noarch/ovir ... fc19.noarch.rpm: 16 Time(s) /releases/stable/rpm/Fedora/20/repodata/repomd.xml: 773 Time(s) /releases/stable/rpm/Fedora/repodata/repomd.xml: 8 Time(s) /releases/stable/src/%25: 1 Time(s) /releases/updates-testing/rpm/Fedora/18/repodata/repomd.xml: 10 Time(s) /releases/updates-testing/rpm/Fedora/18/x86_64/: 1 Time(s) /releases/updates-testing/rpm/Fedora/20/repodata/repomd.xml: 98 Time(s) /releases/wp-login.php: 1 Time(s) /robots.txt: 168 Time(s) /user/: 4 Time(s) /user/register: 2 Time(s) /wp-admin/: 1 Time(s) /wp-login.php: 6 Time(s) /wp-login.php?action=register: 5 Time(s) /wp/wp-admin/: 1 Time(s) http://resources.ovirt.org/releases/3.3.2/ ... data/repomd.xml: 2 Time(s) http://resources.ovirt.org/releases/stable ... data/repomd.xml: 2 Time(s) 416 Request Range Not Satisfiable /releases/stable/rpm/Fedora/17/noarch/old/ ... fc17.noarch.rpm: 90 Time(s) /releases/stable/rpm/Fedora/17/noarch/ovir ... fc17.noarch.rpm: 171 Time(s) /releases/stable/rpm/Fedora/17/x86_64/ovir ... fc17.x86_64.rpm: 36 Time(s) /releases/stable/rpm/Fedora/18/noarch/otop ... fc18.noarch.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... -7-1.noarch.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... fc18.noarch.rpm: 2 Time(s) /releases/stable/rpm/Fedora/18/noarch/vdsm ... fc18.noarch.rpm: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present [<c06903c6>] ? error_code+0x5a/0x60 ...: 1 Time(s) ---------------------- Kernel End ------------------------- --------------------- pam_unix Begin ------------------------ su-l: Sessions Opened: root -> rsync: 2 Time(s) root -> root: 1 Time(s) sudo: Authentication Failures: eedri(510) -> eedri: 1 Time(s) Unknown Entries: auth could not identify password for [oschreib]: 1 Time(s) conversation failed: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 3 *Warning: Pre-queue content-filter connection overload 61.263M Bytes accepted 64,239,280 1.180G Bytes delivered 1,267,421,429 ======== ================================================ 3260 Accepted 99.85% 5 Rejected 0.15% -------- ------------------------------------------------ 3265 Total 100.00% ======== ================================================ 5 Reject unknown user 100.00% -------- ------------------------------------------------ 5 Total Rejects 100.00% ======== ================================================ 1843 Connections made 22 Connections lost 1843 Disconnections 3254 Removed from queue 1121 Delivered 62248 Sent via SMTP 9 Forwarded 36 Deferred 206 Deferrals 51 Bounce (local) 106 Bounce (remote) 3 Expired and returned to sender 63 DSNs undeliverable 462 Connection failure (outbound) 7 Timeout (inbound) 27 Hostname verification errors 748 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ New Users: rsync (521) New Groups: rsync (521) ---------------------- Connections (secure-log) End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: jenkins (46010491) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: dcaro: 79.145.202.213 (213.Red-79-145-202.dynamicIP.rima-tde.net): 1 time dneary: 87.231.145.225 (87-231-145-225.rev.numericable.fr): 2 times eedri: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 1 time gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 2 times jenkins: 66.187.237.11 (nat-pool-tlv-u1.redhat.com): 1 time 108.166.47.34: 1 time 108.166.47.42: 1 time knesenko: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 2 times mburns: 107.3.82.202 (c-107-3-82-202.hsd1.ct.comcast.net): 1 time oschreib: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 1 time rsync: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 4 times Authentication refused: bad ownership or modes for file /home/rsync/.ssh/authorized_keys : 1 Time(s) Received disconnect: 11: Bye Bye : 4993 Time(s) 11: Goodbye : 1 Time(s) 11: disconnected by user : 8 Time(s) SFTP subsystem requests: 3 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for 214.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.214] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 203.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.203] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 221.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.221] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for 209.51.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.51.209] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== dcaro => root ------------- /bin/bash - 2 Times. /bin/mv - 1 Times. /usr/bin/locate - 1 Times. /usr/bin/tail - 1 Times. /usr/bin/updatedb - 1 Times. ============================================================================== dneary => root -------------- /bin/bash - 2 Times. ============================================================================== eedri => root ------------- /bin/bash - 2 Times. ============================================================================== knesenko => root ---------------- /bin/su - 3 Times. /usr/bin/passwd - 2 Times. /usr/bin/wget - 1 Times. /usr/sbin/useradd - 1 Times. **Unmatched Entries** pam_unix(sudo:auth): auth could not identify password for [oschreib]: 1 Time(s) pam_unix(sudo:auth): conversation failed: 1 Time(s) ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 59G 55G 4.3G 93% / /dev/xvda => 93% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################
participants (1)
-
logwatch@lists.ovirt.org