################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Sun Jun 16 03:28:16 2013 Date Range Processed: yesterday ( 2013-Jun-15 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 400 Bad Request /../record_company.php/password_forgotten.php: 4 Time(s) /../sqlpatch.php/password_forgotten.php?action=execute: 4 Time(s) 404 Not Found //lists.ovirt.org/pipermail/users/2012-Feb ... tml/000437.html: 2 Time(s) //record_company.php/password_forgotten.php: 2 Time(s) //sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) //wp-content/themes/LondonLive/thumb.php?s ... .log/upload.php: 1 Time(s) //wp-content/themes/LondonLive/thumb.php?s ... ino.net/jos.php: 1 Time(s) //wp-content/themes/Spectrum/thumb.php?src ... .log/upload.php: 1 Time(s) /4dm1n/record_company.php/password_forgotten.php: 2 Time(s) /4dm1n/sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) /________mailman/listinfo/users: 1 Time(s) /admin.php: 2 Time(s) /admin/: 2 Time(s) /admin/administrators.php/login.php: 1 Time(s) /admin/categories.php/login.php: 4 Time(s) /admin/login.php: 2 Time(s) /admin/record_company.php/password_forgotten.php: 4 Time(s) /admin/sqlpatch.php/password_forgotten.php?action=execute: 3 Time(s) /admin123/record_company.php/password_forgotten.php: 2 Time(s) /admin123/sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) /admin12345/record_company.php/password_forgotten.php: 2 Time(s) /admin12345/sqlpatch.php/password_forgotte ... ?action=execute: 2 Time(s) /administrator/index.php: 2 Time(s) /adminpanel/record_company.php: 1 Time(s) /adminpanel/sqlpatch.php/password_forgotte ... ?action=execute: 1 Time(s) /adminshop/record_company.php/password_forgotten.php: 2 Time(s) /adminshop/sqlpatch.php/password_forgotten ... ?action=execute: 2 Time(s) /adminstore/record_company.php/password_forgotten.php: 2 Time(s) /adminstore/sqlpatch.php/password_forgotte ... ?action=execute: 2 Time(s) /apple-touch-icon-precomposed.png: 1 Time(s) /bitrix/admin/index.php?lang=en: 2 Time(s) /category/news/feed: 2 Time(s) /category/news/feed/: 106 Time(s) /extras/curltest.php: 4 Time(s) /favicon.ico: 385 Time(s) /login/record_company.php/password_forgotten.php: 3 Time(s) /login/sqlpatch.php/password_forgotten.php?action=execute: 3 Time(s) /manage_store/record_company.php/password_forgotten.php: 2 Time(s) /manage_store/sqlpatch.php/password_forgot ... ?action=execute: 2 Time(s) /manager/record_company.php/password_forgotten.php: 3 Time(s) /manager/sqlpatch.php/password_forgotten.php?action=execute: 3 Time(s) /meetings/ovirt/2012/ovirt.2012-09-17-14.00.log.html: 1 Time(s) /myadmin/record_company.php/password_forgotten.php: 2 Time(s) /myadmin/sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) /phppath/php: 1 Time(s) /pipermail: 2 Time(s) /pipermail/cgi-bin/register.cgi: 4 Time(s) /pipermail/engine-commits/2013-february/: 2 Time(s) /pipermail/engine-patches/2012-October/mwplmnexbo.html: 1 Time(s) /pipermail/infra/2012-December/wp-content/ ... .com%2Finfo.php: 2 Time(s) /pipermail/infra/2012-November/001313.html ... ino.net/jos.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... %2F05%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/001330.html ... .nl%2Fxcute.php: 10 Time(s) /pipermail/infra/2012-November/001330.html ... 6%22%20href=%22: 2 Time(s) /pipermail/infra/2012-November/001330.html ... nic.in%2Fsh.php: 4 Time(s) /pipermail/infra/2012-November/001330.html ... us.com/info.php: 2 Time(s) /pipermail/infra/2012-November/001342.html ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001420.html ... jlari.tk/xp.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... ZoWA/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... aBeg/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... gKUA/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... hT8g/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... i.org%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/001432.html ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001525.html ... ztmg/xmlrpc.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... %2F05%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... .nl%2Fxcute.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... i.org%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... ino.net/jos.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... jlari.tk/xp.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... m%2Fromania.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... nic.in%2Fsh.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... ri.net%2Fuz.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... s.com%2Fbad.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... us.com/info.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... wi.com%2Fid.php: 1 Time(s) /pipermail/infra/2012-October/../record_co ... d_forgotten.php: 4 Time(s) /pipermail/infra/2012-October/../sqlpatch. ... ?action=execute: 4 Time(s) /pipermail/infra/2012-October//record_comp ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October//sqlpatch.ph ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/001183.html& ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/001212.html& ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/001232.html& ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/001243.html& ... m.br%2Ftest.php: 4 Time(s) /pipermail/infra/2012-October/001244.html& ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/001266.html& ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/4dm1n/record ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/4dm1n/sqlpat ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/admin/admini ... s.php/login.php: 1 Time(s) /pipermail/infra/2012-October/admin/categories.php/login.php: 4 Time(s) /pipermail/infra/2012-October/admin/record ... d_forgotten.php: 4 Time(s) /pipermail/infra/2012-October/admin/sqlpat ... ?action=execute: 4 Time(s) /pipermail/infra/2012-October/admin123/rec ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/admin123/sql ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/admin12345/r ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/admin12345/s ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/adminpanel/record_company.php: 1 Time(s) /pipermail/infra/2012-October/adminpanel/s ... ?action=execute: 1 Time(s) /pipermail/infra/2012-October/adminshop/re ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/adminshop/sq ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/adminstore/r ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/adminstore/s ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/extras/curltest.php: 4 Time(s) /pipermail/infra/2012-October/login/record ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/login/sqlpat ... ?action=execute: 3 Time(s) /pipermail/infra/2012-October/manage_store ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/manage_store ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/manager/reco ... d_forgotten.php: 3 Time(s) /pipermail/infra/2012-October/manager/sqlp ... ?action=execute: 3 Time(s) /pipermail/infra/2012-October/myadmin/reco ... d_forgotten.php: 2 Time(s) /pipermail/infra/2012-October/myadmin/sqlp ... ?action=execute: 2 Time(s) /pipermail/infra/2012-October/qqadmin/reco ... d_forgotten.php: 3 Time(s) /pipermail/infra/2012-October/qqadmin/sqlp ... ?action=execute: 3 Time(s) /pipermail/infra/2012-October/shopadmin/re ... d_forgotten.php: 3 Time(s) /pipermail/infra/2012-October/shopadmin/sq ... ?action=execute: 3 Time(s) /pipermail/infra/2012-October/storeadmin/r ... d_forgotten.php: 4 Time(s) /pipermail/infra/2012-October/storeadmin/s ... ?action=execute: 4 Time(s) /pipermail/infra/2012-October/wp-content/t ... m.br%2Ftest.php: 1 Time(s) /pipermail/infra/2012-October/zenadmin/rec ... d_forgotten.php: 1 Time(s) /pipermail/infra/2012-October/zenadmin/sql ... ?action=execute: 2 Time(s) /pipermail/infra/2012-november/: 3 Time(s) /pipermail/infra/2013-April/002521.html&am ... ns.com%2Fsh.php: 1 Time(s) /pipermail/infra/2013-April/002530.html&am ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-April/002546.html%22 ... 9%22%20href=%22: 2 Time(s) /pipermail/infra/2013-April/002546.html&am ... r%2F%2Fbajo.php: 1 Time(s) /pipermail/infra/2013-April/wp-content/the ... ns.com%2Fsh.php: 1 Time(s) /pipermail/infra/2013-April/wp-content/the ... r%2F%2Fbajo.php: 1 Time(s) /pipermail/infra/2013-April/wp-content/the ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-March/002267.html&am ... GhDA/xmlrpc.php: 1 Time(s) /pipermail/infra/2013-March/002267.html&am ... r%2F%2Fbajo.php: 1 Time(s) /pipermail/infra/2013-March/002267.html&am ... s.com%2Fbad.php: 3 Time(s) /pipermail/infra/2013-March/wp-content/the ... r%2F%2Fbajo.php: 1 Time(s) /pipermail/infra/2013-March/wp-content/the ... s.com%2Fbad.php: 1 Time(s) /pipermail/infra/2013-May//wp-content/them ... .log/upload.php: 2 Time(s) /pipermail/infra/2013-May//wp-content/them ... ino.net/jos.php: 1 Time(s) /pipermail/infra/2013-May/002697.html& ... .log/upload.php: 2 Time(s) /pipermail/infra/2013-May/002697.html& ... ino.net/jos.php: 6 Time(s) /pipermail/infra/2013-May/003139.html& ... .log/upload.php: 1 Time(s) /pipermail/infra/admin/categories.php/login.php: 4 Time(s) /pipermail/register.cgi: 7 Time(s) /pipermail/user/register: 4 Time(s) /pipermail/user/registerindex.php: 1 Time(s) /pipermail/users/2012-February/000438.html/000437.html: 2 Time(s) /qqadmin/record_company.php/password_forgotten.php: 3 Time(s) /qqadmin/sqlpatch.php/password_forgotten.php?action=execute: 3 Time(s) /releases/3.2_bak/iso/: 1 Time(s) /releases/3.2_bak/rpm/Fedora/19/repodata/: 1 Time(s) /releases/beta/fedora/17: 2 Time(s) /releases/beta/fedora/17/: 1 Time(s) /releases/nightly/fedora/: 1 Time(s) /releases/nightly/fedora/16/ovirt-engine.repo: 2 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 99 Time(s) /releases/nightly/iso/ovirt-node-iso-2.5.5-0.1.fc17.iso: 18 Time(s) /releases/nightly/rpm/EL/6/hooks/repodata/primary.xml.gz: 1 Time(s) /releases/nightly/rpm/Fedora/17/repodata/3 ... ther.sqlite.bz2: 6 Time(s) /releases/nightly/rpm/Fedora/18/noarch/ovi ... fc18.noarch.rpm: 1 Time(s) /releases/stable/binary/: 1 Time(s) /releases/stable/binary/ovirt-node-image-2.2.2-2.2.fc16.iso: 46 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 2 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 227 Time(s) /releases/stable/rpm/EL/6Server/repodata/repomd.xml: 5 Time(s) /releases/stable/rpm/EL6/$releasever/: 1 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 16 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 16 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 4 Time(s) /releases/stable/rpm/Fedora/15/repodata/repomd.xml: 94 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 49 Time(s) /releases/stable/tools/ovirt-node-iso-2.5.5-0.1.fc17.iso: 18 Time(s) /releases/updates-testing/rpm/EL/6Server/repodata/repomd.xml: 3 Time(s) /releases/user/login?destination=node/add: 2 Time(s) /robots.txt: 52 Time(s) /shopadmin/record_company.php/password_forgotten.php: 3 Time(s) /shopadmin/sqlpatch.php/password_forgotten ... ?action=execute: 3 Time(s) /stats/irc/blue-h.png: 1 Time(s) /stats/irc/blue-v.png: 1 Time(s) /stats/irc/green-h.png: 1 Time(s) /stats/irc/green-v.png: 1 Time(s) /stats/irc/red-h.png: 1 Time(s) /stats/irc/red-v.png: 1 Time(s) /stats/irc/yellow-h.png: 1 Time(s) /stats/irc/yellow-v.png: 1 Time(s) /storeadmin/record_company.php/password_forgotten.php: 4 Time(s) /storeadmin/sqlpatch.php/password_forgotte ... ?action=execute: 3 Time(s) /trafficbasedsspsitemap.xml: 2 Time(s) /user/: 2 Time(s) /wiki/Quick_Start_Guide: 1 Time(s) /wp-content/themes/Chameleon/timthumb.php? ... m%2Fromania.php: 1 Time(s) /wp-content/themes/DBS/timthumb.php?src=ht ... r%2F%2Fbajo.php: 1 Time(s) /wp-content/themes/DBS/timthumb.php?src=ht ... r.com%2Fplk.php: 1 Time(s) /wp-content/themes/LondonLive/thumb.php?sr ... r%2F%2Fbajo.php: 1 Time(s) /wp-content/themes/LondonLive/thumb.php?sr ... s.com%2Fbad.php: 1 Time(s) /wp-content/themes/deliciousmagazine/thumb ... jlari.tk/xp.php: 1 Time(s) /wp-content/themes/digitalfarm/thumb.php?s ... .com%2Finfo.php: 2 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... .nl%2Fxcute.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... jlari.tk/xp.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... nic.in%2Fsh.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... s.com%2Fbad.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... us.com/info.php: 1 Time(s) /wp-content/themes/ecobiz/timthumb.php?src ... wi.com%2Fid.php: 1 Time(s) /wp-content/themes/edupress/scripts/timthu ... %2F05%2Fbad.php: 2 Time(s) /wp-content/themes/mainstream/thumb.php?sr ... ns.com%2Fsh.php: 1 Time(s) /wp-content/themes/multidesign/scripts/ima ... i.org%2Fbad.php: 1 Time(s) /wp-content/themes/multidesign/scripts/ima ... ino.net/jos.php: 1 Time(s) /wp-content/themes/multidesign/scripts/ima ... s.com%2Fbad.php: 1 Time(s) /wp-content/themes/versatile/timthumb.php? ... m.br%2Ftest.php: 1 Time(s) /wp-content/themes/welcome_inn/thumb.php?s ... ri.net%2Fuz.php: 1 Time(s) /wp-login.php: 6 Time(s) /xmlrpc.php: 3 Time(s) /zenadmin/record_company.php/password_forgotten.php: 2 Time(s) /zenadmin/sqlpatch.php/password_forgotten.php?action=execute: 2 Time(s) 416 Request Range Not Satisfiable /releases/beta/rpm/Fedora/18/noarch/ovirt- ... fc18.noarch.rpm: 1 Time(s) /releases/beta/rpm/Fedora/18/x86_64/vdsm-4 ... fc18.x86_64.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/i686/vdsm-4 ... 6.fc18.i686.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/i686/vdsm-4 ... 8.fc18.i686.rpm: 1 Time(s) /releases/stable/rpm/Fedora/18/noarch/otop ... fc18.noarch.rpm: 4 Time(s) /releases/stable/rpm/Fedora/18/noarch/ovir ... fc18.noarch.rpm: 6 Time(s) /releases/stable/rpm/Fedora/18/noarch/vdsm ... fc18.noarch.rpm: 25 Time(s) /releases/stable/rpm/Fedora/18/x86_64/vdsm ... fc18.x86_64.rpm: 4 Time(s) ---------------------- httpd End ------------------------- --------------------- Postfix Begin ------------------------ 7 *Warning: Pre-queue content-filter connection overload 47.321M Bytes accepted 49,619,857 423.322M Bytes delivered 443,885,672 ======== ================================================ 1122 Accepted 99.56% 5 Rejected 0.44% -------- ------------------------------------------------ 1127 Total 100.00% ======== ================================================ 5 Reject relay denied 100.00% -------- ------------------------------------------------ 5 Total Rejects 100.00% ======== ================================================ 840 Connections made 3 Connections lost 840 Disconnections 1062 Removed from queue 532 Delivered 5363 Sent via SMTP 3 Forwarded 105 Deferred 1362 Deferrals 63 Bounce (local) 22 Bounce (remote) 7 Expired and returned to sender 92 DSNs undeliverable 949 Connection failure (outbound) 3 Timeout (inbound) 59 Hostname verification errors 131 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jenkins: 50.19.1.136 (ec2-50-19-1-136.compute-1.amazonaws.com): 1 time Received disconnect: 11: Bye Bye : 3038 Time(s) 11: disconnected by user : 3 Time(s) SFTP subsystem requests: 1 Time(s) **Unmatched Entries** reverse mapping checking getaddrinfo for ip223.hichina.com [223.5.3.200] failed - POSSIBLE BREAK-IN ATTEMPT! : 557 time(s) reverse mapping checking getaddrinfo for ip223.hichina.com [223.4.206.38] failed - POSSIBLE BREAK-IN ATTEMPT! : 450 time(s) reverse mapping checking getaddrinfo for 26.ip-176-31-184.eu [176.31.184.26] failed - POSSIBLE BREAK-IN ATTEMPT! : 1843 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 59G 51G 8.4G 86% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################