################### Logwatch 7.3.6 (05/19/07) #################### Processing Initiated: Thu Jan 17 03:47:23 2013 Date Range Processed: yesterday ( 2013-Jan-16 ) Period is day. Detail Level of Output: 0 Type of Output: unformatted Logfiles for Host: linode01.ovirt.org ################################################################## --------------------- httpd Begin ------------------------ Requests with error response codes 404 Not Found /Feature/AllInOne: 1 Time(s) /NetApp_Workshop_January_2013: 1 Time(s) /admin/banner_manager.php/login.php: 1 Time(s) /admin/categories.php/login.php: 1 Time(s) /admin/file_manager.php/login.php: 1 Time(s) /admin/sqlpatch.php/password_forgotten.php?action=execute: 31 Time(s) /apple-touch-icon-precomposed.png: 45 Time(s) /apple-touch-icon.png: 45 Time(s) /category/news/feed: 28 Time(s) /category/news/feed/: 152 Time(s) /extras/curltest.php: 1 Time(s) /favicon.ico: 630 Time(s) /mailman/arch: 1 Time(s) /meetings/ovirt/2012/ovirt.2012-01-24-14: 1 Time(s) /pipermail/infra/2012-November/001313.html ... Fexecdodolz.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... .com%2Fonet.php: 2 Time(s) /pipermail/infra/2012-November/001330.html ... .com%2Fsaka.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... .ro%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-November/001330.html ... .us%2Fcrotz.php: 5 Time(s) /pipermail/infra/2012-November/001344.html ... om.br%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001432.html ... Fexecdodolz.php: 1 Time(s) /pipermail/infra/2012-November/001445.html ... .br%2Fjahat.php: 2 Time(s) /pipermail/infra/2012-November/001445.html ... e.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/001471.html ... .com%2Fonet.php: 2 Time(s) /pipermail/infra/2012-November/001471.html ... .us%2Fcrotz.php: 5 Time(s) /pipermail/infra/2012-November/001483.html ... .com%2Fonet.php: 2 Time(s) /pipermail/infra/2012-November/001483.html ... .com%2Fsaka.php: 1 Time(s) /pipermail/infra/2012-November/001483.html ... .ro%2Fjahat.php: 4 Time(s) /pipermail/infra/2012-November/001483.html ... .us%2Fcrotz.php: 7 Time(s) /pipermail/infra/2012-November/001552.html ... o.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/index.php?t ... gin&type=signup: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... .br%2Fjahat.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... .com%2Fonet.php: 2 Time(s) /pipermail/infra/2012-November/wp-content/ ... .com%2Fsaka.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... .ro%2Fjahat.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... .us%2Fcrotz.php: 8 Time(s) /pipermail/infra/2012-November/wp-content/ ... Fexecdodolz.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... e.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... o.com%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... om.br%2Fbad.php: 1 Time(s) /pipermail/infra/2012-November/wp-content/ ... om.br/jahat.php: 8 Time(s) /pipermail/infra/2012-October/admin/banner ... r.php/login.php: 1 Time(s) /pipermail/infra/2012-October/admin/categories.php/login.php: 1 Time(s) /pipermail/infra/2012-October/admin/file_m ... r.php/login.php: 1 Time(s) /pipermail/infra/2012-September/001072.htm ... as/curltest.php: 1 Time(s) /pipermail/infra/2012-September/admin/sqlp ... ?action=execute: 31 Time(s) /pipermail/infra/2012-September/extras/curltest.php: 1 Time(s) /pipermail/infra/2012-September/wp-content ... ech.com/IDC.php: 1 Time(s) /pipermail/infra/admin/banner_manager.php/login.php: 1 Time(s) /pipermail/infra/admin/categories.php/login.php: 1 Time(s) /pipermail/infra/admin/file_manager.php/login.php: 1 Time(s) /pipermail/infra/admin/sqlpatch.php/passwo ... ?action=execute: 31 Time(s) /pipermail/infra/wp-content/themes/data/ph ... ech.com/IDC.php: 1 Time(s) /pipermail/infra/wp-content/themes/freshne ... om.br/jahat.php: 2 Time(s) /pipermail/infra/wp-content/themes/overeas ... om.br/jahat.php: 6 Time(s) /r: 1 Time(s) /releases/3.0/rpm/EL6/6/repodata/repomd.xml: 1 Time(s) /releases/3.2/nightly/ovirt-engine-sdk-3.2.0.6.tar.gz: 2 Time(s) /releases/3.2/src/ovirt-engine-sdk-3.2.0.6.tar.gz: 2 Time(s) /releases/alpha/rpm/Fedora/17/repodata/repomd.xml: 5 Time(s) /releases/beta.old.20120808/fedora/: 1 Time(s) /releases/beta/binary/: 1 Time(s) /releases/beta/fedora/17/repodata/filelists.xml.gz: 24 Time(s) /releases/beta/fedora/17/repodata/other.xml.gz: 1 Time(s) /releases/beta/fedora/17/repodata/repomd.xml: 34 Time(s) /releases/beta/ovirt-engine.repo: 2 Time(s) /releases/beta/rpm/EL6/6/repodata/repomd.xml: 4 Time(s) /releases/beta/rpm/Fedora/17/noarch/?C=N%3bO=A: 1 Time(s) /releases/beta/rpm/Fedora/17/repodata/repomd.xml: 127 Time(s) /releases/beta/rpm/Fedora/17/x86_64/?C=S%3bO=A: 1 Time(s) /releases/beta/rpm/Fedora/18/noarch/old/?C=S%3bO=A: 1 Time(s) /releases/beta/rpm/Fedora/18/noarch/repodata/?C=M%3bO=D: 1 Time(s) /releases/beta/rpm/Fedora/19/ovirt-engine.repo: 1 Time(s) /releases/nightly/fedora/16/: 1 Time(s) /releases/nightly/fedora/16/ovirt-engine.repo: 1 Time(s) /releases/nightly/fedora/16/repodata/repomd.xml: 377 Time(s) /releases/nightly/rpm/EL6/6/repodata/repomd.xml: 2 Time(s) /releases/ovirt-release-*: 1 Time(s) /releases/ovirt-release-dedora.noarch.rpm: 1 Time(s) /releases/ovirt-release-fedora-noarch.rpm: 6 Time(s) /releases/stable/binary: 1 Time(s) /releases/stable/binary/: 7 Time(s) /releases/stable/fedora: 1 Time(s) /releases/stable/fedora/16/: 1 Time(s) /releases/stable/fedora/16//repodata/repomd.xml: 1 Time(s) /releases/stable/fedora/16/ovirt-engine.repo: 6 Time(s) /releases/stable/fedora/16/repodata/filelists.xml.gz: 2 Time(s) /releases/stable/fedora/16/repodata/primary.xml.gz: 24 Time(s) /releases/stable/fedora/16/repodata/repomd.xml: 230 Time(s) /releases/stable/fedora/16/x86_64/repodata/repomd.xml: 3 Time(s) /releases/stable/fedora/17: 1 Time(s) /releases/stable/ovirt-engine.repo%20-O%20 ... virtengine.repo: 1 Time(s) /releases/stable/rpm/EL/6/repodata/repomd.xml: 1 Time(s) /releases/stable/rpm/EL6/: 1 Time(s) /releases/stable/rpm/EL6/6/: 1 Time(s) /releases/stable/rpm/EL6/6/repodata/repomd.xml: 88 Time(s) /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 29 Time(s) /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 12 Time(s) /releases/stable/rpm/Fedora/14/repodata/repomd.xml: 23 Time(s) /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 95 Time(s) /releases/stable/rpm/Fedora/18/noarch/vdsm ... fc18.noarch.rpm: 4 Time(s) /releases/stable/rpm/Fedora/18/x86_64/vdsm ... fc18.x86_64.rpm: 2 Time(s) /releases/stable/rpm/Fedora/19/ovirt-engine.repo: 1 Time(s) /releases/stable/rpm/Fedora/19/repodataovirt-engine.repo: 1 Time(s) /robots.txt: 30 Time(s) /user/register: 1 Time(s) /wp-content/themes/Envisioned/timthumb.php ... o.com%2Fbad.php: 1 Time(s) /wp-content/themes/SimplePress/timthumb.ph ... om.br%2Fbad.php: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... .com%2Fonet.php: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... .com%2Fsaka.php: 1 Time(s) /wp-content/themes/TheTravelTheme/includes ... .us%2Fcrotz.php: 7 Time(s) /wp-content/themes/TheTravelTheme/timthumb ... .us%2Fcrotz.php: 1 Time(s) /wp-content/themes/data/php/timthumb.php?s ... ech.com/IDC.php: 1 Time(s) /wp-content/themes/flashnews/thumb.php?src ... .br%2Fjahat.php: 1 Time(s) /wp-content/themes/flashnews/thumb.php?src ... e.com%2Fbad.php: 1 Time(s) /wp-content/themes/flashnews/timthumb.php? ... .br%2Fjahat.php: 1 Time(s) /wp-content/themes/freshnews/thumb.php?src ... om.br/jahat.php: 2 Time(s) /wp-content/themes/multidesign/scripts/tim ... Fexecdodolz.php: 1 Time(s) /wp-content/themes/overeasy/thumb.php?src= ... om.br/jahat.php: 6 Time(s) /wp-content/themes/skeptical/timthumb.php? ... .ro%2Fjahat.php: 1 Time(s) /wp-login.php?action=register: 2 Time(s) 416 Request Range Not Satisfiable /releases/nightly/rpm/Fedora/17/repodata/other.xml.gz: 12 Time(s) /releases/nightly/rpm/Fedora/18/noarch/ovi ... fc18.noarch.rpm: 1 Time(s) /releases/nightly/rpm/Fedora/18/repodata/other.xml.gz: 21 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ su-l: Sessions Opened: root -> root: 2 Time(s) sudo: Authentication Failures: oschreib(0) -> oschreib: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 1 *Warning: Pre-queue content-filter connection overload 18.372M Bytes accepted 19,264,780 357.789M Bytes delivered 375,168,793 ======== ================================================ 1979 Accepted 99.65% 7 Rejected 0.35% -------- ------------------------------------------------ 1986 Total 100.00% ======== ================================================ 7 Reject unknown user 100.00% -------- ------------------------------------------------ 7 Total Rejects 100.00% ======== ================================================ 1072 Connections made 54 Connections lost 1072 Disconnections 1923 Removed from queue 577 Delivered 37087 Sent via SMTP 7 Forwarded 72 Deferred 1152 Deferrals 2 Bounce (local) 12 Bounce (remote) 1 Expired and returned to sender 15 DSNs undeliverable 1120 Connection failure (outbound) 23 Timeout (inbound) 12 Hostname verification errors 436 Enabled PIX workaround ---------------------- Postfix End ------------------------- --------------------- SSHD Begin ------------------------ Users logging in through sshd: gerrit-backup: 107.22.212.69 (gerrit.ovirt.org): 3 times jenkins: 107.22.215.130 (ec2-107-22-215-130.compute-1.amazonaws.com): 1 time mburns: 24.63.186.29 (c-24-63-186-29.hsd1.vt.comcast.net): 2 times oschreib: 66.187.237.10 (nat-pool-tlv-t1.redhat.com): 4 times 2.55.112.125 (2-55-112-125.orange.net.il): 1 time Received disconnect: 11: Bye Bye : 1449 Time(s) 11: disconnected by user : 6 Time(s) SFTP subsystem requests: 1 Time(s) **Unmatched Entries** Address 123.30.127.253 maps to static.vdc.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 3 time(s) reverse mapping checking getaddrinfo for 31-154-112-125.orange.net.il [2.55.112.125] failed - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s) reverse mapping checking getaddrinfo for ip223.hichina.com [223.4.48.33] failed - POSSIBLE BREAK-IN ATTEMPT! : 5 time(s) reverse mapping checking getaddrinfo for customer-201-96-126-213.uninet-ide.com.mx [201.96.126.213] failed - POSSIBLE BREAK-IN ATTEMPT! : 193 time(s) ---------------------- SSHD End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ ============================================================================== mburns => root -------------- /bin/cp - 2 Times. /bin/mv - 1 Times. /bin/rmdir - 1 Times. /usr/bin/createrepo - 1 Times. ============================================================================== oschreib => root ---------------- /bin/su - 2 Times. ---------------------- Sudo (secure-log) End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/xvda 36G 35G 697M 99% / /dev/xvda => 99% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################