Logwatch for linode01.ovirt.org (Linux)

logwatch at lists.ovirt.org logwatch at lists.ovirt.org
Sat Mar 3 08:45:32 UTC 2012


 ################### Logwatch 7.3.6 (05/19/07) #################### 
        Processing Initiated: Sat Mar  3 03:45:32 2012
        Date Range Processed: yesterday
                              ( 2012-Mar-02 )
                              Period is day.
      Detail Level of Output: 0
              Type of Output: unformatted
           Logfiles for Host: linode01.ovirt.org
  ################################################################## 
 
 --------------------- httpd Begin ------------------------ 

 A total of 1 sites probed the server 
    174.142.82.134
 
 A total of 1 possible successful probes were detected (the following URLs
 contain strings that match one or more of a listing of strings that
 indicate a possible exploit):
 
    //js.php?module=../../../../../../../../../../../../..//proc/self/environ%0000 HTTP Response 301 
 
 Requests with error response codes
    404 Not Found
       /.../images: 1 Time(s)
       /1.jar: 1 Time(s)
       /2ddfp.php?f=1: 1 Time(s)
       /2fdp.php?f=1: 1 Time(s)
       /Admin/Images/Panel/background.png: 1 Time(s)
       /Admin/style.css: 1 Time(s)
       /Talk:Features/VMPayload: 1 Time(s)
       /Talk:Workshop_November_2011_-_Day_Two: 3 Time(s)
       /about.html: 2 Time(s)
       /adfp2.php?f=1: 1 Time(s)
       /adm.php: 1 Time(s)
       /admin.php: 1 Time(s)
       /admin/css/img/bg_top7.gif: 1 Time(s)
       /admin/img/log_in.png: 1 Time(s)
       /adp2.php?f=1: 1 Time(s)
       /animals.txt: 1 Time(s)
       /apple-touch-icon-precomposed.png: 19 Time(s)
       /apple-touch-icon.png: 19 Time(s)
       /build-instructions.html: 1 Time(s)
       /community: 1 Time(s)
       /community-activity: 1 Time(s)
       /contribute.html: 1 Time(s)
       /crossdomain.xml: 2 Time(s)
       /crypt/rsa.php: 1 Time(s)
       /css/style.css: 1 Time(s)
       /docs/oVirt_Server_Suite_Installation_Guid ... stallation.html: 1 Time(s)
       /docs/oVirt_Server_Suite_Installation_Guide.pdf: 2 Time(s)
       /documentation.html: 5 Time(s)
       /download.html: 5 Time(s)
       /downloads: 1 Time(s)
       /favicon.gif: 4 Time(s)
       /favicon.png: 1 Time(s)
       /games/1fdp.php?f=1: 1 Time(s)
       /i/1.png: 1 Time(s)
       /images/logo.png: 1 Time(s)
       /images/logo1.jpg: 1 Time(s)
       /img/b-settings.png: 1 Time(s)
       /img/b-statistics.png: 1 Time(s)
       /img/logo.png: 4 Time(s)
       /img/main/administrator.png: 1 Time(s)
       /img/spylogo.png: 2 Time(s)
       /include/admin.lib.inc.php?site_path=http: ... dules/tmp.jpg??: 1 Time(s)
       /include/admin.lib.inc.php?site_path=test??: 1 Time(s)
       /index.html: 11 Time(s)
       /install-instructions.html: 1 Time(s)
       /js.php?module=../../../../../../../../../ ... lf/environ%0000: 3 Time(s)
       /js/jquery-1.3.2.min.js: 1 Time(s)
       /logo.gif: 1 Time(s)
       /logo.jpg: 1 Time(s)
       /mdac.php: 1 Time(s)
       /milestones.html: 1 Time(s)
       /news.html: 2 Time(s)
       /ovirtfosdem.jpg: 1 Time(s)
       /page/Appliance_Installation: 1 Time(s)
       /page/ArchDiagrams: 1 Time(s)
       /page/FAQ: 3 Time(s)
       /page/FlexSDK_RPM: 1 Time(s)
       /page/Installation: 1 Time(s)
       /page/Main_Page: 1 Time(s)
       /page/Node_Stateful: 1 Time(s)
       /page/Redesigned_Network_Configuration: 1 Time(s)
       /page/UX_Walkthrough: 1 Time(s)
       /page/User:Gcrazyg/: 1 Time(s)
       /page/Virtual_Machine_Pool: 1 Time(s)
       /panel.php: 1 Time(s)
       /pipermail//2ddfp.php?f=1: 1 Time(s)
       /pipermail//2fdp.php?f=1: 1 Time(s)
       /pipermail//adfp2.php?f=1: 1 Time(s)
       /pipermail//adp2.php?f=1: 1 Time(s)
       /pipermail/1.jar: 1 Time(s)
       /pipermail/Admin/Images/Panel/background.png: 1 Time(s)
       /pipermail/Admin/style.css: 1 Time(s)
       /pipermail/adm.php: 1 Time(s)
       /pipermail/admin.php: 1 Time(s)
       /pipermail/admin/css/img/bg_top7.gif: 1 Time(s)
       /pipermail/admin/img/log_in.png: 1 Time(s)
       /pipermail/crypt/rsa.php: 1 Time(s)
       /pipermail/css/style.css: 1 Time(s)
       /pipermail/engine-patches//2ddfp.php?f=1: 1 Time(s)
       /pipermail/engine-patches//2fdp.php?f=1: 1 Time(s)
       /pipermail/engine-patches//adfp2.php?f=1: 1 Time(s)
       /pipermail/engine-patches//adp2.php?f=1: 1 Time(s)
       /pipermail/engine-patches/1.jar: 1 Time(s)
       /pipermail/engine-patches/2011-November//2ddfp.php?f=1: 1 Time(s)
       /pipermail/engine-patches/2011-November//2fdp.php?f=1: 1 Time(s)
       /pipermail/engine-patches/2011-November//adfp2.php?f=1: 1 Time(s)
       /pipermail/engine-patches/2011-November//adp2.php?f=1: 1 Time(s)
       /pipermail/engine-patches/2011-November/1.jar: 1 Time(s)
       /pipermail/engine-patches/2011-November/Ad ... /background.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/Admin/style.css: 1 Time(s)
       /pipermail/engine-patches/2011-November/ad ... img/bg_top7.gif: 1 Time(s)
       /pipermail/engine-patches/2011-November/adm.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/admin.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/admin/img/log_in.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/crypt/rsa.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/css/style.css: 1 Time(s)
       /pipermail/engine-patches/2011-November/games/1fdp.php?f=1: 1 Time(s)
       /pipermail/engine-patches/2011-November/i/1.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/im ... ministrator.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/images/logo.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/images/logo1.jpg: 1 Time(s)
       /pipermail/engine-patches/2011-November/img/b-settings.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/img/b-statistics.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/img/logo.png: 4 Time(s)
       /pipermail/engine-patches/2011-November/img/spylogo.png: 2 Time(s)
       /pipermail/engine-patches/2011-November/index.php: 2 Time(s)
       /pipermail/engine-patches/2011-November/js ... ry-1.3.2.min.js: 1 Time(s)
       /pipermail/engine-patches/2011-November/logo.gif: 1 Time(s)
       /pipermail/engine-patches/2011-November/logo.jpg: 1 Time(s)
       /pipermail/engine-patches/2011-November/mdac.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/panel.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/sk ... min_av_row.html: 1 Time(s)
       /pipermail/engine-patches/2011-November/st ... images/logo.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/stat.php: 2 Time(s)
       /pipermail/engine-patches/2011-November/statistics.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/stats.php: 1 Time(s)
       /pipermail/engine-patches/2011-November/style.css: 1 Time(s)
       /pipermail/engine-patches/2011-November/style/logo.gif: 1 Time(s)
       /pipermail/engine-patches/2011-November/theme/failed.png: 1 Time(s)
       /pipermail/engine-patches/2011-November/theme/header.html: 2 Time(s)
       /pipermail/engine-patches/2011-November/theme/style.css: 1 Time(s)
       /pipermail/engine-patches/2011-November/theme/throbber.gif: 1 Time(s)
       /pipermail/engine-patches/2011-November/user/login/index.php: 1 Time(s)
       /pipermail/engine-patches/2011-november/: 1 Time(s)
       /pipermail/engine-patches/Admin/Images/Panel/background.png: 1 Time(s)
       /pipermail/engine-patches/Admin/style.css: 1 Time(s)
       /pipermail/engine-patches/adm.php: 1 Time(s)
       /pipermail/engine-patches/admin.php: 1 Time(s)
       /pipermail/engine-patches/admin/css/img/bg_top7.gif: 1 Time(s)
       /pipermail/engine-patches/admin/img/log_in.png: 1 Time(s)
       /pipermail/engine-patches/crypt/rsa.php: 1 Time(s)
       /pipermail/engine-patches/css/style.css: 1 Time(s)
       /pipermail/engine-patches/games/1fdp.php?f=1: 1 Time(s)
       /pipermail/engine-patches/i/1.png: 1 Time(s)
       /pipermail/engine-patches/images/logo.png: 1 Time(s)
       /pipermail/engine-patches/images/logo1.jpg: 1 Time(s)
       /pipermail/engine-patches/img/b-settings.png: 1 Time(s)
       /pipermail/engine-patches/img/b-statistics.png: 1 Time(s)
       /pipermail/engine-patches/img/logo.png: 4 Time(s)
       /pipermail/engine-patches/img/main/administrator.png: 1 Time(s)
       /pipermail/engine-patches/img/spylogo.png: 2 Time(s)
       /pipermail/engine-patches/index.php: 2 Time(s)
       /pipermail/engine-patches/js/jquery-1.3.2.min.js: 1 Time(s)
       /pipermail/engine-patches/logo.gif: 1 Time(s)
       /pipermail/engine-patches/logo.jpg: 1 Time(s)
       /pipermail/engine-patches/mdac.php: 1 Time(s)
       /pipermail/engine-patches/panel.php: 1 Time(s)
       /pipermail/engine-patches/skins/admin_av_row.html: 1 Time(s)
       /pipermail/engine-patches/stat.php: 2 Time(s)
       /pipermail/engine-patches/statistics.php: 1 Time(s)
       /pipermail/engine-patches/statistics/images/logo.png: 1 Time(s)
       /pipermail/engine-patches/stats.php: 1 Time(s)
       /pipermail/engine-patches/style.css: 1 Time(s)
       /pipermail/engine-patches/style/logo.gif: 1 Time(s)
       /pipermail/engine-patches/theme/failed.png: 1 Time(s)
       /pipermail/engine-patches/theme/header.html: 2 Time(s)
       /pipermail/engine-patches/theme/style.css: 1 Time(s)
       /pipermail/engine-patches/theme/throbber.gif: 1 Time(s)
       /pipermail/engine-patches/user/login/index.php: 1 Time(s)
       /pipermail/games/1fdp.php?f=1: 1 Time(s)
       /pipermail/gerrit: 1 Time(s)
       /pipermail/i/1.png: 1 Time(s)
       /pipermail/images/logo.png: 1 Time(s)
       /pipermail/images/logo1.jpg: 1 Time(s)
       /pipermail/img/b-settings.png: 1 Time(s)
       /pipermail/img/b-statistics.png: 1 Time(s)
       /pipermail/img/logo.png: 4 Time(s)
       /pipermail/img/main/administrator.png: 1 Time(s)
       /pipermail/img/spylogo.png: 2 Time(s)
       /pipermail/index.php: 2 Time(s)
       /pipermail/js/jquery-1.3.2.min.js: 1 Time(s)
       /pipermail/logo.gif: 1 Time(s)
       /pipermail/logo.jpg: 1 Time(s)
       /pipermail/mdac.php: 1 Time(s)
       /pipermail/panel.php: 1 Time(s)
       /pipermail/security: 1 Time(s)
       /pipermail/security-private: 1 Time(s)
       /pipermail/skins/admin_av_row.html: 1 Time(s)
       /pipermail/stat.php: 2 Time(s)
       /pipermail/statistics.php: 1 Time(s)
       /pipermail/statistics/images/logo.png: 1 Time(s)
       /pipermail/stats.php: 1 Time(s)
       /pipermail/style.css: 1 Time(s)
       /pipermail/style/logo.gif: 1 Time(s)
       /pipermail/theme/failed.png: 1 Time(s)
       /pipermail/theme/header.html: 2 Time(s)
       /pipermail/theme/style.css: 1 Time(s)
       /pipermail/theme/throbber.gif: 1 Time(s)
       /pipermail/user/login/index.php: 1 Time(s)
       /randomqb: 1 Time(s)
       /rawhide-build-instructions.html: 1 Time(s)
       /rawhide-install-instructions.html: 1 Time(s)
       /release-notes.html: 1 Time(s)
       /releases/nightly/fedora/16/ovirt-engine-3 ... fc16.x86_64.rpm: 1 Time(s)
       /releases/nightly/fedora/16/ovirt-engine-n ... fc16.x86_64.rpm: 1 Time(s)
       /releases/nightly/fedora/16/ovirt-engine-w ... fc16.x86_64.rpm: 1 Time(s)
       /releases/stable/binary/ovirt-engine-sdk-: 1 Time(s)
       /releases/stable/fedora/15/ovirt-engine.repo: 1 Time(s)
       /releases/stable/fedora/16/ovirt: 1 Time(s)
       /releases/stable/fedora/16/ovirt-engine: 1 Time(s)
       /releases/stable/fedora/16/ovirt-engine.re ... data/repomd.xml: 6 Time(s)
       /releases/stable/fedora/17/ovirt-engine.repo: 1 Time(s)
       /releases/stable/fedora/6/x86_64/repodata/repomd.xml: 5 Time(s)
       /releases/stable/ovirt-engine.repo/repodata/repomd.xml: 4 Time(s)
       /repos/ovirt/10/x86_64/repodata/repomd.xml: 24 Time(s)
       /repos/ovirt/15/i386/repodata/repomd.xml: 1 Time(s)
       /repos/ovirt/15/x86_64/repodata/repomd.xml: 1 Time(s)
       /robots.txt: 1 Time(s)
       /rss.png: 1 Time(s)
       /scmrepo.html: 1 Time(s)
       /screenshots.html: 3 Time(s)
       /screenshots/ViewVMPool.png: 5 Time(s)
       /sitemap.xml: 1 Time(s)
       /skins/admin_av_row.html: 1 Time(s)
       /stat.php: 2 Time(s)
       /statistics.php: 1 Time(s)
       /statistics/images/logo.png: 1 Time(s)
       /stats.php: 1 Time(s)
       /style.css: 1 Time(s)
       /style/logo.gif: 1 Time(s)
       /styles/default-debug.css: 1 Time(s)
       /styles/diagram4.png: 8 Time(s)
       /styles/favicon.ico: 2 Time(s)
       /styles/front-graphic.png: 1 Time(s)
       /theme/failed.png: 1 Time(s)
       /theme/header.html: 2 Time(s)
       /theme/style.css: 1 Time(s)
       /theme/throbber.gif: 1 Time(s)
       /user/login/: 1 Time(s)
       /w/COPYING: 1 Time(s)
       /w/index.php%3Ftitle%3DMeetings%26oldid%3D2388: 2 Time(s)
       /w/index.php?title=-&action=raw&ge ... onobook&270: 41 Time(s)
       /w/index.php?title=-&action=raw&ma ... 000&gen=css: 41 Time(s)
       /wiki//w/index.php?title=Special:RecentChanges&feed=atom: 1 Time(s)
       /wiki/CLI/: 1 Time(s)
       /wiki/Category:Foobar: 2 Time(s)
       /wiki/Features/ConnectionMonitoring: 2 Time(s)
       /wiki/File_talk:OVirt_history_and_reports-20111102.pdf: 1 Time(s)
       /wiki/Foobar: 2 Time(s)
       /wiki/Index.php: 1 Time(s)
       /wiki/Ovirt.org-Configuration: 1 Time(s)
       /wiki/Skins/common/commonPrint.css: 1 Time(s)
       /wiki/Talk:Features/RemoteDB: 2 Time(s)
       /wiki/Talk:Features/SharedRAWDisk: 2 Time(s)
       /wiki/Talk:Features/VMPayload: 1 Time(s)
       /wiki/Talk:Multiple_Storage_Domain_Design: 1 Time(s)
       /wiki/Talk:Multiple_Storage_Domain_Feature: 1 Time(s)
       /wiki/Talk:Opening_guests: 1 Time(s)
       /wiki/Talk:Project_Proposal_-_MOM: 1 Time(s)
       /wiki/Talk:Project_Proposal_-_Nomad: 1 Time(s)
       /wiki/Talk:Running_ovirtbot: 1 Time(s)
       /wiki/Talk:Setting_Management_Development_Environment: 1 Time(s)
       /wiki/Talk:Workshop_November_2011_-_Day_Two: 3 Time(s)
       /wiki/User:Ashoham: 1 Time(s)
       /wiki/User:Dyasny: 1 Time(s)
       /wiki/User:Mgoldboi: 1 Time(s)
       /wiki/User:Mkollaro: 7 Time(s)
       /wiki/User:Quaid/: 1 Time(s)
       /wiki/User:Sgrinberg: 1 Time(s)
       /wiki/User_talk:180.76.5.158: 1 Time(s)
       /wiki/User_talk:Mgoldboi: 2 Time(s)
       /wiki/Www.ovirt.org-Configurationindex.php: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805145005: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805150144: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805151514: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805151725: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805151835: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805152542: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805152706: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805153508: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805154152: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805154245: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805155532: 1 Time(s)
       /wiki/index.php?title=Special:Newimages&from=20110805160254: 1 Time(s)
       /wiki/index.php?title=Special:UserLogin&ty ... urnto=Main+Page: 4 Time(s)
       /wiki/index.php?title=Special:UserLogin&type=signup: 8 Time(s)
       /wiki/oVirtWiki:About: 2 Time(s)
       /wiki/oVirtWiki:Current_events: 3 Time(s)
       /wiki/oVirtWiki:General_disclaimer: 1 Time(s)
       /wiki/oVirtWiki:Privacy_policy: 1 Time(s)
       /wiki/wp-signup.php: 2 Time(s)
       /wp-content/themes/coraline-ovirt/images/wordpress.png: 2 Time(s)
       http://www.financeande.com/feed/feed.php: 2 Time(s)
       http://www.hardjob.net/proxyheader.php: 1 Time(s)
 
 ---------------------- httpd End ------------------------- 

 
 --------------------- pam_unix Begin ------------------------ 

 sudo:
    Authentication Failures:
       quaid(0) -> quaid: 1 Time(s)
 
 
 ---------------------- pam_unix End ------------------------- 

 
 --------------------- Postfix Begin ------------------------ 

        1   *Warning: Pre-queue content-filter connection overload 
 
    4.496M  Bytes accepted                         4,714,703
   92.640M  Bytes delivered                       97,140,368
 ========   ================================================
 
      787   Accepted                                  99.49%
        4   Rejected                                   0.51%
 --------   ------------------------------------------------
      791   Total                                    100.00%
 ========   ================================================
 
        4   Reject unknown user                      100.00%
 --------   ------------------------------------------------
        4   Total Rejects                            100.00%
 ========   ================================================
 
      422   Connections made      
      422   Disconnections        
      776   Removed from queue    
      203   Delivered             
    10933   Sent via SMTP         
        5   Forwarded             
       18   Deferred              
      222   Deferrals             
        2   Bounce (local)        
       24   Bounce (remote)       
       26   DSNs undeliverable    
 
      265   Connection failure (outbound) 
        1   Timeout (inbound)     
        4   Hostname verification errors 
      124   Enabled PIX workaround 
 
 
 
 ---------------------- Postfix End ------------------------- 

 
 --------------------- SSHD Begin ------------------------ 

 
 Users logging in through sshd:
    gerrit-backup:
       107.22.212.69 (gerrit.ovirt.org): 3 times
    quaid:
       50.0.66.28 (50-0-66-28.dsl.dynamic.fusionbroadband.com): 2 times
 
 
 Received disconnect:
    11: Bye Bye : 1679 Time(s)
    11: disconnected by user : 4 Time(s)
 
 **Unmatched Entries**
 Address 112.140.185.84 maps to server.ppcindo.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 1 time(s)
 Address 212.124.115.10 maps to 10.lastcallopps.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 632 time(s)
 
 ---------------------- SSHD End ------------------------- 

 
 --------------------- Sudo (secure-log) Begin ------------------------ 

 
 ==============================================================================
 
 quaid => root
 -------------
 /bin/bash - 1 Times.
 
 ---------------------- Sudo (secure-log) End ------------------------- 

 
 --------------------- Disk Space Begin ------------------------ 

 Filesystem            Size  Used Avail Use% Mounted on
 /dev/xvda             9.9G  8.2G  1.6G  85% /
 
 
 ---------------------- Disk Space End ------------------------- 

 
 ###################### Logwatch End ######################### 

 



More information about the Infra mailing list