Logwatch for linode01.ovirt.org (Linux)

logwatch at lists.ovirt.org logwatch at lists.ovirt.org
Tue Jan 29 08:13:15 UTC 2013


 ################### Logwatch 7.3.6 (05/19/07) #################### 
        Processing Initiated: Tue Jan 29 03:13:15 2013
        Date Range Processed: yesterday
                              ( 2013-Jan-28 )
                              Period is day.
      Detail Level of Output: 0
              Type of Output: unformatted
           Logfiles for Host: linode01.ovirt.org
  ################################################################## 
 
 --------------------- httpd Begin ------------------------ 

 Requests with error response codes
    400 Bad Request
       HTTP/1.1: 2 Time(s)
    404 Not Found
       //admin/categories.php/login.php?cPath=&ac ... product_preview: 20 Time(s)
       //appserv/main.php?appserv_root=http://www ... ent/recky.jpg??: 1 Time(s)
       //appserv/main.php?appserv_root=test??: 1 Time(s)
       //wp-content/themes/welcome_inn/thumb.php? ... ov.tr/cilik.php: 1 Time(s)
       /admin/banner_manager.php/login.php: 5 Time(s)
       /admin/categories.php/login.php: 5 Time(s)
       /admin/file_manager.php/login.php: 5 Time(s)
       /apple-touch-icon-precomposed.png: 1 Time(s)
       /apple-touch-icon.png: 1 Time(s)
       /category/news/feed: 23 Time(s)
       /category/news/feed/: 99 Time(s)
       /community-activity: 1 Time(s)
       /favicon.ico: 582 Time(s)
       /get-ovirt/: 1 Time(s)
       /meetings/ovirt/2012/ovirt.2012-09-19: 1 Time(s)
       /meetings/ovirt/2012/www.ovirt.org/wiki/Second_Release: 1 Time(s)
       /news-and-events/workshop/: 1 Time(s)
       /pipermail/engine-devel/2013-December: 1 Time(s)
       /pipermail/infra//admin/categories.php/log ... product_preview: 2 Time(s)
       /pipermail/infra//appserv/main.php?appserv ... ent/recky.jpg??: 1 Time(s)
       /pipermail/infra//appserv/main.php?appserv_root=test??: 1 Time(s)
       /pipermail/infra/2012-February/admin/banne ... r.php/login.php: 3 Time(s)
       /pipermail/infra/2012-February/admin/categ ... s.php/login.php: 3 Time(s)
       /pipermail/infra/2012-February/admin/file_ ... r.php/login.php: 3 Time(s)
       /pipermail/infra/2012-March//admin/categor ... product_preview: 2 Time(s)
       /pipermail/infra/2012-November//appserv/ma ... ent/recky.jpg??: 1 Time(s)
       /pipermail/infra/2012-November//appserv/ma ... erv_root=test??: 1 Time(s)
       /pipermail/infra/2012-November//wp-content ... ov.tr/cilik.php: 1 Time(s)
       /pipermail/infra/2012-November/001313.html ... r.com%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/001330.html ... .net/indeks.php: 1 Time(s)
       /pipermail/infra/2012-November/001330.html ... n.com%2Fbad.php: 2 Time(s)
       /pipermail/infra/2012-November/001330.html ... om.br%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/001330.html ... s.com%2Fcok.php: 3 Time(s)
       /pipermail/infra/2012-November/001445.html ... b.com%2Fbad.php: 10 Time(s)
       /pipermail/infra/2012-November/001445.html ... ov.tr/cilik.php: 1 Time(s)
       /pipermail/infra/2012-November/001471.html ... n.com%2Fbad.php: 3 Time(s)
       /pipermail/infra/2012-November/001471.html ... s.com%2Fcok.php: 3 Time(s)
       /pipermail/infra/2012-November/001483.html ... n.com%2Fbad.php: 2 Time(s)
       /pipermail/infra/2012-November/001483.html ... s.com%2Fcok.php: 26 Time(s)
       /pipermail/infra/2012-November/001552.html ... r.php/login.php: 2 Time(s)
       /pipermail/infra/2012-November/001552.html ... s.php/login.php: 1 Time(s)
       /pipermail/infra/2012-November/001552.html ... soda.fm/bad.php: 1 Time(s)
       /pipermail/infra/2012-November/admin/banne ... r.php/login.php: 3 Time(s)
       /pipermail/infra/2012-November/admin/categ ... s.php/login.php: 3 Time(s)
       /pipermail/infra/2012-November/admin/file_ ... r.php/login.php: 3 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... .net/indeks.php: 1 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... b.com%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... c.com%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... k.com%2Fbad.php: 3 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... n.com%2Fbad.php: 3 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... om.br%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... r.com%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... s.com%2Fcok.php: 3 Time(s)
       /pipermail/infra/2012-November/wp-content/ ... soda.fm/bad.php: 1 Time(s)
       /pipermail/infra/2012-October//admin/categ ... product_preview: 10 Time(s)
       /pipermail/infra/2012-October//appserv/mai ... ent/recky.jpg??: 1 Time(s)
       /pipermail/infra/2012-October//appserv/mai ... erv_root=test??: 1 Time(s)
       /pipermail/infra/2012-October/001235.html/ ... product_preview: 10 Time(s)
       /pipermail/infra/2012-October/001243.html& ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-October/001243.html& ... uy%2Fstunxx.php: 1 Time(s)
       /pipermail/infra/2012-October/001244.html& ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-October/001265.html& ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-October/001265.html& ... uy%2Fstunxx.php: 1 Time(s)
       /pipermail/infra/2012-October/admin/banner ... r.php/login.php: 2 Time(s)
       /pipermail/infra/2012-October/admin/categories.php/login.php: 2 Time(s)
       /pipermail/infra/2012-October/admin/file_m ... r.php/login.php: 2 Time(s)
       /pipermail/infra/2012-October/wp-content/t ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-October/wp-content/t ... uy%2Fstunxx.php: 1 Time(s)
       /pipermail/infra/2012-September//admin/cat ... product_preview: 10 Time(s)
       /pipermail/infra/2012-September/001100.htm ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-September/001100.htm ... uy%2Fstunxx.php: 1 Time(s)
       /pipermail/infra/2012-September/001106.htm ... product_preview: 10 Time(s)
       /pipermail/infra/2012-September/wp-content ... k.com%2Fbad.php: 1 Time(s)
       /pipermail/infra/2012-September/wp-content ... o/wordpress.php: 1 Time(s)
       /pipermail/infra/2012-September/wp-content ... s.com%2Fser.php: 2 Time(s)
       /pipermail/infra/2012-September/wp-content ... uy%2Fstunxx.php: 1 Time(s)
       /pipermail/infra/admin/banner_manager.php/login.php: 3 Time(s)
       /pipermail/infra/admin/categories.php/login.php: 3 Time(s)
       /pipermail/infra/admin/file_manager.php/login.php: 3 Time(s)
       /pipermail/infra/wp-content/themes/r755/th ... o/wordpress.php: 1 Time(s)
       /pipermail/user/register: 2 Time(s)
       /project/resources/workshop-invitation/: 1 Time(s)
       /releases/3.0/rpm/Fedora/16/x86_64/: 1 Time(s)
       /releases/3.0/rpm/Fedora/17/x86_64/: 1 Time(s)
       /releases/3.1/rpm/Fedora/16/x86_64/: 1 Time(s)
       /releases/3.2/rpm/Fedora/17/x86_64/: 2 Time(s)
       /releases/3.2/tools/ovirt-live-0.9.iso: 1 Time(s)
       /releases/alpha/rpm/Fedora/17/repodata/repomd.xml: 3 Time(s)
       /releases/beta.old.20120808/: 1 Time(s)
       /releases/beta.old.20120808/src/: 2 Time(s)
       /releases/beta/deb/: 2 Time(s)
       /releases/beta/fedora/17/repodata/filelists.xml.gz: 24 Time(s)
       /releases/beta/fedora/17/repodata/other.xml.gz: 1 Time(s)
       /releases/beta/fedora/17/repodata/repomd.xml: 29 Time(s)
       /releases/beta/nightly/EL6/: 1 Time(s)
       /releases/beta/ovirt-engine.repo: 2 Time(s)
       /releases/beta/rpm/EL/6/?C=M;O=A: 1 Time(s)
       /releases/beta/rpm/EL/6/noarch/: 2 Time(s)
       /releases/beta/rpm/EL6/: 1 Time(s)
       /releases/beta/rpm/Fedora/17/: 1 Time(s)
       /releases/beta/rpm/Fedora/17/repodata/repomd.xml: 205 Time(s)
       /releases/beta/rpm/Fedora/17/x86_64/: 1 Time(s)
       /releases/beta/rpm/Fedora/18/noarch/old/?C=D;O=A: 1 Time(s)
       /releases/nightly/3.1.0-4/repodata/repomd.xml: 1 Time(s)
       /releases/nightly/binary/: 1 Time(s)
       /releases/nightly/binary/ovirt-node-image-2.2.3-1.1.fc16.iso: 1 Time(s)
       /releases/nightly/fedora/16/: 4 Time(s)
       /releases/nightly/fedora/16/ovirt-engine-c ... c16.noarch.rpm2: 1 Time(s)
       /releases/nightly/fedora/16/ovirt-engine-c ... fc16.noarch.rpm: 1 Time(s)
       /releases/nightly/fedora/16/ovirt-engine.repo: 2 Time(s)
       /releases/nightly/fedora/16/repodata/other.xml.gz: 1 Time(s)
       /releases/nightly/fedora/16/repodata/repomd.xml: 388 Time(s)
       /releases/nightly/fedora/18/: 1 Time(s)
       /releases/nightly/fedora/18/ovirt-engine.repo: 1 Time(s)
       /releases/nightly/rpm/Fedora/18/noarch/vds ... fc18.noarch.rpm: 1 Time(s)
       /releases/stable/binary: 1 Time(s)
       /releases/stable/binary/: 7 Time(s)
       /releases/stable/fedora: 1 Time(s)
       /releases/stable/fedora/16/: 2 Time(s)
       /releases/stable/fedora/16//repodata/repomd.xml: 1 Time(s)
       /releases/stable/fedora/16/ovirt-engine.repo: 2 Time(s)
       /releases/stable/fedora/16/repodata/: 1 Time(s)
       /releases/stable/fedora/16/repodata/primary.xml.gz: 24 Time(s)
       /releases/stable/fedora/16/repodata/repomd.xml: 202 Time(s)
       /releases/stable/ovirt-engine.repo: 3 Time(s)
       /releases/stable/rpm/EL/6/repodata/repomd.xml: 1 Time(s)
       /releases/stable/rpm/EL6: 1 Time(s)
       /releases/stable/rpm/EL6/: 2 Time(s)
       /releases/stable/rpm/EL6/6/repodata/repomd.xml: 83 Time(s)
       /releases/stable/rpm/EL6/6Server/repodata/repomd.xml: 16 Time(s)
       /releases/stable/rpm/EL6/6Workstation/repodata/repomd.xml: 4 Time(s)
       /releases/stable/rpm/EL6/i386: 1 Time(s)
       /releases/stable/rpm/Fedora/$releasever/: 1 Time(s)
       /releases/stable/rpm/Fedora/15/repodata/repomd.xml: 4 Time(s)
       /releases/stable/rpm/Fedora/16/repodata/: 1 Time(s)
       /releases/stable/rpm/Fedora/16/repodata/repomd.xml: 100 Time(s)
       /reports/: 1 Time(s)
       /robots.txt: 36 Time(s)
       /user/register: 3 Time(s)
       /wp-content/themes/Envisioned/timthumb.php ... k.com%2Fbad.php: 2 Time(s)
       /wp-content/themes/Envisioned/timthumb.php ... soda.fm/bad.php: 1 Time(s)
       /wp-content/themes/TheTravelTheme/includes ... c.com%2Fbad.php: 1 Time(s)
       /wp-content/themes/TheTravelTheme/includes ... n.com%2Fbad.php: 3 Time(s)
       /wp-content/themes/TheTravelTheme/includes ... s.com%2Fcok.php: 3 Time(s)
       /wp-content/themes/multidesign/scripts/tim ... r.com%2Fbad.php: 1 Time(s)
       /wp-content/themes/r755/thumb.php?src=http ... o/wordpress.php: 1 Time(s)
       /wp-content/themes/skeptical/thumb.php?src ... .net/indeks.php: 1 Time(s)
       /wp-content/themes/thedawn/lib/scripts/tim ... om.br%2Fbad.php: 1 Time(s)
       /wp-content/themes/versatile/timthumb.php? ... s.com%2Fser.php: 2 Time(s)
       /wp-content/themes/versatile/timthumb.php? ... uy%2Fstunxx.php: 1 Time(s)
       /wp-content/themes/welcome_inn/thumb.php?s ... b.com%2Fbad.php: 1 Time(s)
       /wp-content/themes/welcome_inn/thumb.php?s ... k.com%2Fbad.php: 1 Time(s)
       /wp-content/uploads/2011/09/ovirt.png: 3 Time(s)
       /wp-login.php: 85 Time(s)
       /wp-login.php?action=register: 2 Time(s)
       http://www.ovirt.org/azenv.php: 1 Time(s)
    416 Request Range Not Satisfiable
       /releases/nightly/rpm/Fedora/18/noarch/ovi ... fc18.noarch.rpm: 1 Time(s)
       /releases/nightly/rpm/Fedora/18/repodata/other.xml.gz: 9 Time(s)
       /releases/stable/rpm/Fedora/18/noarch/ovir ... fc17.noarch.rpm: 5 Time(s)
 
 ---------------------- httpd End ------------------------- 

 
 --------------------- pam_unix Begin ------------------------ 

 su-l:
    Sessions Opened:
       root -> rydekull: 2 Time(s)
       root -> ewoud: 1 Time(s)
       root -> root: 1 Time(s)
 
 sudo:
    Authentication Failures:
       rydekull(0) -> rydekull: 3 Time(s)
    Unknown Entries:
       auth could not identify password for [rydekull]: 3 Time(s)
       conversation failed: 3 Time(s)
 
 
 ---------------------- pam_unix End ------------------------- 

 
 --------------------- Postfix Begin ------------------------ 

      895   *Warning: Pre-queue content-filter connection overload 
 
   10.673M  Bytes accepted                        11,191,197
  181.816M  Bytes delivered                      190,647,636
 ========   ================================================
 
     1417   Accepted                                  99.93%
        1   Rejected                                   0.07%
 --------   ------------------------------------------------
     1418   Total                                    100.00%
 ========   ================================================
 
        1   Reject unknown user                      100.00%
 --------   ------------------------------------------------
        1   Total Rejects                            100.00%
 ========   ================================================
 
     1627   Connections made      
       28   Connections lost      
     1627   Disconnections        
     1387   Removed from queue    
      375   Delivered             
    27288   Sent via SMTP         
        5   Forwarded             
       52   Deferred              
      714   Deferrals             
        4   Bounce (local)        
        4   Bounce (remote)       
       12   Expired and returned to sender 
       20   DSNs undeliverable    
 
      872   Connection failure (outbound) 
        6   Timeout (inbound)     
      900   Hostname verification errors 
      343   Enabled PIX workaround 
 
 
 
 ---------------------- Postfix End ------------------------- 

 
 --------------------- Connections (secure-log) Begin ------------------------ 

 New Users:
    rydekull (512)
    ewoud (513)
 
 New Groups:
    rydekull (512)
    ewoud (513)
 
 
 ---------------------- Connections (secure-log) End ------------------------- 

 
 --------------------- SSHD Begin ------------------------ 

 
 Users logging in through sshd:
    gerrit-backup:
       107.22.212.69 (gerrit.ovirt.org): 3 times
    jenkins:
       107.22.215.130 (ec2-107-22-215-130.compute-1.amazonaws.com): 1 time
    mburns:
       24.63.186.29 (c-24-63-186-29.hsd1.vt.comcast.net): 2 times
    rydekull:
       194.237.142.3 (internet-gw-ext.ericsson.se): 1 time
       213.112.33.37 (c-252170d5.012-55-6c756c10.cust.bredbandsbolaget.se): 1 time
 
 
 Received disconnect:
    11: Bye Bye : 4151 Time(s)
    11: disconnected by user : 3 Time(s)
 
 SFTP subsystem requests: 1 Time(s)
 
 **Unmatched Entries**
 Address 92.48.114.94 maps to vpsxen3.gbservers.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! : 386 time(s)
 reverse mapping checking getaddrinfo for ip223.hichina.com [223.4.48.33] failed - POSSIBLE BREAK-IN ATTEMPT! : 25 time(s)
 
 ---------------------- SSHD End ------------------------- 

 
 --------------------- Sudo (secure-log) Begin ------------------------ 

 
 ==============================================================================
 
 mburns => root
 --------------
 /bin/su - 1 Times.
 
 ==============================================================================
 
 rydekull => root
 ----------------
 /bin/bash - 1 Times.
 /bin/ls - 2 Times.
 /bin/su - 1 Times.
 /usr/bin/id - 1 Times.
 list - 3 Times.
 
 
 **Unmatched Entries**
    pam_unix(sudo:auth): conversation failed: 3 Time(s)
    pam_unix(sudo:auth): auth could not identify password for [rydekull]: 3 Time(s) 
 ---------------------- Sudo (secure-log) End ------------------------- 

 
 --------------------- Disk Space Begin ------------------------ 

 Filesystem            Size  Used Avail Use% Mounted on
 /dev/xvda              48G   36G   12G  75% /
 /var/www/html/releases/3.1/tools/ovirt-node-iso-2.5.5-0.1.fc17.iso
                       173M  173M     0 100% /home/mburns/iso
 
 
 ---------------------- Disk Space End ------------------------- 

 
 ###################### Logwatch End ######################### 

 



More information about the Infra mailing list