pid=8920 Tue Jul 26 08:39:53 AEST 2016 [Mon Jul 25 22:39:53] pmwebd(8920): pmwebd Started daemon on IPv4 TCP port 54321 Started daemon on IPv6 TCP port 54321 Verbosity level 1 Permissive mode enabled Using libmicrohttpd 0.9.46 PMAPI prefix /pmapi Remote context creation requests enabled Archive base directory: . Graphite API disabled Graphite API name encoding long Graphite API Cairo graphics rendering compiled-in HTTP compression compiled-in Periodic client statistics dumped roughly every 300s Using up to 0 auxiliary threads ipv6local=localhost6 Received PM_CONTEXT_LOCAL #1708148112 Received PM_CONTEXT_HOST #745476735 bad archive /dev/null response code 400 bad archive ../etc/passwd response code 400 bad archive /etc/passwd response code 400 bad archive ../../etc/shadow response code 400 command NOSUCHAPI response code 400 context NOSUCHCONTEXT response code 400 context 0 response code 400 non-pmwebapi response code 400 context #1708148112 local metric .* enumeration with pminfo #876 Received PM_CONTEXT_LOCAL #819384292 Received PM_CONTEXT_HOST #1635142041 bad archive /dev/null response code 400 bad archive ../etc/passwd response code 400 bad archive /etc/passwd response code 400 bad archive ../../etc/shadow response code 400 command NOSUCHAPI response code 400 context NOSUCHCONTEXT response code 400 context 0 response code 400 non-pmwebapi response code 400 context #819384292 local metric .* enumeration with pminfo #876 === pmwebd log === [Mon Jul 25 22:39:53] pmwebd(8920): pmwebd Started daemon on IPv4 TCP port 54321 Started daemon on IPv6 TCP port 54321 Verbosity level 1 Permissive mode enabled Using libmicrohttpd 0.9.46 PMAPI prefix /pmapi Remote context creation requests enabled Archive base directory: . Graphite API disabled Graphite API name encoding long Graphite API Cairo graphics rendering compiled-in HTTP compression compiled-in Periodic client statistics dumped roughly every 300s Using up to 0 auxiliary threads [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59476] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): context PM_CONTEXT_LOCAL (vm03.localdomain) (web1708148112=pm0) created, expires after 5s [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59478] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): context PM_CONTEXT_HOST localhost (vm03.localdomain) (web745476735=pm1) created, expires after 5s [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59492] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59492] suspicious archive path /dev/null [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59494] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59494] suspicious archive path ./../etc/passwd [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59496] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59496] suspicious archive path /etc/passwd [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59498] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59498] suspicious archive path ./../../etc/shadow [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59500] HTTP/1.1 GET /pmapi/NOSUCHAPI [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59500] url.size() 3 not 4, url[2]=NOSUCHAPI, new_contexts_p=1 [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59502] HTTP/1.1 GET /pmapi/NOSUCHCONTEXT/_metric [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59502] unrecognized web context #NOSUCHCONTEXT [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59504] HTTP/1.1 GET /pmapi/0/_metric [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59504] unrecognized web context #0 [Mon Jul 25 22:39:53] pmwebd(8920): [::1:59506] HTTP/1.1 GET /random_nonpmwebapi_url [Mon Jul 25 22:39:54] pmwebd(8920): [::1:59508] HTTP/1.1 GET /pmapi/1708148112/_metric [Mon Jul 25 22:39:59] pmwebd(8920): context (web745476735=pm1) expired. [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59510] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): context PM_CONTEXT_LOCAL (vm03.localdomain) (web819384292=pm1) created, expires after 5s [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59512] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): context PM_CONTEXT_HOST localhost6 (vm03.localdomain) (web1635142041=pm2) created, expires after 5s [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59520] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59520] suspicious archive path /dev/null [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59522] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59522] suspicious archive path ./../etc/passwd [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59524] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59524] suspicious archive path /etc/passwd [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59526] HTTP/1.1 GET /pmapi/context [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59526] suspicious archive path ./../../etc/shadow [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59528] HTTP/1.1 GET /pmapi/NOSUCHAPI [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59528] url.size() 3 not 4, url[2]=NOSUCHAPI, new_contexts_p=1 [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59530] HTTP/1.1 GET /pmapi/NOSUCHCONTEXT/_metric [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59530] unrecognized web context #NOSUCHCONTEXT [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59532] HTTP/1.1 GET /pmapi/0/_metric [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59532] unrecognized web context #0 [Mon Jul 25 22:39:59] pmwebd(8920): [::1:59534] HTTP/1.1 GET /random_nonpmwebapi_url [Mon Jul 25 22:40:00] pmwebd(8920): context (web1708148112=pm0) expired. [Mon Jul 25 22:40:00] pmwebd(8920): [::1:59536] HTTP/1.1 GET /pmapi/819384292/_metric [Mon Jul 25 22:40:14] pmwebd(8920): context (web819384292=pm1) expired. [Mon Jul 25 22:40:14] pmwebd(8920): context (web1635142041=pm2) expired.