This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --fDxuOKNChqG99Jw9gFcPVG8kxkS9HAVli Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I presume I'm not the only one getting this. I believe the script is one that I wrote to backup the stats to another machine. Is this something we can safely turn off? Meaning, stats are now being gathered and backed-up in another way? -------- Original Message -------- Subject: Cron <root@linode01> /root/bin/send_stats.sh Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST) From: root@linode01.ovirt.org (Cron Daemon) To: root@linode01.ovirt.org Sending logs to a host far far away Processing logfile /var/log/httpd/access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/ Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/lists.ovirt.org/ Processing logfile /var/log/httpd/resources.ovirt.org-access_log-20131213= =2Egz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/resources.ovirt.org/ And they lived happily ever after --fDxuOKNChqG99Jw9gFcPVG8kxkS9HAVli Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iD8DBQFSrf122ZIOBq0ODEERAsoWAJ9UmgyFUQGI9dxXCewEDe9qsN2U9ACfbHCL Eu5b4wIThM7g8VVKdr9G3/E= =HNtB -----END PGP SIGNATURE----- --fDxuOKNChqG99Jw9gFcPVG8kxkS9HAVli--