Re: Cron <root@linode01> /root/bin/send_stats.sh

From: "Karsten 'quaid' Wade" <kwade(a)redhat.com&gt; To: "infra" <infra(a)ovirt.org&gt; Sent: Sunday, December 15, 2013 9:05:26 PM Subject: Fwd: Cron <root@linode01> /root/bin/send_stats.sh I presume I'm not the only one getting this. I believe the script is one that I wrote to backup the stats to another machine. Is this something we can safely turn off? Meaning, stats are now being gathered and backed-up in another way? -------- Original Message -------- Subject: Cron <root@linode01> /root/bin/send_stats.sh Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST) From: root(a)linode01.ovirt.org (Cron Daemon) To: root(a)linode01.ovirt.org Sending logs to a host far far away Processing logfile /var/log/httpd/access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/ Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/lists.ovirt.org/ Processing logfile /var/log/httpd/resources.ovirt.org-access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/resources.ovirt.org/ And they lived happily ever after _______________________________________________ Infra mailing list Infra(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/infra