I wrote this one, is the one that sends the stats to stats.ovirt.org for awstats to collect, maybe I should send the email somewhere else? ----- Original Message -----
From: "Eyal Edri" <eedri@redhat.com> To: "Karsten 'quaid' Wade" <kwade@redhat.com>, "David Caro" <dcaroest@redhat.com> Cc: "infra" <infra@ovirt.org> Sent: Sunday, December 15, 2013 9:52:35 PM Subject: Re: Cron <root@linode01> /root/bin/send_stats.sh
which stats is this script collecting?
there is the stats.ovirt.org server that has stats on gerrit,ovirt.org,lists and resources server. that's a VM sitting on rackspace infra IIRC.
Eyal.
----- Original Message -----
From: "Karsten 'quaid' Wade" <kwade@redhat.com> To: "infra" <infra@ovirt.org> Sent: Sunday, December 15, 2013 9:05:26 PM Subject: Fwd: Cron <root@linode01> /root/bin/send_stats.sh
I presume I'm not the only one getting this. I believe the script is one that I wrote to backup the stats to another machine.
Is this something we can safely turn off? Meaning, stats are now being gathered and backed-up in another way?
-------- Original Message -------- Subject: Cron <root@linode01> /root/bin/send_stats.sh Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST) From: root@linode01.ovirt.org (Cron Daemon) To: root@linode01.ovirt.org
Sending logs to a host far far away Processing logfile /var/log/httpd/access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/ Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/lists.ovirt.org/ Processing logfile /var/log/httpd/resources.ovirt.org-access_log-20131213.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on ssh:notty There were 10940 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to stats.ovirt.org:/var/log/awstats/resources.ovirt.org/ And they lived happily ever after
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra