Cron <root@linode01> /root/bin/send_stats.sh

Sending logs to a host far far away Processing logfile /var/log/httpd/access_log-20131118.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Wed Nov 20 01:48:09 UTC 2013 from perfektesleben.com on ssh:notty There were 627 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/access_log-20131118.gz sent to stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/ Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131118.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Wed Nov 20 01:48:09 UTC 2013 from perfektesleben.com on ssh:notty There were 627 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/lists.ovirt.org-access_log-20131118.gz sent to stats.ovirt.org:/var/log/awstats/lists.ovirt.org/ Processing logfile /var/log/httpd/resources.ovirt.org-access_log-20131118.gz Pseudo-terminal will not be allocated because stdin is not a terminal. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Last failed login: Wed Nov 20 01:48:09 UTC 2013 from perfektesleben.com on ssh:notty There were 627 failed login attempts since the last successful login. Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! /var/log/httpd/resources.ovirt.org-access_log-20131118.gz sent to stats.ovirt.org:/var/log/awstats/resources.ovirt.org/ And they lived happily ever after

Hi, On 11/20/2013 03:00 AM, Cron Daemon wrote:
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
..
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
etc Should we be worried about this error? Cheers, Dave. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13

On Wed, Nov 20, 2013 at 10:04:57AM +0100, Dave Neary wrote:
On 11/20/2013 03:00 AM, Cron Daemon wrote:
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
..
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
etc
Should we be worried about this error?
It would appear we did this ourselves. It's one of the IPs that's reserved for us at AlterWay.

On Wed, Nov 20, 2013 at 10:32:48AM +0100, Ewoud Kohl van Wijngaarden wrote:
On Wed, Nov 20, 2013 at 10:04:57AM +0100, Dave Neary wrote:
On 11/20/2013 03:00 AM, Cron Daemon wrote:
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
..
Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
etc
Should we be worried about this error?
It would appear we did this ourselves. It's one of the IPs that's reserved for us at AlterWay.
We should ask AlterWay to change the reverse for 31.15.26.3 to stats.ovirt.org instead of lists.ovirt.org to fix this. Sent to him as well.
participants (3)
-
Cron Daemon
-
Dave Neary
-
Ewoud Kohl van Wijngaarden