Suspicious DNS entry? (was: Re: Cron <root at linode01> /root/bin/send_stats.sh)

Ewoud Kohl van Wijngaarden ewoud+ovirt at kohlvanwijngaarden.nl
Fri Nov 22 09:23:45 UTC 2013


On Wed, Nov 20, 2013 at 10:32:48AM +0100, Ewoud Kohl van Wijngaarden wrote:
> On Wed, Nov 20, 2013 at 10:04:57AM +0100, Dave Neary wrote:
> > On 11/20/2013 03:00 AM, Cron Daemon wrote:
> > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
> > 
> > ..
> > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
> > 
> > etc
> > 
> > Should we be worried about this error?
> 
> It would appear we did this ourselves. It's one of the IPs that's
> reserved for us at AlterWay.

We should ask AlterWay to change the reverse for 31.15.26.3 to
stats.ovirt.org instead of lists.ovirt.org to fix this. Sent to him as
well.



More information about the Infra mailing list