I wrote this one, is the one that sends the stats to stats.ovirt.org for awstats to collect, maybe I should send the email somewhere else?
----- Original Message ----- > From: "Eyal Edri" <[email protected]> > To: "Karsten 'quaid' Wade" <[email protected]>, "David Caro" > <[email protected]> > Cc: "infra" <[email protected]> > Sent: Sunday, December 15, 2013 9:52:35 PM > Subject: Re: Cron <root@linode01> /root/bin/send_stats.sh > > which stats is this script collecting? > > there is the stats.ovirt.org server that has stats on gerrit,ovirt.org,lists > and resources server. > that's a VM sitting on rackspace infra IIRC. > > Eyal. > > ----- Original Message ----- > > From: "Karsten 'quaid' Wade" <[email protected]> > > To: "infra" <[email protected]> > > Sent: Sunday, December 15, 2013 9:05:26 PM > > Subject: Fwd: Cron <root@linode01> /root/bin/send_stats.sh > > > > I presume I'm not the only one getting this. I believe the script is one > > that I wrote to backup the stats to another machine. > > > > Is this something we can safely turn off? Meaning, stats are now being > > gathered and backed-up in another way? > > > > > > -------- Original Message -------- > > Subject: Cron <root@linode01> /root/bin/send_stats.sh > > Date: Sat, 14 Dec 2013 18:00:02 -0500 (EST) > > From: [email protected] (Cron Daemon) > > To: [email protected] > > > > Sending logs to a host far far away > > Processing logfile /var/log/httpd/access_log-20131213.gz > > Pseudo-terminal will not be allocated because stdin is not a terminal. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on > > ssh:notty > > There were 10940 failed login attempts since the last successful login. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > /var/log/httpd/access_log-20131213.gz sent to > > stats.ovirt.org:/var/log/awstats/linode01.ovirt.org/ > > Processing logfile /var/log/httpd/lists.ovirt.org-access_log-20131213.gz > > Pseudo-terminal will not be allocated because stdin is not a terminal. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on > > ssh:notty > > There were 10940 failed login attempts since the last successful login. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > /var/log/httpd/lists.ovirt.org-access_log-20131213.gz sent to > > stats.ovirt.org:/var/log/awstats/lists.ovirt.org/ > > Processing logfile > > /var/log/httpd/resources.ovirt.org-access_log-20131213.gz > > Pseudo-terminal will not be allocated because stdin is not a terminal. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > Last failed login: Sat Dec 14 22:52:02 UTC 2013 from 61.147.74.149 on > > ssh:notty > > There were 10940 failed login attempts since the last successful login. > > Address 31.15.26.3 maps to lists.ovirt.org, but this does not map back > > to the address - POSSIBLE BREAK-IN ATTEMPT! > > /var/log/httpd/resources.ovirt.org-access_log-20131213.gz sent to > > stats.ovirt.org:/var/log/awstats/resources.ovirt.org/ > > And they lived happily ever after > > > > > > > > > > _______________________________________________ > > Infra mailing list > > [email protected] > > http://lists.ovirt.org/mailman/listinfo/infra > > > _______________________________________________ Infra mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/infra
