Logcheck - Log very strange in my server

germanos

Member
Oct 11, 2005
6
0
151
Belo Horizonte / Brazil
cPanel Access Level
Root Administrator
Twitter
I am receiving a notification of very strange Logwatch and command "dmesg -c" in my new server, I already researched and I didn't find what can be. Does anybody know what that is?


For information as example

11.11.111.1 - my shared IP
22.22.222.2 - my ns2 (DNS Slave)

Other IPS are not known and reverse is:
===========
201.18.251.133 PTR record: GigabitEthernet0-0-0.HGA-MG-ROTA-H02.telemar.net.br
201.18.251.129 PTR record: GigabitEthernet1-0-1.HGA-MG-ROTD-H01.telemar.net.br
-------------------
200.195.127.195 PTR record: gabriel.core.buynet.com.br
------------------
Code:
Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jul  3 13:06:33 nat sshd(pam_unix)[4366]: session opened for user root by (uid=0)
Jul  3 11:13:08 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:08 nat kernel:   Advised path = 22.22.222.2 -> 200.195.127.195, tos 00
Jul  3 11:13:10 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:10 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00
Jul  3 11:13:10 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:10 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00
Jul  3 11:13:11 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:11 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00
Jul  3 11:13:11 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:11 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00
Jul  3 11:13:11 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:11 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00
Jul  3 11:13:11 nat kernel: Redirect from 201.18.251.133 on eth0 about 201.18.251.129 ignored.
Jul  3 11:13:11 nat kernel:   Advised path = 11.11.111.1 -> 200.195.127.195, tos 00

:(
 
Last edited: