################### Logwatch 7.4.0 (03/01/11) ####################
Processing Initiated: Wed Feb 20 04:42:04 2019
Date Range Processed: yesterday
( 2019-Feb-19 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host:
h2361197.stratoserver.net
##################################################################
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ssh: [ 8:8 ]
---------------------- fail2ban-messages End -------------------------
--------------------- httpd Begin ------------------------
A total of 2 sites probed the server
104.248.38.79
185.142.236.34
Requests with error response codes
400 Bad Request
null: 7 Time(s)
/robots.txt: 1 Time(s)
mstshash=Administr: 1 Time(s)
404 Not Found
/robots.txt: 31 Time(s)
/berlin/apple-touch-icon.png: 12 Time(s)
/wp-login.php: 9 Time(s)
/reader/2017_SoSe_Berlin_vorlaeufig.pdf: 2 Time(s)
/.well-known/apple-app-site-association: 1 Time(s)
/apple-app-site-association: 1 Time(s)
/berlin/orientierung/apple-touch-icon.png: 1 Time(s)
/node: 1 Time(s)
/reader/1989-wi-berlin.pdf: 1 Time(s)
/sites/default/files/2008_SoSe_Konstanz.pdf: 1 Time(s)
/user/login?destination=comment%2Freply%2F15%23comment-form: 1 Time(s)
408 Request Timeout
/: 1 Time(s)
500 Internal Server Error
/: 7 Time(s)
/.well-known/security.txt: 1 Time(s)
/favicon.ico: 1 Time(s)
/robots.txt: 1 Time(s)
/sitemap.xml: 1 Time(s)
502 Bad Gateway
/: 26 Time(s)
/admin/images/cal_date_over.gif: 1 Time(s)
/admin/login.php: 1 Time(s)
/fckeditor/editor/filemanager/connectors/p ... .php?Type=Media: 1 Time(s)
/robots.txt: 1 Time(s)
/templates/system/css/system.css: 1 Time(s)
---------------------- httpd End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
root (115.61.192.6): 6 Time(s)
root (176.207.113.183): 6 Time(s)
root (189.146.204.253): 6 Time(s)
root (37.204.50.148): 6 Time(s)
root (38.141.33.210): 6 Time(s)
unknown (211.117.121.54): 6 Time(s)
unknown (88.214.26.49): 2 Time(s)
root (llamentin-656-1-51-195.w81-248.abo.wanadoo.fr): 1 Time(s)
sshd (62.94.78.19): 1 Time(s)
unknown (103.235.152.119): 1 Time(s)
unknown (119.184.156.186): 1 Time(s)
unknown (123.21.65.77): 1 Time(s)
unknown (176-130-149-145.abo.bbox.fr): 1 Time(s)
unknown (181.196.24.6): 1 Time(s)
unknown (191.96.249.112): 1 Time(s)
unknown (62.94.223.254): 1 Time(s)
unknown (80.180.70.68): 1 Time(s)
unknown (89.252.7.58): 1 Time(s)
unknown (91.126.48.215): 1 Time(s)
unknown (
c-73-70-165-134.hsd1.ca.comcast.net): 1 Time(s)
unknown (
cable-62-117-12-62.cust.telecolumbus.net): 1 Time(s)
unknown (h83-209-129-169.cust.a3fiber.se): 1 Time(s)
unknown (lfbn-1-821-169.w86-246.abo.wanadoo.fr): 1 Time(s)
unknown (static-176-159-254-175.ftth.abo.bbox.fr): 1 Time(s)
Invalid Users:
Unknown Account: 31 Time(s)
---------------------- pam_unix End -------------------------
--------------------- Postfix Begin ------------------------
12 Miscellaneous warnings
9.272K Bytes accepted 9,495
9.272K Bytes sent via SMTP 9,495
======== ==================================================
1 Accepted 100.00%
-------- --------------------------------------------------
1 Total 100.00%
======== ==================================================
3 4xx Reject relay denied 100.00%
-------- --------------------------------------------------
3 Total 4xx Rejects 100.00%
======== ==================================================
1032 Connections
81 Connections lost (inbound)
1032 Disconnections
1 Removed from queue
1 Sent via SMTP
20 Timeouts (inbound)
1 SMTP protocol violations
---------------------- Postfix End -------------------------
--------------------- sendmail-largeboxes (large mail spool files) Begin
------------------------
Large Mailbox threshold: 40MB (41943040 bytes)
Warning: Large mailbox: mailman.gz (1747199807)
Warning: Large mailbox: mailman (235703599967)
---------------------- sendmail-largeboxes (large mail spool files) End
-------------------------
--------------------- SSHD Begin ------------------------
Disconnecting after too many authentication failures for user:
invalid : 1 Time(s)
root : 5 Time(s)
Failed logins from:
37.204.50.148 (broadband-37.204-50-148.ip.moscow.rt.ru): 6 times
38.141.33.210 (
38.141.33.210.static.airbridgebroadband.com): 6 times
62.94.78.19: 1 time
81.248.5.195 (llamentin-656-1-51-195.w81-248.abo.wanadoo.fr): 1 time
115.61.192.6 (hn.kd.ny.adsl): 6 times
176.207.113.183: 6 times
189.146.204.253 (dsl-189-146-204-253-dyn.prod-infinitum.com.mx): 6 times
Illegal users from:
undef: 7 times
62.94.223.254 (
remote.nubiqua.com): 1 time
62.117.12.62 (
cable-62-117-12-62.cust.telecolumbus.net): 1 time
73.70.165.134 (
c-73-70-165-134.hsd1.ca.comcast.net): 5 times
80.180.70.68: 1 time
83.209.129.169 (h83-209-129-169.cust.a3fiber.se): 1 time
86.246.55.169 (lfbn-1-821-169.w86-246.abo.wanadoo.fr): 1 time
88.214.26.49: 2 times
89.252.7.58 (89.252.7.58.freenet.com.ua): 1 time
91.126.48.215 (cli-5b7e30d7.wholesale.adamo.es): 1 time
103.235.152.119: 1 time
119.184.156.186: 5 times
123.21.65.77: 1 time
176.130.149.145 (176-130-149-145.abo.bbox.fr): 1 time
176.159.254.175 (static-176-159-254-175.ftth.abo.bbox.fr): 1 time
181.196.24.6 (6.24.196.181.static.anycast.cnt-grms.ec): 1 time
191.96.249.112: 1 time
211.117.121.54: 6 times
**Unmatched Entries**
fatal: no matching cipher found: client aes128-cbc,blowfish-cbc,3des-cbc server
aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
[preauth] : 6 time(s)
---------------------- SSHD End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/vzfs 400G 241G 160G 61% /
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################