04:42
################### Logwatch 7.4.0 (03/01/11) ####################
Processing Initiated: Tue Jun 4 04:42:07 2019
Date Range Processed: yesterday
( 2019-Jun-03 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host: h2361197.stratoserver.net
##################################################################
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ssh: [649:655]
---------------------- fail2ban-messages End -------------------------
--------------------- httpd Begin ------------------------
A total of 2 sites probed the server
183.129.160.229
5.188.210.101
Requests with error response codes
400 Bad Request
null: 5 Time(s)
/: 2 Time(s)
mstshash=Test: 2 Time(s)
/robots.txt: 1 Time(s)
http://5.188.210.101/echo.php: 1 Time(s)
403 Forbidden
/resolutionen/sose17/gesellschaftlich_verantwortung/: 1 Time(s)
404 Not Found
/robots.txt: 35 Time(s)
/berlin/apple-touch-icon.png: 4 Time(s)
/wp-admin/css/colors/blue/theme.php: 2 Time(s)
/home/verein: 1 Time(s)
/home/zapf: 1 Time(s)
/sites/default/files/Empfehlungen_der_ZaPF ... 7CStellungnahme: 1 Time(s)
499 (undefined)
/build/emojify.js/dist/css/basic/emojify.min.css: 1 Time(s)
500 Internal Server Error
/: 12 Time(s)
/.env: 1 Time(s)
/HNAP1/: 1 Time(s)
/login_sid.lua: 1 Time(s)
---------------------- httpd End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
unknown (c-67-184-229-155.hsd1.il.comcast.net): 64 Time(s)
unknown (ip174.ip-167-114-231.eu): 63 Time(s)
unknown (134.175.18.237): 53 Time(s)
unknown (59.41.39.141): 52 Time(s)
unknown (ns3045808.ip-5-39-88.eu): 52 Time(s)
unknown (103.123.0.92): 51 Time(s)
unknown (202.29.236.132): 51 Time(s)
unknown (94.203.254.193): 51 Time(s)
unknown (103.9.88.248): 50 Time(s)
unknown (180.182.47.132): 50 Time(s)
unknown (201.48.49.118): 50 Time(s)
unknown (88.247.37.25): 50 Time(s)
unknown (061092169178.static.ctinets.com): 49 Time(s)
unknown (190.180.161.143): 49 Time(s)
unknown (mintaka.e-dvwnet.com.br): 49 Time(s)
unknown (111.93.24.98): 48 Time(s)
unknown (202.29.60.195): 48 Time(s)
unknown (217.218.225.36): 48 Time(s)
unknown (67.ip-37-187-54.eu): 48 Time(s)
unknown (77.ip-167-114-153.net): 48 Time(s)
unknown (96.56.82.194): 48 Time(s)
unknown (216.156.135.71.ptr.us.xo.net): 46 Time(s)
unknown (45.55.142.207): 46 Time(s)
unknown (178.128.252.24): 45 Time(s)
unknown (206.189.184.81): 45 Time(s)
unknown (178.62.224.96): 44 Time(s)
unknown (186.ip-54-38-33.eu): 44 Time(s)
unknown (h-212-85-78-154.na.cust.bahnhof.se): 44 Time(s)
unknown (154.8.184.72): 43 Time(s)
unknown (50-250-231-41-static.hfc.comcastbusiness.net): 43 Time(s)
unknown (ns354173.ip-91-121-101.eu): 42 Time(s)
unknown (114.112.81.182): 40 Time(s)
unknown (96-35-69-1.dhcp.bycy.mi.charter.com): 38 Time(s)
unknown (121.15.2.178): 37 Time(s)
unknown (139.59.38.252): 37 Time(s)
unknown (140.143.134.86): 37 Time(s)
unknown (94.191.15.73): 37 Time(s)
unknown (103.74.192.166): 36 Time(s)
unknown (1.236.151.31): 33 Time(s)
unknown (14.142.57.66): 30 Time(s)
unknown (oc-141-144-120-236.compute.oraclecloud.com): 26 Time(s)
unknown (161.246.35.41): 21 Time(s)
unknown (123.206.44.110): 20 Time(s)
unknown (mbl-109-32-106.dsl.net.pk): 20 Time(s)
unknown (181.52.251.209): 19 Time(s)
unknown (59-125-247-227.hinet-ip.hinet.net): 18 Time(s)
unknown (66.171.254.106): 18 Time(s)
unknown (138.68.105.10): 15 Time(s)
unknown (211.162.122.81): 15 Time(s)
unknown (157.ip-51-77-195.eu): 12 Time(s)
unknown (224.ip-51-83-77.eu): 9 Time(s)
unknown (88.1-247-81.adsl-dyn.isp.belgacom.be): 9 Time(s)
unknown (ec2-52-83-176-167.cn-northwest-1.compute.amazonaws.com.cn): 7 Time(s)
unknown (c-73-65-133-36.hsd1.ut.comcast.net): 6 Time(s)
unknown (cloud.onediff.com): 6 Time(s)
unknown (212.64.59.94): 3 Time(s)
list (50-250-231-41-static.hfc.comcastbusiness.net): 2 Time(s)
sync (oc-141-144-120-236.compute.oraclecloud.com): 2 Time(s)
unknown (118.24.5.163): 2 Time(s)
unknown (186.206.129.160): 2 Time(s)
unknown (193.32.163.89): 2 Time(s)
backup (103.9.88.248): 1 Time(s)
backup (114.112.81.182): 1 Time(s)
backup (180.182.47.132): 1 Time(s)
backup (186.ip-54-38-33.eu): 1 Time(s)
backup (201.48.49.118): 1 Time(s)
backup (66.171.254.106): 1 Time(s)
daemon (1.236.151.31): 1 Time(s)
games (180.182.47.132): 1 Time(s)
games (190.180.161.143): 1 Time(s)
games (202.29.60.195): 1 Time(s)
games (211.162.122.81): 1 Time(s)
gnats (94.203.254.193): 1 Time(s)
irc (111.93.24.98): 1 Time(s)
irc (oc-141-144-120-236.compute.oraclecloud.com): 1 Time(s)
list (14.142.57.66): 1 Time(s)
list (94.191.15.73): 1 Time(s)
lp (061092169178.static.ctinets.com): 1 Time(s)
lp (94.191.15.73): 1 Time(s)
mail (103.74.192.166): 1 Time(s)
mail (mintaka.e-dvwnet.com.br): 1 Time(s)
mailman (1.236.151.31): 1 Time(s)
mailman (154.8.184.72): 1 Time(s)
man (111.93.24.98): 1 Time(s)
man (94.191.15.73): 1 Time(s)
mysql (1.236.151.31): 1 Time(s)
mysql (202.29.60.195): 1 Time(s)
mysql (ip174.ip-167-114-231.eu): 1 Time(s)
news (190.180.161.143): 1 Time(s)
nobody (111.93.24.98): 1 Time(s)
nobody (178.128.252.24): 1 Time(s)
nobody (216.156.135.71.ptr.us.xo.net): 1 Time(s)
nobody (50-250-231-41-static.hfc.comcastbusiness.net): 1 Time(s)
nobody (88.247.37.25): 1 Time(s)
postfix (061092169178.static.ctinets.com): 1 Time(s)
postfix (161.246.35.41): 1 Time(s)
postfix (178.128.252.24): 1 Time(s)
postfix (202.29.60.195): 1 Time(s)
postfix (45.55.142.207): 1 Time(s)
postfix (50-250-231-41-static.hfc.comcastbusiness.net): 1 Time(s)
postgres (061092169178.static.ctinets.com): 1 Time(s)
postgres (111.93.24.98): 1 Time(s)
postgres (139.59.38.252): 1 Time(s)
proxy (061092169178.static.ctinets.com): 1 Time(s)
proxy (186.ip-54-38-33.eu): 1 Time(s)
proxy (216.156.135.71.ptr.us.xo.net): 1 Time(s)
root (134.175.42.162): 1 Time(s)
root (218.92.0.135): 1 Time(s)
root (218.92.0.181): 1 Time(s)
smmsp (111.93.24.98): 1 Time(s)
smmsp (154.8.184.72): 1 Time(s)
smmsp (201.48.49.118): 1 Time(s)
smmsp (96-35-69-1.dhcp.bycy.mi.charter.com): 1 Time(s)
sshd (103.74.192.166): 1 Time(s)
sshd (138.68.105.10): 1 Time(s)
sshd (190.180.161.143): 1 Time(s)
sshd (201.48.49.118): 1 Time(s)
sshd (45.55.142.207): 1 Time(s)
sshd (mintaka.e-dvwnet.com.br): 1 Time(s)
sync (061092169178.static.ctinets.com): 1 Time(s)
sync (111.93.24.98): 1 Time(s)
sync (118.25.128.19): 1 Time(s)
sync (138.68.105.10): 1 Time(s)
sync (14.142.57.66): 1 Time(s)
sync (206.189.184.81): 1 Time(s)
sys (c-67-184-229-155.hsd1.il.comcast.net): 1 Time(s)
unknown (103.21.148.16): 1 Time(s)
unknown (110.77.148.62): 1 Time(s)
unknown (124.227.196.119): 1 Time(s)
unknown (134.249.183.151): 1 Time(s)
unknown (138.197.103.160): 1 Time(s)
unknown (157.230.103.135): 1 Time(s)
unknown (202.137.141.191): 1 Time(s)
unknown (24-107-79-219.dhcp.stls.mo.charter.com): 1 Time(s)
unknown (h237086.upc-h.chello.nl): 1 Time(s)
unknown (h79-138-37-5.cust.a3fiber.se): 1 Time(s)
unknown (ip-176-199-254-116.hsi06.unitymediagroup.de): 1 Time(s)
uucp (111.93.24.98): 1 Time(s)
www-data (103.9.88.248): 1 Time(s)
www-data (154.8.184.72): 1 Time(s)
www-data (206.189.184.81): 1 Time(s)
www-data (88.247.37.25): 1 Time(s)
www-data (96.56.82.194): 1 Time(s)
Invalid Users:
Unknown Account: 2080 Time(s)
---------------------- pam_unix End -------------------------
--------------------- Postfix Begin ------------------------
4 Miscellaneous warnings
16.528K Bytes accepted 16,925
16.528K Bytes sent via SMTP 16,925
======== ==================================================
1 Accepted 100.00%
-------- --------------------------------------------------
1 Total 100.00%
======== ==================================================
5 4xx Reject relay denied 100.00%
-------- --------------------------------------------------
5 Total 4xx Rejects 100.00%
======== ==================================================
101 Connections
71 Connections lost (inbound)
101 Disconnections
1 Removed from queue
1 Sent via SMTP
---------------------- Postfix End -------------------------
--------------------- sendmail-largeboxes (large mail spool files) Begin
------------------------
Large Mailbox threshold: 40MB (41943040 bytes)
Warning: Large mailbox: mailman.gz (1747199807)
Warning: Large mailbox: mailman (235703599967)
---------------------- sendmail-largeboxes (large mail spool files) End
-------------------------
--------------------- SSHD Begin ------------------------
Disconnecting after too many authentication failures for user:
invalid : 2 Time(s)
Failed logins from:
1.236.151.31: 3 times
14.142.57.66 (14.142.57.66.static-Delhi.vsnl.net.in): 2 times
45.55.142.207: 2 times
50.250.231.41 (50-250-231-41-static.hfc.comcastbusiness.net): 4 times
54.38.33.186 (186.ip-54-38-33.eu): 2 times
61.92.169.178 (061092169178.static.ctinets.com): 5 times
66.171.254.106: 1 time
67.184.229.155 (c-67-184-229-155.hsd1.il.comcast.net): 1 time
88.247.37.25 (88.247.37.25.static.ttnet.com.tr): 2 times
94.191.15.73: 3 times
94.203.254.193: 1 time
96.35.69.1 (96-35-69-1.dhcp.bycy.mi.charter.com): 1 time
96.56.82.194 (ool-603852c2.static.optonline.net): 1 time
103.9.88.248: 2 times
103.74.192.166: 2 times
111.93.24.98 (static-98.24.93.111-tataidc.co.in): 7 times
114.112.81.182: 1 time
118.25.128.19: 1 time
134.175.42.162: 1 time
138.68.105.10 (website.alzeinsoft.com): 2 times
139.59.38.252: 1 time
141.144.120.236 (oc-141-144-120-236.compute.oraclecloud.com): 3 times
154.8.184.72: 3 times
161.246.35.41: 1 time
167.114.231.174 (ip174.ip-167-114-231.eu): 1 time
177.93.109.141 (mintaka.e-dvwnet.com.br): 2 times
178.128.252.24: 2 times
180.182.47.132: 2 times
190.180.161.143: 3 times
201.48.49.118 (201-048-049-118.static.ctbctelecom.com.br): 3 times
202.29.60.195: 3 times
206.189.184.81: 2 times
211.162.122.81 (ssl.genew.cn): 1 time
216.156.135.71 (216.156.135.71.ptr.us.xo.net): 2 times
218.92.0.135: 2 times
218.92.0.181: 3 times
Illegal users from:
undef: 1433 times
1.236.151.31: 33 times
5.39.88.4 (ns3045808.ip-5-39-88.eu): 52 times
14.142.57.66 (14.142.57.66.static-Delhi.vsnl.net.in): 30 times
24.107.79.219 (24-107-79-219.dhcp.stls.mo.charter.com): 1 time
37.187.54.67 (67.ip-37-187-54.eu): 48 times
45.55.142.207: 46 times
50.250.231.41 (50-250-231-41-static.hfc.comcastbusiness.net): 43 times
51.77.195.157 (157.ip-51-77-195.eu): 12 times
51.83.77.224 (224.ip-51-83-77.eu): 9 times
52.83.176.167 (ec2-52-83-176-167.cn-northwest-1.compute.amazonaws.com.cn): 7 times
54.38.33.186 (186.ip-54-38-33.eu): 44 times
59.41.39.141: 52 times
59.125.247.227 (59-125-247-227.HINET-IP.hinet.net): 18 times
61.92.169.178 (061092169178.static.ctinets.com): 49 times
62.194.237.86 (h237086.upc-h.chello.nl): 1 time
66.171.254.106: 18 times
67.184.229.155 (c-67-184-229-155.hsd1.il.comcast.net): 64 times
73.65.133.36 (c-73-65-133-36.hsd1.ut.comcast.net): 6 times
79.138.37.5 (h79-138-37-5.cust.a3fiber.se): 1 time
81.247.1.88 (88.1-247-81.adsl-dyn.isp.belgacom.be): 9 times
88.247.37.25 (88.247.37.25.static.ttnet.com.tr): 50 times
91.121.101.159 (ns354173.ip-91-121-101.eu): 42 times
94.191.15.73: 37 times
94.203.254.193: 51 times
96.35.69.1 (96-35-69-1.dhcp.bycy.mi.charter.com): 38 times
96.56.82.194 (ool-603852c2.static.optonline.net): 48 times
103.9.88.248: 50 times
103.21.148.16: 1 time
103.74.192.166: 36 times
103.123.0.92: 51 times
110.77.148.62: 1 time
111.93.24.98 (static-98.24.93.111-tataidc.co.in): 48 times
114.112.81.182: 40 times
118.24.5.163: 2 times
121.15.2.178: 37 times
123.206.44.110: 20 times
124.109.32.106 (mbl-109-32-106.dsl.net.pk): 20 times
124.227.196.119: 1 time
134.175.18.237: 53 times
134.249.183.151 (134-249-183-151.broadband.kyivstar.net): 1 time
138.68.105.10 (website.alzeinsoft.com): 15 times
138.197.103.160: 1 time
139.59.38.252: 37 times
139.162.122.110 (scan-8.security.ipip.net): 1 time
140.143.134.86: 37 times
141.144.120.236 (oc-141-144-120-236.compute.oraclecloud.com): 26 times
154.8.184.72: 43 times
157.230.103.135: 1 time
161.246.35.41: 21 times
167.114.153.77 (77.ip-167-114-153.net): 48 times
167.114.231.174 (ip174.ip-167-114-231.eu): 63 times
168.1.80.212 (cloud.onediff.com): 6 times
176.199.254.116 (ip-176-199-254-116.hsi06.unitymediagroup.de): 1 time
177.93.109.141 (mintaka.e-dvwnet.com.br): 49 times
178.62.224.96: 44 times
178.128.252.24: 45 times
180.182.47.132: 50 times
181.52.251.209 (static-ip-181520251209.cable.net.co): 19 times
186.206.129.160 (bace81a0.virtua.com.br): 2 times
190.180.161.143: 49 times
193.32.163.89 (srv.eqaltech.su): 2 times
201.48.49.118 (201-048-049-118.static.ctbctelecom.com.br): 50 times
202.29.60.195: 48 times
202.29.236.132: 51 times
202.137.141.191: 1 time
206.189.184.81: 45 times
211.162.122.81 (ssl.genew.cn): 15 times
212.64.59.94: 3 times
212.85.78.154 (h-212-85-78-154.NA.cust.bahnhof.se): 44 times
216.156.135.71 (216.156.135.71.ptr.us.xo.net): 46 times
217.218.225.36: 48 times
**Unmatched Entries**
fatal: no matching cipher found: client aes128-cbc,blowfish-cbc,3des-cbc server
aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
[preauth] : 1 time(s)
---------------------- SSHD End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/vzfs 400G 241G 160G 61% /
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################