04:42
################### Logwatch 7.4.0 (03/01/11) ####################
Processing Initiated: Fri Nov 5 04:42:04 2021
Date Range Processed: yesterday
( 2021-Nov-04 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host: h2361197.stratoserver.net
##################################################################
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ssh: [105:106]
---------------------- fail2ban-messages End -------------------------
--------------------- httpd Begin ------------------------
Connection attempts using mod_proxy:
185.53.90.24 -> zapf.wiki:443: 1 Time(s)
A total of 8 sites probed the server
104.248.175.31
161.35.238.241
198.98.56.220
209.141.51.171
209.97.141.19
45.134.225.16
45.61.184.37
66.240.205.34
Requests with error response codes
400 Bad Request
null: 12 Time(s)
/: 4 Time(s)
/ab2g: 4 Time(s)
/ab2h: 4 Time(s)
/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh: 2 Time(s)
mstshash=Administr: 2 Time(s)
mstshash=Domain: 2 Time(s)
/.env: 1 Time(s)
/bag2: 1 Time(s)
/c/version.js: 1 Time(s)
/config/getuser?index=0: 1 Time(s)
/flu/403.html: 1 Time(s)
/gemini-iptv/get_prc.php: 1 Time(s)
/gemini-iptv/vod.json: 1 Time(s)
/qMRL: 1 Time(s)
/robots.txt: 1 Time(s)
/stalker_portal/c/version.js: 1 Time(s)
/stream/live.php: 1 Time(s)
/streaming/clients_live.php: 1 Time(s)
/system_api.php: 1 Time(s)
/w00tw00t.at.ISC.SANS.DFind:): 1 Time(s)
zapf.wiki:443: 1 Time(s)
404 Not Found
/: 1 Time(s)
500 Internal Server Error
/: 37 Time(s)
/.env: 4 Time(s)
/ecp/Current/exporttool/microsoft.exchange ... ool.application: 2 Time(s)
/robots.txt: 2 Time(s)
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: 2 Time(s)
/?XDEBUG_SESSION_START=phpstorm: 1 Time(s)
/Autodiscover/Autodiscover.xml: 1 Time(s)
/_ignition/execute-solution: 1 Time(s)
/actuator/health: 1 Time(s)
/api/jsonws/invoke: 1 Time(s)
/c/version.js: 1 Time(s)
/console/: 1 Time(s)
/flu/403.html: 1 Time(s)
/gemini-iptv/get_prc.php: 1 Time(s)
/gemini-iptv/vod.json: 1 Time(s)
/index.php?s=/Index/\x5Cthink\x5Capp/invok ... HelloThinkPHP21: 1 Time(s)
/mifs/.;/services/LogService: 1 Time(s)
/owa/auth/logon.aspx: 1 Time(s)
/owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f: 1 Time(s)
/owa/auth/x.js: 1 Time(s)
/stalker_portal/c/version.js: 1 Time(s)
/stream/live.php: 1 Time(s)
/streaming/clients_live.php: 1 Time(s)
/system_api.php: 1 Time(s)
/wp-content/plugins/wp-file-manager/readme.txt: 1 Time(s)
---------------------- httpd End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
unknown (c-73-43-86-177.hsd1.ga.comcast.net): 48 Time(s)
root (host35-78.ip.pdlsk.cifra1.ru): 42 Time(s)
root (138.117.180.70): 39 Time(s)
root (180.76.39.214): 39 Time(s)
root (110.35.173.103): 37 Time(s)
root (119.29.23.83): 37 Time(s)
root (122.176.55.24): 37 Time(s)
root (1.202.77.210): 36 Time(s)
root (103.25.196.54): 35 Time(s)
root (122.51.64.115): 35 Time(s)
root (129.211.165.188): 35 Time(s)
root (128.199.173.208): 34 Time(s)
root (139.255.66.218): 34 Time(s)
root (171.244.140.174): 33 Time(s)
root (181.13.51.177): 33 Time(s)
root (82.156.254.13): 33 Time(s)
root (139.155.10.97): 32 Time(s)
root (38.91.102.38): 32 Time(s)
unknown (81.68.169.2): 31 Time(s)
root (1.15.21.246): 30 Time(s)
root (1.15.250.72): 30 Time(s)
root (91.192.136.43): 29 Time(s)
root (167.71.210.244): 28 Time(s)
root (82.156.70.118): 28 Time(s)
root (v-182-163-90-49.ub-freebit.net): 27 Time(s)
root (106.55.37.132): 26 Time(s)
unknown (167.71.210.244): 22 Time(s)
root (165.232.186.196): 20 Time(s)
unknown (1.15.21.246): 20 Time(s)
unknown (181.13.51.177): 20 Time(s)
root (219.135.209.164): 19 Time(s)
unknown (49.233.210.232): 19 Time(s)
root (117.119.100.210): 18 Time(s)
root (64.225.49.153): 18 Time(s)
root (106.12.140.168): 17 Time(s)
root (218.104.225.140): 17 Time(s)
unknown (171.244.140.174): 17 Time(s)
root (42.192.137.134): 16 Time(s)
root (45.112.242.39): 16 Time(s)
unknown (128.199.173.208): 16 Time(s)
unknown (139.155.10.97): 16 Time(s)
unknown (139.255.66.218): 16 Time(s)
root (106.75.6.234): 15 Time(s)
root (120.92.79.133): 15 Time(s)
root (175.42.70.240): 15 Time(s)
root (218.234.149.18): 15 Time(s)
root (42.194.148.212): 15 Time(s)
unknown (103.25.196.54): 15 Time(s)
unknown (122.51.64.115): 15 Time(s)
unknown (1.202.77.210): 14 Time(s)
unknown (129.211.165.188): 14 Time(s)
unknown (175.42.70.240): 14 Time(s)
root (static.48.60.21.65.clients.your-server.de): 13 Time(s)
unknown (218.234.149.18): 13 Time(s)
unknown (82.156.70.118): 13 Time(s)
root (117.50.111.53): 12 Time(s)
unknown (1.15.250.72): 12 Time(s)
unknown (38.91.102.38): 12 Time(s)
root (117.50.111.55): 11 Time(s)
root (36-227-140-1.dynamic-ip.hinet.net): 11 Time(s)
unknown (106.55.37.132): 11 Time(s)
unknown (122.176.55.24): 11 Time(s)
unknown (138.117.180.70): 11 Time(s)
unknown (82.156.254.13): 11 Time(s)
unknown (120.92.79.133): 10 Time(s)
unknown (180.76.39.214): 10 Time(s)
root (117.50.129.6): 9 Time(s)
unknown (106.12.140.168): 9 Time(s)
unknown (110.35.173.103): 9 Time(s)
unknown (119.29.23.83): 9 Time(s)
unknown (218.104.225.140): 9 Time(s)
unknown (45.112.242.39): 9 Time(s)
root (106.75.72.135): 8 Time(s)
unknown (165.232.186.196): 8 Time(s)
unknown (91.192.136.43): 8 Time(s)
unknown (host35-78.ip.pdlsk.cifra1.ru): 8 Time(s)
unknown (v-182-163-90-49.ub-freebit.net): 8 Time(s)
unknown (117.119.100.210): 7 Time(s)
root (199.195.248.175): 6 Time(s)
unknown (64.225.49.153): 6 Time(s)
root (42.193.104.220): 5 Time(s)
root (81.68.169.2): 5 Time(s)
unknown (106.75.6.234): 5 Time(s)
unknown (141.98.10.60): 5 Time(s)
unknown (181.23.95.157): 5 Time(s)
unknown (2.56.59.39): 5 Time(s)
root (117.50.111.54): 4 Time(s)
root (171.90.122.95): 4 Time(s)
root (205.185.115.39): 4 Time(s)
root (49.233.210.232): 4 Time(s)
unknown (106.75.72.135): 4 Time(s)
unknown (117.50.111.54): 4 Time(s)
unknown (117.50.129.6): 4 Time(s)
unknown (141.98.10.63): 4 Time(s)
unknown (167.88.161.219): 4 Time(s)
unknown (219.135.209.164): 4 Time(s)
unknown (42.192.137.134): 4 Time(s)
unknown (42.194.148.212): 4 Time(s)
unknown (static.48.60.21.65.clients.your-server.de): 4 Time(s)
root (167.172.101.208): 3 Time(s)
root (181.23.95.157): 3 Time(s)
root (218.14.208.90): 3 Time(s)
unknown (117.50.111.53): 3 Time(s)
unknown (117.50.111.55): 3 Time(s)
unknown (141.98.10.109): 3 Time(s)
unknown (42.193.104.220): 3 Time(s)
unknown (45.155.204.39): 3 Time(s)
root (103.162.196.76): 2 Time(s)
root (119.29.77.63): 2 Time(s)
root (c-73-43-86-177.hsd1.ga.comcast.net): 2 Time(s)
unknown (183.104.206.223): 2 Time(s)
unknown (36-227-140-1.dynamic-ip.hinet.net): 2 Time(s)
unknown (66.110.150.182): 2 Time(s)
unknown (88.166.238.51): 2 Time(s)
unknown (95.236.228.236): 2 Time(s)
unknown (cli-5b7eceb7.ast.adamo.es): 2 Time(s)
unknown (vmi693013.contaboserver.net): 2 Time(s)
mysql (110.35.173.103): 1 Time(s)
mysql (122.176.55.24): 1 Time(s)
mysql (139.155.10.97): 1 Time(s)
postgres (1.15.21.246): 1 Time(s)
postgres (181.13.51.177): 1 Time(s)
root (152.136.107.21): 1 Time(s)
root (175.6.33.15): 1 Time(s)
root (vmi693013.contaboserver.net): 1 Time(s)
sys (91.192.136.43): 1 Time(s)
unknown (103.162.196.76): 1 Time(s)
unknown (107.189.13.172): 1 Time(s)
unknown (152.136.107.21): 1 Time(s)
unknown (167.172.101.208): 1 Time(s)
unknown (171.90.122.95): 1 Time(s)
unknown (177.53.68.44): 1 Time(s)
unknown (185.247.225.55): 1 Time(s)
unknown (185.31.175.213): 1 Time(s)
unknown (188.126.89.77): 1 Time(s)
unknown (200.73.129.37): 1 Time(s)
unknown (205.185.115.39): 1 Time(s)
unknown (212.35.101.210): 1 Time(s)
unknown (h-37-123-163-58.a785.priv.bahnhof.se): 1 Time(s)
unknown (smtp16.mib360realestate.com): 1 Time(s)
unknown (this-is-a-tor-exit-node-hviv118.hviv.nl): 1 Time(s)
uucp (122.176.55.24): 1 Time(s)
Invalid Users:
Unknown Account: 601 Time(s)
Bad User: --: 1 Time(s)
---------------------- pam_unix End -------------------------
--------------------- Postfix Begin ------------------------
1 Miscellaneous warnings
14.809K Bytes accepted 15,164
14.809K Bytes sent via SMTP 15,164
======== ==================================================
1 Accepted 100.00%
-------- --------------------------------------------------
1 Total 100.00%
======== ==================================================
9 4xx Reject relay denied 100.00%
-------- --------------------------------------------------
9 Total 4xx Rejects 100.00%
======== ==================================================
248 Connections
49 Connections lost (inbound)
248 Disconnections
1 Removed from queue
1 Sent via SMTP
62 Hostname verification errors (FCRDNS)
---------------------- Postfix End -------------------------
--------------------- sendmail-largeboxes (large mail spool files) Begin
------------------------
Large Mailbox threshold: 40MB (41943040 bytes)
Warning: Large mailbox: mailman.gz (1747199807)
Warning: Large mailbox: mailman (235703599967)
---------------------- sendmail-largeboxes (large mail spool files) End
-------------------------
--------------------- SSHD Begin ------------------------
Network Read Write Errors: 1
Failed logins from:
1.15.21.246: 31 times
1.15.250.72: 30 times
1.202.77.210 (210.77.202.1.static.bjtelecom.net): 36 times
5.189.168.79 (vmi693013.contaboserver.net): 1 time
36.227.140.1 (36-227-140-1.dynamic-ip.hinet.net): 11 times
38.91.102.38: 32 times
42.192.137.134: 16 times
42.193.104.220: 5 times
42.194.148.212: 15 times
45.112.242.39: 16 times
49.233.210.232: 4 times
64.225.49.153: 18 times
65.21.60.48 (static.48.60.21.65.clients.your-server.de): 13 times
73.43.86.177 (c-73-43-86-177.hsd1.ga.comcast.net): 2 times
81.68.169.2: 5 times
82.156.70.118: 28 times
82.156.254.13: 33 times
91.192.136.43: 30 times
103.25.196.54: 35 times
103.162.196.76: 2 times
106.12.140.168: 17 times
106.55.37.132: 26 times
106.75.6.234: 15 times
106.75.72.135: 8 times
110.35.173.103: 38 times
117.50.111.53: 12 times
117.50.111.54: 4 times
117.50.111.55: 11 times
117.50.129.6: 9 times
117.119.100.210: 18 times
119.29.23.83: 37 times
119.29.77.63: 2 times
120.92.79.133: 15 times
122.51.64.115: 35 times
122.176.55.24 (abts-north-static-024.55.176.122.airtelbroadband.in): 39 times
128.199.173.208: 34 times
129.211.165.188: 35 times
138.117.180.70: 39 times
139.155.10.97: 33 times
139.255.66.218 (ln-static-139-255-66-218.link.net.id): 34 times
152.136.107.21: 1 time
165.232.186.196 (gitlab.mdevsolutions.com-1621079504413-s-4vcpu-8gb-blr1-01): 20
times
167.71.210.244: 28 times
167.172.101.208: 3 times
171.90.122.95: 4 times
171.244.140.174: 33 times
175.6.33.15: 1 time
175.42.70.240: 15 times
180.76.39.214: 39 times
181.13.51.177 (host-181-13-51-177.mendoza.gov.ar): 34 times
181.23.95.157 (181-23-95-157.speedy.com.ar): 3 times
182.163.90.49 (v-182-163-90-49.ub-freebit.net): 27 times
199.195.248.175: 6 times
205.185.115.39 (mx.learnmorefun.org): 4 times
212.152.35.78 (host35-78.ip.pdlsk.cifra1.ru): 42 times
218.14.208.90: 3 times
218.104.225.140: 17 times
218.234.149.18: 15 times
219.135.209.164 (164.209.135.219.broad.gz.gd.dynamic.163data.com.cn): 19 times
Illegal users from:
2001:470:1:332::8: 1 time
undef: 410 times
1.15.21.246: 20 times
1.15.250.72: 12 times
1.202.77.210 (210.77.202.1.static.bjtelecom.net): 14 times
2.56.59.39 (branewsinfos.ddns.net): 5 times
5.189.168.79 (vmi693013.contaboserver.net): 2 times
36.227.140.1 (36-227-140-1.dynamic-ip.hinet.net): 2 times
37.123.163.58 (h-37-123-163-58.A785.priv.bahnhof.se): 1 time
38.91.102.38: 12 times
42.192.137.134: 4 times
42.193.104.220: 3 times
42.194.148.212: 4 times
45.112.242.39: 9 times
45.155.204.39: 3 times
49.233.210.232: 20 times
64.225.49.153: 6 times
65.21.60.48 (static.48.60.21.65.clients.your-server.de): 4 times
66.110.150.182: 2 times
73.43.86.177 (c-73-43-86-177.hsd1.ga.comcast.net): 48 times
81.68.169.2: 31 times
82.156.70.118: 13 times
82.156.254.13: 11 times
88.166.238.51 (vir91-8_migr-88-166-238-51.fbx.proxad.net): 2 times
91.126.206.183 (cli-5b7eceb7.ast.adamo.es): 2 times
91.192.136.43: 8 times
95.236.228.236: 2 times
103.25.196.54: 15 times
103.162.196.76: 1 time
106.12.140.168: 9 times
106.55.37.132: 11 times
106.75.6.234: 5 times
106.75.72.135: 4 times
107.189.13.172 (LuxembourgTor51.lu): 1 time
110.35.173.103: 9 times
117.50.111.53: 3 times
117.50.111.54: 4 times
117.50.111.55: 3 times
117.50.129.6: 4 times
117.119.100.210: 7 times
119.29.23.83: 9 times
120.92.79.133: 10 times
122.51.64.115: 15 times
122.176.55.24 (abts-north-static-024.55.176.122.airtelbroadband.in): 11 times
128.199.173.208: 16 times
129.211.165.188: 14 times
138.117.180.70: 11 times
139.155.10.97: 16 times
139.255.66.218 (ln-static-139-255-66-218.link.net.id): 16 times
141.98.10.60: 5 times
141.98.10.63: 4 times
141.98.10.109: 3 times
152.136.107.21: 1 time
165.232.186.196 (gitlab.mdevsolutions.com-1621079504413-s-4vcpu-8gb-blr1-01): 8 times
167.71.210.244: 22 times
167.88.161.219 (smtp21.gftvrsr.xyz): 4 times
167.172.101.208: 1 time
171.90.122.95: 1 time
171.244.140.174: 17 times
175.42.70.240: 14 times
177.53.68.44: 1 time
178.73.215.171 (178-73-215-171-static.glesys.net): 1 time
180.76.39.214: 10 times
181.13.51.177 (host-181-13-51-177.mendoza.gov.ar): 20 times
181.23.95.157 (181-23-95-157.speedy.com.ar): 5 times
182.163.90.49 (v-182-163-90-49.ub-freebit.net): 8 times
183.104.206.223: 2 times
185.31.175.213: 1 time
185.247.225.55: 1 time
188.126.89.77: 1 time
192.42.116.18 (this-is-a-tor-exit-node-hviv118.hviv.nl): 1 time
200.73.129.37 (37.129.73.200.cab.prima.net.ar): 1 time
205.185.115.39 (mx.learnmorefun.org): 1 time
209.141.35.48 (smtp16.mib360realestate.com): 1 time
212.35.101.210 (mail.smc-net.be): 1 time
212.152.35.78 (host35-78.ip.pdlsk.cifra1.ru): 8 times
218.104.225.140: 9 times
218.234.149.18: 13 times
219.135.209.164 (164.209.135.219.broad.gz.gd.dynamic.163data.com.cn): 4 times
**Unmatched Entries**
Protocol major versions differ for 125.64.94.145: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
vs. SSH-1.5-Nmap-SSH1-Hostkey : 1 time(s)
---------------------- SSHD End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/ploop33257p1 394G 242G 132G 65% /
none 4.0G 0 4.0G 0% /dev
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################
1446
days inactive
1446
days old
0 comments
1 participants
participants (1)
-
root＠zapf.in