################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Mon Jun 24 04:42:09 2019 Date Range Processed: yesterday ( 2019-Jun-23 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [ 91:92 ] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ A total of 1 sites probed the server 66.240.205.34 Requests with error response codes 400 Bad Request /: 1 Time(s) /.html: 1 Time(s) null: 1 Time(s) 403 Forbidden /resolutionen/sose17/gesellschaftlich_verantwortung/: 1 Time(s) 404 Not Found /robots.txt: 42 Time(s) /berlin/apple-touch-icon.png: 6 Time(s) /modules/elfinder/elfinder.html: 2 Time(s) /sites/all/libraries/plupload/examples/upload.php: 2 Time(s) /sites/all/modules/elfinder/elfinder.html: 2 Time(s) /sites/all/modules/plupload/examples/upload.php: 2 Time(s) /sites/zapfev.de/libraries/elfinder/connec ... p/connector.php: 2 Time(s) /sites/zapfev.de/libraries/elfinder/src/co ... p/connector.php: 2 Time(s) /wp-login.php: 2 Time(s) //test/wp-login.php: 1 Time(s) /download/reader_hb02.pdf: 1 Time(s) /resolutionen/sose17/gesellschaftlich_vera ... wantwortung.pdf: 1 Time(s) /sites/default/files/1995_SoSe_Hannover.pdf: 1 Time(s) /sites/default/files/2001_SoSe_Erlangen.pdf: 1 Time(s) /sites/default/files/2009_WiSe_M%C3%BCnchen.pdf: 1 Time(s) /sites/default/files/2011_SoSe_Dresden.pdf: 1 Time(s) /sites/default/files/2011_WiSe_Bonn.pdf: 1 Time(s) /zapf/geschaeftsordnung: 1 Time(s) /zapf/resolutionen/%7D%7Bwww.zapfev.de/zapf/resolutionen%7D: 1 Time(s) 500 Internal Server Error /: 4 Time(s) /.bitcoin/.env: 1 Time(s) /HNAP1/: 1 Time(s) /index.html: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (h2628407.stratoserver.net): 20 Time(s) unknown (c-174-58-247-12.hsd1.fl.comcast.net): 14 Time(s) unknown (139.59.39.174): 13 Time(s) unknown (186.215.132.150): 13 Time(s) unknown (77.28.102.7): 13 Time(s) unknown (kd027095146121.ppp-bb.dion.ne.jp): 13 Time(s) unknown (128.199.219.121): 12 Time(s) unknown (177.84.244.96): 12 Time(s) unknown (187.87.39.217.gd.net.br): 12 Time(s) unknown (62.ip-51-68-141.eu): 12 Time(s) unknown (82.165.64.156): 11 Time(s) unknown (ks3357677.kimsufi.com): 11 Time(s) unknown (115.78.8.83): 10 Time(s) unknown (104.248.167.51): 9 Time(s) unknown (119.29.52.66): 9 Time(s) unknown (126.105.148.146.bc.googleusercontent.com): 9 Time(s) unknown (138.68.226.175): 9 Time(s) unknown (176.116.193.3): 9 Time(s) unknown (193.112.164.113): 9 Time(s) unknown (220-130-221-140.hinet-ip.hinet.net): 9 Time(s) unknown (36.103.245.31): 9 Time(s) unknown (37.ip-51-68-123.eu): 9 Time(s) unknown (fast-internet-103-206-254-202.solnet.net.id): 9 Time(s) unknown (www.koan.co.nz): 9 Time(s) unknown (106.12.125.139): 8 Time(s) unknown (182.148.114.139): 8 Time(s) unknown (68.183.46.73): 8 Time(s) unknown (139.199.195.199): 7 Time(s) root (115.199.164.64): 6 Time(s) unknown (208.103.229.87): 6 Time(s) unknown (84.1.150.12): 5 Time(s) unknown (95.224.54.201): 5 Time(s) unknown (244.ip-54-36-182.eu): 3 Time(s) unknown (40.ip-176-31-172.eu): 2 Time(s) unknown (ip-89-176-148-96.net.upcbroadband.cz): 2 Time(s) backup (ks3357677.kimsufi.com): 1 Time(s) daemon (82.165.64.156): 1 Time(s) gnats (77.28.102.7): 1 Time(s) postgres (182.148.114.139): 1 Time(s) postgres (186.215.132.150): 1 Time(s) postgres (68.183.46.73): 1 Time(s) postgres (95.224.54.201): 1 Time(s) postgres (kd027095146121.ppp-bb.dion.ne.jp): 1 Time(s) root (104.248.167.51): 1 Time(s) root (106.12.125.139): 1 Time(s) root (115.78.8.83): 1 Time(s) root (119.29.52.66): 1 Time(s) root (126.105.148.146.bc.googleusercontent.com): 1 Time(s) root (139.59.39.174): 1 Time(s) root (176.116.193.3): 1 Time(s) root (182.148.114.139): 1 Time(s) root (208.103.229.87): 1 Time(s) root (218.92.0.147): 1 Time(s) root (218.92.0.158): 1 Time(s) root (218.92.0.160): 1 Time(s) root (218.92.0.171): 1 Time(s) root (68.183.46.73): 1 Time(s) root (82.165.64.156): 1 Time(s) root (95.224.54.201): 1 Time(s) root (host81-130-161-44.in-addr.btopenworld.com): 1 Time(s) sync (104.248.167.51): 1 Time(s) unknown (121.62.220.165): 1 Time(s) unknown (14.232.152.58): 1 Time(s) unknown (157.230.28.16): 1 Time(s) unknown (178.128.201.246): 1 Time(s) unknown (181.111.181.50): 1 Time(s) unknown (222.186.136.64): 1 Time(s) unknown (60.172.43.228): 1 Time(s) unknown (82.184.14.37.dynamic.jazztel.es): 1 Time(s) unknown (net-5-88-161-197.cust.vodafonedsl.it): 1 Time(s) Invalid Users: Unknown Account: 312 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 19 Miscellaneous warnings 11.085K Bytes accepted 11,351 11.085K Bytes sent via SMTP 11,351 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 74 Connections 58 Connections lost (inbound) 74 Disconnections 1 Removed from queue 1 Sent via SMTP 3 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: root : 1 Time(s) Failed logins from: 27.95.146.121 (KD027095146121.ppp-bb.dion.ne.jp): 1 time 37.187.22.227 (ks3357677.kimsufi.com): 1 time 68.183.46.73: 2 times 77.28.102.7: 1 time 81.130.161.44 (host81-130-161-44.in-addr.btopenworld.com): 1 time 81.169.214.78 (h2628407.stratoserver.net): 20 times 82.165.64.156: 2 times 95.224.54.201 (host201-54-static.224-95-b.business.telecomitalia.it): 2 times 104.248.167.51: 2 times 106.12.125.139: 1 time 115.78.8.83: 1 time 115.199.164.64: 6 times 119.29.52.66: 1 time 139.59.39.174: 1 time 146.148.105.126 (126.105.148.146.bc.googleusercontent.com): 1 time 176.116.193.3: 1 time 182.148.114.139: 2 times 186.215.132.150 (186.215.132.150.static.gvt.net.br): 1 time 208.103.229.87 (208-103-229-87.eastlink.ca): 1 time 218.92.0.147: 3 times 218.92.0.158: 1 time 218.92.0.160: 3 times 218.92.0.171: 2 times Illegal users from: undef: 257 times 5.88.161.197 (net-5-88-161-197.cust.vodafonedsl.it): 1 time 14.232.152.58 (static.vnpt.vn): 1 time 27.95.146.121 (KD027095146121.ppp-bb.dion.ne.jp): 13 times 36.103.245.31: 9 times 37.14.184.82 (82.184.14.37.dynamic.jazztel.es): 1 time 37.187.22.227 (ks3357677.kimsufi.com): 11 times 45.55.182.232 (www.koan.co.nz): 9 times 51.68.123.37 (37.ip-51-68-123.eu): 9 times 51.68.141.62 (62.ip-51-68-141.eu): 12 times 54.36.182.244 (244.ip-54-36-182.eu): 3 times 60.172.43.228: 1 time 68.183.46.73: 8 times 77.28.102.7: 13 times 82.165.64.156: 11 times 84.1.150.12 (84-1-150-12.deltakon.hu): 5 times 89.176.148.96 (ip-89-176-148-96.net.upcbroadband.cz): 2 times 95.224.54.201 (host201-54-static.224-95-b.business.telecomitalia.it): 5 times 103.206.254.202 (FAST-INTERNET-103-206-254-202.solnet.net.id): 9 times 104.248.167.51: 9 times 106.12.125.139: 8 times 115.78.8.83: 10 times 119.29.52.66: 9 times 121.62.220.165: 5 times 128.199.219.121: 12 times 138.68.226.175: 9 times 139.59.39.174: 13 times 139.199.195.199: 7 times 146.148.105.126 (126.105.148.146.bc.googleusercontent.com): 9 times 157.230.28.16: 1 time 174.58.247.12 (c-174-58-247-12.hsd1.fl.comcast.net): 14 times 176.31.172.40 (40.ip-176-31-172.eu): 2 times 176.116.193.3: 9 times 177.84.244.96 (96.244.84.177.4inet.net.br): 12 times 178.128.201.246: 1 time 181.111.181.50 (host50.181-111-181.telecom.net.ar): 1 time 182.148.114.139: 8 times 186.215.132.150 (186.215.132.150.static.gvt.net.br): 13 times 187.87.39.217 (187.87.39.217.gd.net.br): 12 times 193.112.164.113: 9 times 208.103.229.87 (208-103-229-87.eastlink.ca): 6 times 220.130.221.140 (220-130-221-140.HINET-IP.hinet.net): 9 times 222.186.136.64: 1 time ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/vzfs 400G 242G 159G 61% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################