################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Mon Feb 18 04:42:04 2019 Date Range Processed: yesterday ( 2019-Feb-17 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [ 37:37 ] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ Connection attempts using mod_proxy: 162.251.236.4 -> zapf.wiki:443: 1 Time(s) A total of 2 sites probed the server 46.29.167.33 66.240.205.34 Requests with error response codes 400 Bad Request null: 3 Time(s) /: 2 Time(s) mstshash=Administr: 2 Time(s) /a2billing/customer/templates/default/footer.tpl: 1 Time(s) /recordings/: 1 Time(s) /robots.txt: 1 Time(s) 7: 1 Time(s) zapf.wiki:443: 1 Time(s) 404 Not Found /robots.txt: 28 Time(s) /wp-login.php: 9 Time(s) /berlin/apple-touch-icon.png: 4 Time(s) /berlin/helfika/apple-touch-icon.png: 1 Time(s) /images/: 1 Time(s) /oihfoe09fposf.php: 1 Time(s) /sites/default/files/Empfehlungen_der_ZaPF ... 7CStellungnahme: 1 Time(s) /user/login?destination=comment%2Freply%2F20%23comment-form: 1 Time(s) /verein/satzung/%7CSatzung: 1 Time(s) 500 Internal Server Error /: 3 Time(s) /a2billing/customer/templates/default/footer.tpl: 1 Time(s) /recordings/: 1 Time(s) 502 Bad Gateway /: 26 Time(s) /robots.txt: 3 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (115.146.126.168): 144 Time(s) root (111-246-81-134.dynamic-ip.hinet.net): 6 Time(s) root (116.127.174.152): 6 Time(s) root (121.55.179.102): 6 Time(s) root (189.91.25.30): 6 Time(s) root (190.90.95.147): 6 Time(s) root (94.187.194.194): 6 Time(s) root (rrcs-71-42-92-61.sw.biz.rr.com): 6 Time(s) unknown (1.247.145.61): 6 Time(s) unknown (183.78.9.51.dyn.plus.net): 6 Time(s) unknown (221.140.31.40): 6 Time(s) unknown (port-152-adslby-pool46.infonet.by): 6 Time(s) root (fl1-122-130-191-220.tky.mesh.ad.jp): 3 Time(s) unknown (49.168.86.203): 3 Time(s) unknown (88.214.26.49): 2 Time(s) unknown (ip4d14d843.dynamic.kabel-deutschland.de): 2 Time(s) root (185.244.25.105): 1 Time(s) unknown (075-182-015-244.res.spectrum.com): 1 Time(s) unknown (113.172.124.65): 1 Time(s) unknown (209.99.6.51.dyn.plus.net): 1 Time(s) unknown (41.ip-51-254-205.eu): 1 Time(s) unknown (77.172.113.242): 1 Time(s) unknown (brn91-1-82-234-0-172.fbx.proxad.net): 1 Time(s) unknown (d53-64-45-238.nap.wideopenwest.com): 1 Time(s) unknown (enn63-1-78-245-164-146.fbx.proxad.net): 1 Time(s) Invalid Users: Unknown Account: 39 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 12 Miscellaneous warnings 7.419K Bytes accepted 7,597 7.419K Bytes sent via SMTP 7,597 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 1 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 1 Total 4xx Rejects 100.00% ======== ================================================== 510 Connections 59 Connections lost (inbound) 510 Disconnections 1 Removed from queue 1 Sent via SMTP 1 SMTP dialog errors ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: invalid : 3 Time(s) root : 7 Time(s) Failed logins from: 71.42.92.61 (rrcs-71-42-92-61.sw.biz.rr.com): 6 times 94.187.194.194: 6 times 111.246.81.134 (111-246-81-134.dynamic-ip.hinet.net): 6 times 115.146.126.168: 165 times 116.127.174.152: 6 times 121.55.179.102: 6 times 122.130.191.220 (FL1-122-130-191-220.tky.mesh.ad.jp): 3 times 185.244.25.105 (Dedi08.customers.kvsolutions.nl): 1 time 189.91.25.30 (189-91-25-30.dvl-cb.mastercabo.com.br): 6 times 190.90.95.147: 6 times Illegal users from: undef: 9 times 1.247.145.61: 6 times 49.168.86.203: 3 times 51.6.99.209 (209.99.6.51.dyn.plus.net): 1 time 51.9.78.183 (183.78.9.51.dyn.plus.net): 6 times 51.254.205.41 (41.ip-51-254-205.eu): 1 time 64.53.238.45 (d53-64-45-238.nap.wideopenwest.com): 1 time 75.182.15.244 (075-182-015-244.res.spectrum.com): 1 time 77.20.216.67 (ip4d14d843.dynamic.kabel-deutschland.de): 2 times 77.172.113.242 (static.kpn.net): 1 time 78.245.164.146 (enn63-1-78-245-164-146.fbx.proxad.net): 1 time 81.25.46.152 (port-152-adslby-pool46.infonet.by): 6 times 82.234.0.172 (brn91-1-82-234-0-172.fbx.proxad.net): 1 time 88.214.26.49 (hostby.fcloud.biz): 2 times 113.172.124.65 (static.vnpt.vn): 1 time 139.162.122.110 (scan-8.security.ipip.net): 1 time 221.140.31.40: 6 times ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/vzfs 400G 241G 160G 61% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################