################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Sat Jan 12 04:42:04 2019 Date Range Processed: yesterday ( 2019-Jan-11 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [ 7:7 ] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ A total of 2 sites probed the server 104.248.242.46 185.10.68.145 Requests with error response codes 400 Bad Request mstshash=Administr: 3 Time(s) null: 2 Time(s) /: 1 Time(s) 403 Forbidden /resolutionen/sose17/gesellschaftlich_verantwortung/: 1 Time(s) 404 Not Found /wp-login.php: 9 Time(s) /favicon.ico: 3 Time(s) /oauth/errors?error=invalid_request&error_ ... t_id+parameter.: 2 Time(s) /robots.txt: 2 Time(s) /.git/HEAD: 1 Time(s) /home/verein: 1 Time(s) /home/zapf: 1 Time(s) /node: 1 Time(s) /sites/default/files/Empfehlungen_der_ZaPF ... 7CStellungnahme: 1 Time(s) 500 Internal Server Error /: 6 Time(s) 502 Bad Gateway /: 25 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (5.17.177.6): 6 Time(s) root (58.135.224.45): 6 Time(s) root (broadband-95-84-223-51.ip.moscow.rt.ru): 6 Time(s) unknown (050-090-059-107.res.spectrum.com): 6 Time(s) unknown (103.249.239.238): 6 Time(s) unknown (123.185.32.207): 6 Time(s) unknown (c-98-226-244-119.hsd1.il.comcast.net): 6 Time(s) unknown (63.142.101.182): 2 Time(s) root (118.179.216.188): 1 Time(s) root (121.133.216.57): 1 Time(s) root (14.47.110.94): 1 Time(s) root (193.169.252.228): 1 Time(s) root (oc-129-150-194-230.compute.oraclecloud.com): 1 Time(s) unknown (134.236.17.219): 1 Time(s) unknown (186.215.235.9): 1 Time(s) unknown (mm-124-163-121-178.gomel.dynamic.pppoe.byfly.by): 1 Time(s) Invalid Users: Unknown Account: 29 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 8.840K Bytes accepted 9,052 8.840K Bytes sent via SMTP 9,052 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 2 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 2 Total 4xx Rejects 100.00% ======== ================================================== 81 Connections 9 Connections lost (inbound) 81 Disconnections 1 Removed from queue 1 Sent via SMTP ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: invalid : 4 Time(s) root : 3 Time(s) Failed logins from: 5.17.177.6 (5x17x177x6.static-business.iz.ertelecom.ru): 6 times 14.47.110.94: 1 time 58.135.224.45: 6 times 95.84.223.51 (broadband-95-84-223-51.ip.moscow.rt.ru): 6 times 118.179.216.188: 1 time 121.133.216.57: 1 time 129.150.194.230 (oc-129-150-194-230.compute.oraclecloud.com): 1 time 193.169.252.228: 1 time Illegal users from: undef: 4 times 50.90.59.107 (050-090-059-107.res.spectrum.com): 6 times 63.142.101.182: 2 times 98.226.244.119 (c-98-226-244-119.hsd1.il.comcast.net): 6 times 103.249.239.238: 6 times 123.185.32.207 (207.32.185.123.broad.dl.ln.dynamic.163data.com.cn): 6 times 134.236.17.219: 1 time 139.162.122.110 (scan-8.security.ipip.net): 1 time 141.23.197.42 (client-141-23-197-42.wlan.tu-berlin.de): 1 time 178.121.163.124 (mm-124-163-121-178.gomel.dynamic.pppoe.byfly.by): 1 time 186.215.235.9 (186.215.235.9.static.gvt.net.br): 1 time ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/vzfs 400G 241G 160G 61% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################