04:42
################### Logwatch 7.4.0 (03/01/11) ####################
Processing Initiated: Sun Jul 11 04:42:05 2021
Date Range Processed: yesterday
( 2021-Jul-10 )
Period is day.
Detail Level of Output: 0
Type of Output/Format: mail / text
Logfiles for Host: h2361197.stratoserver.net
##################################################################
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ssh: [280:279]
---------------------- fail2ban-messages End -------------------------
--------------------- httpd Begin ------------------------
Connection attempts using mod_proxy:
158.51.126.242 -> httpbin.org:443: 3 Time(s)
A total of 4 sites probed the server
18.221.152.102
222.186.19.235
66.240.205.34
82.102.25.148
Requests with error response codes
400 Bad Request
/: 33 Time(s)
httpbin.org:443: 3 Time(s)
null: 3 Time(s)
http://fuwu.sogou.com/404/index.html: 2 Time(s)
/_profiler/phpinfo: 1 Time(s)
/robots.txt: 1 Time(s)
/w00tw00t.at.ISC.SANS.DFind:): 1 Time(s)
7: 1 Time(s)
\xDD\xCB\x9A\x9E\x82\xDE`t\x1BO\x8Ey\xA0\x ... (\xC0#\xC0'\xC0: 1 Time(s)
403 Forbidden
/resolutionen/sose17/gesellschaftlich_verantwortung/: 1 Time(s)
404 Not Found
/robots.txt: 31 Time(s)
/datenschutz: 1 Time(s)
/feed/: 1 Time(s)
/home/verein: 1 Time(s)
/home/zapf: 1 Time(s)
/neuigkeiten/einladung-zapf-wise2011: 1 Time(s)
/protokolle/Ergebnisprotokoll_MV_09.06.2017.pdf: 1 Time(s)
/reader/2016_SoSe_Konstanz_kurz.pdf%7CReader: 1 Time(s)
/resolutionen/wise15/Transparenz_in_der_: 1 Time(s)
/sites/default/files/2009_WiSe_M%C3%BCnchen.pdf: 1 Time(s)
/sites/default/files/Empfehlungen_der_ZaPF ... 7CStellungnahme: 1 Time(s)
/wp-admin/: 1 Time(s)
/wp-content/plugins/wp-file-manager/lib/ph ... tor.minimal.php: 1 Time(s)
/wp-json/wp/v2/users: 1 Time(s)
500 Internal Server Error
/: 30 Time(s)
/.env: 4 Time(s)
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: 2 Time(s)
/.git/HEAD: 1 Time(s)
//login_sid.lua: 1 Time(s)
/?XDEBUG_SESSION_START=phpstorm: 1 Time(s)
/Autodiscover/Autodiscover.xml: 1 Time(s)
/_ignition/execute-solution: 1 Time(s)
/actuator/health: 1 Time(s)
/api/jsonws/invoke: 1 Time(s)
/console/: 1 Time(s)
/data/nextcloud.log: 1 Time(s)
/data/owncloud.log: 1 Time(s)
/ecp/Current/exporttool/microsoft.exchange ... ool.application: 1 Time(s)
/favicon.ico: 1 Time(s)
/index.php?s=/Index/\x5Cthink\x5Capp/invok ... HelloThinkPHP21: 1 Time(s)
/laravel/.env: 1 Time(s)
/mifs/.;/services/LogService: 1 Time(s)
/nextcloud/data/nextcloud.log: 1 Time(s)
/owa/: 1 Time(s)
/owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f: 1 Time(s)
/owncloud/data/nextcloud.log: 1 Time(s)
/owncloud/data/owncloud.log: 1 Time(s)
/robots.txt: 1 Time(s)
/server-info: 1 Time(s)
/server-status: 1 Time(s)
/wp-content/plugins/wp-file-manager/readme.txt: 1 Time(s)
---------------------- httpd End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
root (104.225.251.83): 70 Time(s)
root (119.41.192.110): 70 Time(s)
root (138-94-199-19.infomaisnet.net.br): 70 Time(s)
root (200.237.128.225): 70 Time(s)
root (41.76.175.89): 70 Time(s)
root (58.17.200.197): 70 Time(s)
root (66.98.45.242): 70 Time(s)
root (119.29.197.210): 69 Time(s)
root (218.14.208.90): 68 Time(s)
root (49.232.12.131): 66 Time(s)
root (106.75.255.157): 62 Time(s)
root (104.248.145.196): 61 Time(s)
root (49.235.68.79): 61 Time(s)
root (81.68.166.215): 61 Time(s)
root (158.101.12.235): 60 Time(s)
root (81.70.96.157): 60 Time(s)
root (42.193.111.181): 52 Time(s)
root (124.156.103.155): 50 Time(s)
root (139.199.4.191): 50 Time(s)
root (142.93.79.192): 50 Time(s)
root (178.128.159.1): 50 Time(s)
root (45.232.73.84): 50 Time(s)
root (75.100.64.34.bc.googleusercontent.com): 50 Time(s)
root (kzn18.internetdsl.tpnet.pl): 50 Time(s)
root (121.5.125.9): 49 Time(s)
root (27.128.173.81): 49 Time(s)
root (pm-109-217.tm.net.my): 49 Time(s)
root (119.45.231.207): 46 Time(s)
root (132.232.112.96): 46 Time(s)
root (45.195.12.43): 44 Time(s)
root (121.4.74.101): 43 Time(s)
root (69.176.89.58): 43 Time(s)
root (81.69.196.130): 43 Time(s)
root (116.228.233.91): 41 Time(s)
root (106.12.80.223): 40 Time(s)
root (106.75.141.160): 40 Time(s)
root (121.141.70.72): 40 Time(s)
root (175.24.111.172): 40 Time(s)
root (119.29.137.90): 39 Time(s)
root (167.172.230.14): 37 Time(s)
root (101.68.78.194): 36 Time(s)
root (106.13.93.221): 35 Time(s)
root (211.143.255.70): 35 Time(s)
root (45.112.242.24): 33 Time(s)
root (101.32.243.13): 32 Time(s)
root (106.54.236.226): 30 Time(s)
root (119.45.226.98): 30 Time(s)
root (1.15.156.81): 29 Time(s)
root (167.71.77.9): 28 Time(s)
root (1.15.71.226): 26 Time(s)
root (106.13.50.219): 25 Time(s)
root (101.32.203.102): 24 Time(s)
unknown (static-css-csq-199-40.business.bouyguestelecom.com): 24 Time(s)
root (123.207.82.31): 22 Time(s)
unknown (047-050-246-114.biz.spectrum.com): 22 Time(s)
unknown (138.68.136.210): 22 Time(s)
unknown (189.4.128.122): 22 Time(s)
unknown (202.148.28.83): 22 Time(s)
unknown (45.146.166.238): 22 Time(s)
unknown (144.34.130.253.16clouds.com): 21 Time(s)
unknown (194.152.214.252): 21 Time(s)
unknown (119.91.108.17): 20 Time(s)
unknown (150.158.182.49): 20 Time(s)
unknown (178.176.250.18): 20 Time(s)
unknown (118.24.51.199): 19 Time(s)
unknown (mail.rtxbank.com): 19 Time(s)
root (116.246.20.2): 18 Time(s)
root (117.20.40.75): 18 Time(s)
unknown (139.59.90.147): 18 Time(s)
unknown (178.62.119.91): 18 Time(s)
root (106.13.139.79): 17 Time(s)
unknown (138.197.213.192): 17 Time(s)
unknown (net-2-45-191-223.cust.vodafonedsl.it): 17 Time(s)
unknown (167.71.130.205): 16 Time(s)
unknown (60.167.239.99): 16 Time(s)
unknown (81.70.205.210): 16 Time(s)
unknown (81.70.36.8): 16 Time(s)
root (119.29.180.74): 15 Time(s)
root (81.68.155.143): 15 Time(s)
unknown (142.93.243.95): 15 Time(s)
unknown (165.227.129.184): 15 Time(s)
unknown (175.24.64.193): 15 Time(s)
unknown (183.224.38.56): 15 Time(s)
unknown (ip-198-12-248-100.ip.secureserver.net): 15 Time(s)
unknown (zammand4.voipe.cc): 15 Time(s)
unknown (101.227.5.120): 14 Time(s)
unknown (106.13.52.192): 14 Time(s)
unknown (42.192.92.33): 14 Time(s)
unknown (141.98.10.203): 12 Time(s)
unknown (host40.190-230-20.telecom.net.ar): 12 Time(s)
root (122.165.149.75): 10 Time(s)
root (142.93.243.95): 10 Time(s)
root (159.75.124.187): 10 Time(s)
unknown (199.195.248.154): 10 Time(s)
unknown (201.149.20.162): 10 Time(s)
unknown (58.33.35.82): 10 Time(s)
root (150.158.182.49): 9 Time(s)
root (60.167.239.99): 9 Time(s)
unknown (167.71.77.9): 9 Time(s)
unknown (45.144.225.69): 9 Time(s)
root (165.227.129.184): 8 Time(s)
root (178.62.119.91): 8 Time(s)
root (182.254.156.220): 8 Time(s)
root (210.212.237.67): 8 Time(s)
root (81.70.36.8): 8 Time(s)
root (139.59.90.147): 7 Time(s)
root (46.101.141.140): 7 Time(s)
root (net-2-45-191-223.cust.vodafonedsl.it): 7 Time(s)
root (static-css-csq-199-40.business.bouyguestelecom.com): 7 Time(s)
unknown (106.13.139.79): 7 Time(s)
unknown (lv01.0wn.net): 7 Time(s)
root (138.197.213.192): 6 Time(s)
root (167.71.130.205): 6 Time(s)
root (189.4.128.122): 6 Time(s)
root (202.148.28.83): 6 Time(s)
root (221.195.107.199): 6 Time(s)
root (45.146.166.238): 6 Time(s)
unknown (36.22.187.34): 6 Time(s)
root (101.227.5.120): 5 Time(s)
root (201.149.20.162): 5 Time(s)
root (81.70.205.210): 5 Time(s)
unknown (v150-95-151-4.a090.g.tyo1.static.cnode.io): 5 Time(s)
root (106.13.52.192): 4 Time(s)
root (119.91.108.17): 4 Time(s)
root (144.34.130.253.16clouds.com): 4 Time(s)
root (178.176.250.18): 4 Time(s)
root (192.248.43.130): 4 Time(s)
root (ip-198-12-248-100.ip.secureserver.net): 4 Time(s)
root (lv01.0wn.net): 4 Time(s)
root (zammand4.voipe.cc): 4 Time(s)
unknown (195.133.40.104): 4 Time(s)
root (118.24.51.199): 3 Time(s)
root (138.68.136.210): 3 Time(s)
root (183.224.38.56): 3 Time(s)
root (194.152.214.252): 3 Time(s)
root (42.192.92.33): 3 Time(s)
root (mail.rtxbank.com): 3 Time(s)
unknown (141.98.10.179): 3 Time(s)
unknown (141.98.10.29): 3 Time(s)
unknown (171.226.6.13): 3 Time(s)
unknown (193.169.254.113): 3 Time(s)
unknown (205.185.127.25): 3 Time(s)
unknown (45.135.232.165): 3 Time(s)
unknown (45.146.165.72): 3 Time(s)
unknown (67.207.82.163): 3 Time(s)
mysql (150.158.182.49): 2 Time(s)
postgres (167.71.130.205): 2 Time(s)
postgres (194.152.214.252): 2 Time(s)
postgres (static-css-csq-199-40.business.bouyguestelecom.com): 2 Time(s)
root (047-050-246-114.biz.spectrum.com): 2 Time(s)
root (175.24.64.193): 2 Time(s)
root (67.207.82.163): 2 Time(s)
root (tor-exit1-readme.dfri.se): 2 Time(s)
unknown (114-44-182-174.dynamic-ip.hinet.net): 2 Time(s)
unknown (116.105.194.166): 2 Time(s)
unknown (185.65.134.175): 2 Time(s)
backup (167.71.130.205): 1 Time(s)
backup (static-css-csq-199-40.business.bouyguestelecom.com): 1 Time(s)
mysql (189.4.128.122): 1 Time(s)
postgres (118.24.51.199): 1 Time(s)
postgres (42.192.92.33): 1 Time(s)
postgres (81.70.205.210): 1 Time(s)
postgres (zammand4.voipe.cc): 1 Time(s)
root (1.117.232.224): 1 Time(s)
root (1.14.141.40): 1 Time(s)
root (101.226.21.105): 1 Time(s)
root (116.105.194.166): 1 Time(s)
root (124.115.205.246): 1 Time(s)
root (14.143.3.30): 1 Time(s)
root (14.225.17.9): 1 Time(s)
root (157.230.3.50): 1 Time(s)
root (176.250.92.210): 1 Time(s)
root (185.100.87.72): 1 Time(s)
root (193.169.254.113): 1 Time(s)
root (218.21.242.89): 1 Time(s)
root (222.92.203.58): 1 Time(s)
root (36.133.35.234): 1 Time(s)
root (36.89.68.38): 1 Time(s)
root (45.153.160.133): 1 Time(s)
root (58.33.35.82): 1 Time(s)
root (79-67-29-187.dynamic.dsl.as9105.com): 1 Time(s)
root (81.68.188.27): 1 Time(s)
root (81.68.243.3): 1 Time(s)
root (chelseamanning.tor-exit.calyxinstitute.org): 1 Time(s)
root (mail.supremanetwork.com): 1 Time(s)
root (tor-exit4-readme.dfri.se): 1 Time(s)
root (v150-95-151-4.a090.g.tyo1.static.cnode.io): 1 Time(s)
temp (201.149.20.162): 1 Time(s)
unknown (116.113.17.210): 1 Time(s)
unknown (116.98.165.174): 1 Time(s)
unknown (14.18.144.234): 1 Time(s)
unknown (176.111.173.156): 1 Time(s)
unknown (192.248.43.130): 1 Time(s)
unknown (198.98.62.88): 1 Time(s)
unknown (218.25.140.72): 1 Time(s)
unknown (60.235.183.70): 1 Time(s)
unknown (69.176.89.58): 1 Time(s)
unknown (82.156.11.234): 1 Time(s)
uucp (45.146.166.238): 1 Time(s)
www-data (150.158.182.49): 1 Time(s)
www-data (178.176.250.18): 1 Time(s)
Invalid Users:
Unknown Account: 681 Time(s)
---------------------- pam_unix End -------------------------
--------------------- Postfix Begin ------------------------
21.352K Bytes accepted 21,864
21.352K Bytes sent via SMTP 21,864
======== ==================================================
1 Accepted 100.00%
-------- --------------------------------------------------
1 Total 100.00%
======== ==================================================
7 4xx Reject relay denied 100.00%
-------- --------------------------------------------------
7 Total 4xx Rejects 100.00%
======== ==================================================
879 Connections
755 Connections lost (inbound)
879 Disconnections
1 Removed from queue
1 Sent via SMTP
50 Hostname verification errors (FCRDNS)
---------------------- Postfix End -------------------------
--------------------- sendmail-largeboxes (large mail spool files) Begin
------------------------
Large Mailbox threshold: 40MB (41943040 bytes)
Warning: Large mailbox: mailman.gz (1747199807)
Warning: Large mailbox: mailman (235703599967)
---------------------- sendmail-largeboxes (large mail spool files) End
-------------------------
--------------------- SSHD Begin ------------------------
Failed logins from:
1.14.141.40: 1 time
1.15.71.226: 26 times
1.15.156.81: 29 times
1.117.232.224: 1 time
2.45.191.223 (net-2-45-191-223.cust.vodafonedsl.it): 7 times
14.143.3.30 (14.143.3.30.static-Bangalore.vsnl.net.in): 1 time
14.225.17.9: 1 time
27.128.173.81: 49 times
34.64.100.75 (75.100.64.34.bc.googleusercontent.com): 50 times
36.89.68.38: 1 time
36.133.35.234: 1 time
41.76.175.89: 70 times
42.192.92.33: 4 times
42.193.111.181: 52 times
45.112.242.24: 33 times
45.146.166.238: 7 times
45.153.160.133: 1 time
45.195.12.43: 44 times
45.232.73.84: 50 times
46.101.141.140: 7 times
47.50.246.114 (047-050-246-114.biz.spectrum.com): 2 times
49.232.12.131: 66 times
49.235.68.79: 61 times
58.17.200.197: 70 times
58.33.35.82 (82.35.33.58.broad.xw.sh.dynamic.163data.com.cn): 1 time
60.167.239.99: 9 times
66.98.45.242 (242.45.98.66.f.static.claro.net.do): 70 times
67.207.82.163: 2 times
69.176.89.58: 43 times
79.67.29.187 (79-67-29-187.dynamic.dsl.as9105.com): 1 time
81.68.155.143: 15 times
81.68.166.215: 61 times
81.68.188.27: 1 time
81.68.243.3: 1 time
81.69.196.130: 43 times
81.70.36.8: 8 times
81.70.96.157: 60 times
81.70.205.210: 6 times
95.50.91.18 (kzn18.internetdsl.tpnet.pl): 50 times
101.32.203.102: 24 times
101.32.243.13: 32 times
101.68.78.194: 36 times
101.226.21.105: 1 time
101.227.5.120: 5 times
104.225.251.83 (104-225-251-hosted-by.fiberhub.com): 70 times
104.248.145.196: 61 times
106.12.80.223: 40 times
106.13.50.219: 25 times
106.13.52.192: 4 times
106.13.93.221: 35 times
106.13.139.79: 17 times
106.54.236.226: 30 times
106.75.141.160: 40 times
106.75.255.157: 62 times
116.105.194.166: 1 time
116.228.233.91: 41 times
116.246.20.2: 18 times
117.20.40.75: 18 times
118.24.51.199: 4 times
119.29.137.90: 39 times
119.29.180.74: 15 times
119.29.197.210: 69 times
119.41.192.110: 70 times
119.45.226.98: 30 times
119.45.231.207: 46 times
119.91.108.17: 4 times
121.4.74.101: 43 times
121.5.125.9: 49 times
121.141.70.72: 40 times
122.165.149.75 (abts-tn-static-075.149.165.122.airtelbroadband.in): 10 times
123.207.82.31: 22 times
124.115.205.246: 1 time
124.156.103.155: 50 times
132.232.112.96: 46 times
134.209.115.44 (zammand4.voipe.cc): 5 times
138.68.136.210: 3 times
138.94.199.19 (138-94-199-19.infomaisnet.net.br): 70 times
138.197.213.192: 6 times
139.59.90.147: 7 times
139.199.4.191: 50 times
142.93.79.192: 50 times
142.93.243.95: 10 times
144.34.130.253 (144.34.130.253.16clouds.com): 4 times
150.95.151.4 (v150-95-151-4.a090.g.tyo1.static.cnode.io): 1 time
150.158.182.49: 12 times
157.230.3.50: 1 time
158.101.12.235: 60 times
159.75.124.187: 10 times
165.227.129.184: 8 times
167.71.77.9: 28 times
167.71.130.205: 9 times
167.172.230.14 (bizdebthelpers.netssl): 37 times
170.80.68.242 (mail.supremanetwork.com): 1 time
171.25.193.77 (tor-exit1-readme.dfri.se): 2 times
171.25.193.78 (tor-exit4-readme.dfri.se): 1 time
175.24.64.193: 2 times
175.24.111.172: 40 times
176.174.199.40 (static-css-csq-199-40.business.bouyguestelecom.com): 10 times
176.250.92.210 (b0fa5cd2.bb.sky.com): 1 time
178.62.119.91: 8 times
178.128.159.1: 50 times
178.176.250.18: 5 times
182.254.156.220: 8 times
183.224.38.56: 3 times
185.100.87.72 (iclnm.worlpeed.net): 1 time
185.136.157.197 (mail.rtxbank.com): 3 times
185.220.103.5 (chelseamanning.tor-exit.calyxinstitute.org): 1 time
189.4.128.122 (bd04807a.virtua.com.br): 7 times
192.248.43.130: 4 times
193.169.254.113: 1 time
194.152.214.252: 5 times
198.12.248.100 (ip-198-12-248-100.ip.secureserver.net): 4 times
199.19.226.145 (lv01.0wn.net): 4 times
200.237.128.225 (porta225.oops-vm.as28624.oops.net.br): 70 times
201.149.20.162 (162.20.149.201.in-addr.arpa): 6 times
202.148.28.83: 6 times
203.106.109.217 (pm-109-217.tm.net.my): 49 times
210.212.237.67: 8 times
211.143.255.70: 35 times
218.14.208.90: 68 times
218.21.242.89: 1 time
221.195.107.199: 6 times
222.92.203.58: 1 time
Illegal users from:
undef: 401 times
2.45.191.223 (net-2-45-191-223.cust.vodafonedsl.it): 17 times
14.18.144.234: 1 time
36.22.187.34: 6 times
42.192.92.33: 14 times
45.135.232.165: 3 times
45.144.225.69: 9 times
45.146.165.72: 3 times
45.146.166.238: 22 times
47.50.246.114 (047-050-246-114.biz.spectrum.com): 22 times
58.33.35.82 (82.35.33.58.broad.xw.sh.dynamic.163data.com.cn): 10 times
60.167.239.99: 16 times
60.235.183.70: 1 time
65.49.20.68 (scan-19.shadowserver.org): 1 time
67.207.82.163: 3 times
69.176.89.58: 1 time
81.70.36.8: 16 times
81.70.205.210: 16 times
82.156.11.234: 1 time
101.227.5.120: 14 times
106.13.52.192: 14 times
106.13.139.79: 7 times
114.44.182.174 (114-44-182-174.dynamic-ip.hinet.net): 2 times
116.98.165.174 (dynamic-adsl.viettel.vn): 1 time
116.105.194.166: 2 times
116.113.17.210: 1 time
118.24.51.199: 19 times
119.91.108.17: 20 times
134.209.115.44 (zammand4.voipe.cc): 15 times
138.68.136.210: 22 times
138.197.213.192: 17 times
139.59.90.147: 18 times
141.98.10.29: 3 times
141.98.10.179 (er.includeswitche.com): 3 times
141.98.10.203: 12 times
142.93.243.95: 15 times
144.34.130.253 (144.34.130.253.16clouds.com): 21 times
150.95.151.4 (v150-95-151-4.a090.g.tyo1.static.cnode.io): 5 times
150.158.182.49: 20 times
165.227.129.184: 15 times
167.71.77.9: 9 times
167.71.130.205: 16 times
171.226.6.13 (dynamic-adsl.viettel.vn): 3 times
175.24.64.193: 15 times
176.111.173.156: 1 time
176.174.199.40 (static-css-csq-199-40.business.bouyguestelecom.com): 24 times
178.62.119.91: 18 times
178.176.250.18: 20 times
183.224.38.56: 15 times
185.65.134.175: 2 times
185.136.157.197 (mail.rtxbank.com): 19 times
189.4.128.122 (bd04807a.virtua.com.br): 22 times
190.230.20.40 (host40.190-230-20.telecom.net.ar): 15 times
192.248.43.130: 1 time
193.169.254.113: 3 times
194.152.214.252: 21 times
195.133.40.104: 4 times
198.12.248.100 (ip-198-12-248-100.ip.secureserver.net): 15 times
198.98.62.88: 1 time
199.19.226.145 (lv01.0wn.net): 7 times
199.195.248.154: 10 times
201.149.20.162 (162.20.149.201.in-addr.arpa): 10 times
202.148.28.83: 22 times
205.185.127.25 (serveroperations.com): 3 times
218.25.140.72: 1 time
**Unmatched Entries**
fatal: no matching cipher found: client aes128-cbc,blowfish-cbc,3des-cbc server
aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
[preauth] : 3 time(s)
---------------------- SSHD End -------------------------
--------------------- Disk Space Begin ------------------------
Filesystem Size Used Avail Use% Mounted on
/dev/ploop23974p1 394G 242G 132G 65% /
none 4.0G 0 4.0G 0% /dev
---------------------- Disk Space End -------------------------
###################### Logwatch End #########################
1563
days inactive
1563
days old
0 comments
1 participants
participants (1)
-
root＠zapf.in