MOON
Server: Apache
System: Linux s5.yayogua.com.py 6.12.0-124.55.3.el10_1.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:54:02 EDT 2026 x86_64
User: w3com (1005)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /home/w3com/mail/.soporte@w3_com_py/cur/1701152351.H510896P4175.s3.yayogua.com.py,S=10674:2,
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Tue, 28 Nov 2023 03:19:11 -0300
Received: from cloud.ecp.com.py ([108.161.128.167]:50230)
	by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.87)
	id 1r7rR7-000134-LR
	for soporte@w3.com.py; Tue, 28 Nov 2023 03:19:11 -0300
Received: from s3.yayogua.com.py ([72.249.170.19]:53646)
	by cloud.ecp.com.py with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	id 1r7rQU-000KLA-03
	for root@cloud.ecp.com.py;
	Tue, 28 Nov 2023 03:18:29 -0300
Received: from mailnull by s3.yayogua.com.py with local (Exim 4.87)
	id 1r7rPp-00011K-7X
	for root@cloud.ecp.com.py; Tue, 28 Nov 2023 03:17:49 -0300
X-Failed-Recipients: alemussi@gmail.com
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@s3.yayogua.com.py>
To: root@cloud.ecp.com.py
Content-Type: multipart/report; report-type=delivery-status; boundary=1701152269-eximdsn-669938727
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1r7rPp-00011K-7X@s3.yayogua.com.py>
Date: Tue, 28 Nov 2023 03:17:49 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s3.yayogua.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - 
X-Get-Message-Sender-Via: s3.yayogua.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: s3.yayogua.com.py: mailnull
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - 
X-Get-Message-Sender-Via: cloud.ecp.com.py: mailgid no entry from get_recent_authed_mail_ips_entry
X-Authenticated-Sender: cloud.ecp.com.py: root
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Spam-Status: No, score=-1.1
X-Spam-Score: -10
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  This message was created automatically by mail delivery software.
    A message that you sent could not be delivered to one or more of its recipients.
    This is a permanent error. The following address(es) failed: [...] 
 
 Content analysis details:   (-1.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: w3.com.py]
  0.8 KAM_ASCII_DIVIDERS     Spam that uses ascii formatting tricks
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO

--1701152269-eximdsn-669938727
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  alemussi@gmail.com
    (ultimately generated from soporte@w3.com.py)
    host gmail-smtp-in.l.google.com [142.251.116.26]
    SMTP error from remote mail server after end of data:
    550-5.7.25 [72.249.171.14] The IP address sending this message does not have a
    550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
    550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
    550-5.7.25 from IPs with missing PTR records. Please visit
    550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices for more
    550 5.7.25 information. l3-20020a544503000000b003b2f489cb90si4186916oil.164 - gsmtp

--1701152269-eximdsn-669938727
Content-type: message/delivery-status

Reporting-MTA: dns; s3.yayogua.com.py

Action: failed
Final-Recipient: rfc822;alemussi@gmail.com
Status: 5.0.0
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.25 [72.249.171.14] The IP address sending this message does not have a
 550-5.7.25 PTR record setup, or the corresponding forward DNS entry does not
 550-5.7.25 point to the sending IP. As a policy, Gmail does not accept messages
 550-5.7.25 from IPs with missing PTR records. Please visit
 550-5.7.25  https://support.google.com/mail/answer/81126#ip-practices for more
 550 5.7.25 information. l3-20020a544503000000b003b2f489cb90si4186916oil.164 - gsmtp

--1701152269-eximdsn-669938727
Content-type: message/rfc822

Return-path: <root@cloud.ecp.com.py>
Received: from cloud.ecp.com.py ([108.161.128.167]:50208)
	by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.87)
	(envelope-from <root@cloud.ecp.com.py>)
	id 1r7rPm-0000yv-S3
	for soporte@w3.com.py; Tue, 28 Nov 2023 03:17:48 -0300
Received: from root by cloud.ecp.com.py with local (Exim 4.96.2)
	(envelope-from <root@cloud.ecp.com.py>)
	id 1r7rP8-000KIs-1X
	for root@localhost;
	Tue, 28 Nov 2023 03:17:06 -0300
Date: Tue, 28 Nov 2023 03:17:06 -0300
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1r7rP8-000KIs-1X@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - localhost
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain - cloud.ecp.com.py
X-Get-Message-Sender-Via: cloud.ecp.com.py: authenticated_id: root/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: root
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22 
X-Source-Dir: /
X-Spam-Status: No, score=-1.0
X-Spam-Score: -9
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Start Rootkit Hunter Update [ Rootkit Hunter version 1.4.6
    ] Checking rkhunter data files... Checking file mirrors.dat [ No update ]
    Checking file programs_bad.dat [ No update ] Checking file backdoorports.dat
    [ No update ] Checking file suspscan.dat [ No update ] Checking file i18n/cn
    [ No update ] Checking file i18n/de [ No update ] Checking file i18n/en [
    No update ] Checking file i18n/tr [ No update ] Checking file i18n/tr.utf8
    [ No update ] Checking file i18n/zh [ No update ] Checking file i18n/zh.utf8
    [ No update ] Checking file i18n/ja [ No update ] [...] 
 
 Content analysis details:   (-1.0 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.1 TO_MALFORMED           To: has a malformed address
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ecp.com.py]
  0.8 KAM_ASCII_DIVIDERS     Spam that uses ascii formatting tricks
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
X-Spam-Flag: NO


--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]

Checking rkhunter data files...
  Checking file mirrors.dat                                  [ No update ]
  Checking file programs_bad.dat                             [ No update ]
  Checking file backdoorports.dat                            [ No update ]
  Checking file suspscan.dat                                 [ No update ]
  Checking file i18n/cn                                      [ No update ]
  Checking file i18n/de                                      [ No update ]
  Checking file i18n/en                                      [ No update ]
  Checking file i18n/tr                                      [ No update ]
  Checking file i18n/tr.utf8                                 [ No update ]
  Checking file i18n/zh                                      [ No update ]
  Checking file i18n/zh.utf8                                 [ No update ]
  Checking file i18n/ja                                      [ No update ]

---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Checking for prerequisites               [ Warning ]
         The file of stored file properties (rkhunter.dat) is empty, and should be created. To do this type in 'rkhunter --propupd'.
Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option
         is used, all the files on their system are known to be genuine, and installed from a
         reliable source. The rkhunter '--check' option will compare the current file properties
         against previously stored values, and report if any values differ. However, rkhunter
         cannot determine what has caused the change, that is for the user to do.
Warning: The command '/usr/sbin/ifdown' has been replaced by a script: /usr/sbin/ifdown: Bourne-Again shell script, ASCII text executable
Warning: The command '/usr/sbin/ifup' has been replaced by a script: /usr/sbin/ifup: Bourne-Again shell script, ASCII text executable
Warning: The command '/usr/bin/egrep' has been replaced by a script: /usr/bin/egrep: POSIX shell script, ASCII text executable
Warning: The command '/usr/bin/fgrep' has been replaced by a script: /usr/bin/fgrep: POSIX shell script, ASCII text executable

----------------------- End Rootkit Hunter Scan -----------------------

--1701152269-eximdsn-669938727--