File: /home/w3com/mail/.soporte@w3_com_py/new/1773560902.H905351P27610.s3.yayogua.com.py,S=5942
Return-path: <root@cloud.ecp.com.py>
Envelope-to: soporte@w3.com.py
Delivery-date: Sun, 15 Mar 2026 04:48:22 -0300
Received: from cloud.ecp.com.py ([108.161.128.167]:42768)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
(envelope-from <root@cloud.ecp.com.py>)
id 1w1gCz-00079b-1d
for soporte@w3.com.py; Sun, 15 Mar 2026 04:48:22 -0300
Received: from root by cloud.ecp.com.py with local (Exim 4.99.1)
(envelope-from <root@cloud.ecp.com.py>)
id 1w1gCK-000000006lf-2PFX
for root@localhost;
Sun, 15 Mar 2026 04:47:40 -0300
Date: Sun, 15 Mar 2026 04:47:40 -0300
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1w1gCK-000000006lf-2PFX@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - localhost
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]
X-AntiAbuse: Sender Address Domain - cloud.ecp.com.py
X-Get-Message-Sender-Via: cloud.ecp.com.py: authenticated_id: root/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: root
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --system --deserialize 17
X-Source-Dir: /
X-Spam-Status: No, score=0.2
X-Spam-Score: 2
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Start Rootkit Hunter Update [ Rootkit Hunter version 1.4.6
] Checking rkhunter data files... Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ] Checking file backdoorports.dat
[ No update ] Checking file suspscan.dat [ No update ] Checking file i18n/cn
[ No update ] Checking file i18n/de [ No update ] Checking file i18n/en [
No update ] Checking file i18n/tr [ No update ] Checking file i18n/tr.utf8
[ No update ] Checking file i18n/zh [ No update ] Checking file i18n/zh.utf8
[ No update ] Checking file i18n/ja [ No update ] [...]
Content analysis details: (0.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[108.161.128.167 listed in sa-accredit.habeas.com]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.1 TO_MALFORMED To: has a malformed address
0.8 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[108.161.128.167 listed in bl.score.senderscore.com]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
X-Spam-Flag: NO
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Checking for prerequisites [ Warning ]
The file of stored file properties (rkhunter.dat) is empty, and should be created. To do this type in 'rkhunter --propupd'.
Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option
is used, all the files on their system are known to be genuine, and installed from a
reliable source. The rkhunter '--check' option will compare the current file properties
against previously stored values, and report if any values differ. However, rkhunter
cannot determine what has caused the change, that is for the user to do.
Warning: The command '/usr/sbin/ifdown' has been replaced by a script: /usr/sbin/ifdown: Bourne-Again shell script, ASCII text executable
Warning: The command '/usr/sbin/ifup' has been replaced by a script: /usr/sbin/ifup: Bourne-Again shell script, ASCII text executable
Warning: The command '/usr/bin/egrep' has been replaced by a script: /usr/bin/egrep: POSIX shell script, ASCII text executable
Warning: The command '/usr/bin/fgrep' has been replaced by a script: /usr/bin/fgrep: POSIX shell script, ASCII text executable
----------------------- End Rootkit Hunter Scan -----------------------