File: /home/w3com/mail/.soporte@w3_com_py/cur/1632728424.H539900P11556.s3.yayogua.com.py,S=12383:2,
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Mon, 27 Sep 2021 03:40:24 -0400
Received: from cloud.ecp.com.py ([108.161.128.167]:53240)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
id 1mUlFO-0002tq-2C
for soporte@w3.com.py; Mon, 27 Sep 2021 03:40:24 -0400
Received: from mailnull by cloud.ecp.com.py with local (Exim 4.94.2)
id 1mUlEj-0000qo-Ix
for root@cloud.ecp.com.py; Mon, 27 Sep 2021 03:39:41 -0400
X-Failed-Recipients: root@localhost
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cloud.ecp.com.py>
To: root@cloud.ecp.com.py
References: <E1mUlEh-0000qA-5I@cloud.ecp.com.py>
Content-Type: multipart/report; report-type=delivery-status; boundary=1632728381-eximdsn-235208463
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1mUlEj-0000qo-Ix@cloud.ecp.com.py>
Date: Mon, 27 Sep 2021 03:39:41 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cloud.ecp.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: mailnull
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22
X-Source-Dir: /
X-Spam-Status: No, score=-5.8
X-Spam-Score: -57
X-Spam-Bar: -----
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients.
This is a permanent error. The following address(es) failed: [...]
Content analysis details: (-5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[108.161.128.167 listed in list.dnswl.org]
0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
X-Spam-Flag: NO
--1632728381-eximdsn-235208463
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
root@localhost
retry timeout exceeded
--1632728381-eximdsn-235208463
Content-type: message/delivery-status
Reporting-MTA: dns; cloud.ecp.com.py
Action: failed
Final-Recipient: rfc822;root@localhost
Status: 5.0.0
--1632728381-eximdsn-235208463
Content-type: message/rfc822
Return-path: <root@cloud.ecp.com.py>
Received: from root by cloud.ecp.com.py with local (Exim 4.94.2)
(envelope-from <root@cloud.ecp.com.py>)
id 1mUlEh-0000qA-5I
for root@localhost; Mon, 27 Sep 2021 03:39:39 -0400
Date: Mon, 27 Sep 2021 03:39:39 -0400
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1mUlEh-0000qA-5I@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: No hash value found for file '/usr/sbin/adduser' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/adduser
Current file modification time: 1607140124 (05-Dec-2020 00:48:44)
Stored file modification time : 1565319054 (08-Aug-2019 22:50:54)
Warning: No hash value found for file '/usr/sbin/depmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/depmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: The file properties have changed:
File: /usr/sbin/ifdown
Current hash: 69026ac688e78a6f54406fd4a4b92bb655fa9795cb043cafb1ebf7782985a38b
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current size: 1651 Stored size: 0
Current file modification time: 1590144273 (22-May-2020 06:44:33)
Stored file modification time : 1605543307 (16-Nov-2020 13:15:07)
Warning: The command '/usr/sbin/ifdown' has been replaced by a script: /usr/sbin/ifdown: Bourne-Again shell script, ASCII text executable
Warning: The file properties have changed:
File: /usr/sbin/ifup
Current hash: f5ce9f5f014159aa479a88a4754b4a1980f307fac68863477341e62787f8e52c
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current size: 5010 Stored size: 0
Current file modification time: 1590144273 (22-May-2020 06:44:33)
Stored file modification time : 1605543307 (16-Nov-2020 13:15:07)
Warning: The command '/usr/sbin/ifup' has been replaced by a script: /usr/sbin/ifup: Bourne-Again shell script, ASCII text executable
Warning: No hash value found for file '/usr/sbin/init' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/init
Current file modification time: 1612410438 (04-Feb-2021 00:47:18)
Stored file modification time : 1612283656 (02-Feb-2021 13:34:16)
Warning: No hash value found for file '/usr/sbin/insmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/insmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/lsmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/lsmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/modinfo' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/modinfo
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/modprobe' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/modprobe
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/rmmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/rmmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/runlevel' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/runlevel
Current file modification time: 1612410438 (04-Feb-2021 00:47:18)
Stored file modification time : 1612283656 (02-Feb-2021 13:34:16)
Warning: No hash value found for file '/usr/bin/awk' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/awk
Current file modification time: 1544781212 (14-Dec-2018 06:53:32)
Stored file modification time : 1498686765 (28-Jun-2017 17:52:45)
Warning: The command '/usr/bin/egrep' has been replaced by a script: /usr/bin/egrep: POSIX shell script, ASCII text executable
Warning: The command '/usr/bin/fgrep' has been replaced by a script: /usr/bin/fgrep: POSIX shell script, ASCII text executable
Warning: The file properties have changed:
File: /usr/bin/links
Current hash: 52d888a65f7e8c4e9837eb98d0c617af3ffbf5c51426036f69deeb31e93a2d37
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current permissions: 0777 Stored permissions: 0644
Current size: 23 Stored size: 0
Current file modification time: 1556098118 (24-Apr-2019 05:28:38)
Stored file modification time : 1547139654 (10-Jan-2019 14:00:54)
Current symbolic link target: '/usr/bin/links' -> '/usr/bin/elinks'
Stored symbolic link target : '/usr/bin/links' -> '/usr/bin'
Warning: No hash value found for file '/usr/bin/mail' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/mail
Current file modification time: 1556097493 (24-Apr-2019 05:18:13)
Stored file modification time : 1523430473 (11-Apr-2018 03:07:53)
Warning: The file properties have changed:
File: /usr/bin/mount
Current permissions: 4755 Stored permissions: 04755
Warning: The file properties have changed:
File: /usr/bin/newgrp
Current permissions: 4755 Stored permissions: 04755
Warning: The file properties have changed:
File: /usr/bin/passwd
Current permissions: 4755 Stored permissions: 04755
Warning: No hash value found for file '/usr/bin/sh' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/sh
Current file modification time: 1607140094 (05-Dec-2020 00:48:14)
Stored file modification time : 1585707450 (31-Mar-2020 22:17:30)
Warning: The file properties have changed:
File: /usr/bin/su
Current permissions: 4750 Stored permissions: 04755
Current gid: 10 Stored gid: 0
Warning: The file properties have changed:
File: /usr/bin/sudo
Current permissions: 4111 Stored permissions: 04111
Warning: The file properties have changed:
File: /usr/local/bin/passwd
Current hash: 68e9e944d4727c961c93503284c6865f686803522f7b628c86c81d77490aa144
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Warning: The file properties have changed:
File: /usr/local/cpanel/bin/jail_safe_passwd
Current hash: 68e9e944d4727c961c93503284c6865f686803522f7b628c86c81d77490aa144
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Current inode: 21108345 Stored inode: 21107907
Current size: 3384136 Stored size: 3379392
Current file modification time: 1630050380 (27-Aug-2021 03:46:20)
Stored file modification time : 1622087181 (26-May-2021 23:46:21)
----------------------- End Rootkit Hunter Scan -----------------------
--1632728381-eximdsn-235208463--