File: /home/w3com/mail/.soporte@w3_com_py/cur/1633935054.H508656P24501.s3.yayogua.com.py,S=6193:2,
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Mon, 11 Oct 2021 03:50:54 -0300
Received: from cloud.ecp.com.py ([108.161.128.167]:46228)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
id 1mZp9B-0006IA-Lf
for soporte@w3.com.py; Mon, 11 Oct 2021 03:50:54 -0300
Received: from mailnull by cloud.ecp.com.py with local (Exim 4.94.2)
id 1mZp8W-000B9k-Og
for root@cloud.ecp.com.py; Mon, 11 Oct 2021 03:50:12 -0300
X-Failed-Recipients: root@localhost
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cloud.ecp.com.py>
To: root@cloud.ecp.com.py
References: <E1mZp8V-000B96-Jc@cloud.ecp.com.py>
Content-Type: multipart/report; report-type=delivery-status; boundary=1633935012-eximdsn-2130465765
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1mZp8W-000B9k-Og@cloud.ecp.com.py>
Date: Mon, 11 Oct 2021 03:50:12 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cloud.ecp.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: mailnull
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22
X-Source-Dir: /
X-Spam-Status: No, score=-0.8
X-Spam-Score: -7
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients.
This is a permanent error. The following address(es) failed: [...]
Content analysis details: (-0.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[108.161.128.167 listed in list.dnswl.org]
0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
X-Spam-Flag: NO
--1633935012-eximdsn-2130465765
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
root@localhost
retry timeout exceeded
--1633935012-eximdsn-2130465765
Content-type: message/delivery-status
Reporting-MTA: dns; cloud.ecp.com.py
Action: failed
Final-Recipient: rfc822;root@localhost
Status: 5.0.0
--1633935012-eximdsn-2130465765
Content-type: message/rfc822
Return-path: <root@cloud.ecp.com.py>
Received: from root by cloud.ecp.com.py with local (Exim 4.94.2)
(envelope-from <root@cloud.ecp.com.py>)
id 1mZp8V-000B96-Jc
for root@localhost; Mon, 11 Oct 2021 03:50:11 -0300
Date: Mon, 11 Oct 2021 03:50:11 -0300
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1mZp8V-000B96-Jc@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Package manager verification has failed:
File: /usr/bin/su
The file permissions have changed
The file group has changed
Warning: The file properties have changed:
File: /usr/local/bin/passwd
Current hash: 68e9e944d4727c961c93503284c6865f686803522f7b628c86c81d77490aa144
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Warning: The file properties have changed:
File: /usr/local/cpanel/bin/jail_safe_passwd
Current hash: 68e9e944d4727c961c93503284c6865f686803522f7b628c86c81d77490aa144
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Current inode: 21108345 Stored inode: 21107907
Current size: 3384136 Stored size: 3379392
Current file modification time: 1630050380 (27-Aug-2021 03:46:20)
Stored file modification time : 1622087181 (26-May-2021 23:46:21)
----------------------- End Rootkit Hunter Scan -----------------------
--1633935012-eximdsn-2130465765--