File: /home/w3com/mail/.soporte@w3_com_py/cur/1646547789.H841542P5046.s3.yayogua.com.py,S=7967:2,
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Sun, 06 Mar 2022 03:23:09 -0300
Received: from cloud.ecp.com.py ([108.161.128.167]:44886)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
id 1nQkIP-0001EB-22
for soporte@w3.com.py; Sun, 06 Mar 2022 03:23:09 -0300
Received: from mailnull by cloud.ecp.com.py with local (Exim 4.94.2)
id 1nQkHk-0007PF-NL
for root@cloud.ecp.com.py; Sun, 06 Mar 2022 03:22:28 -0300
X-Failed-Recipients: root@localhost
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cloud.ecp.com.py>
To: root@cloud.ecp.com.py
References: <E1nQkHi-0007OY-Jw@cloud.ecp.com.py>
Content-Type: multipart/report; report-type=delivery-status; boundary=1646547748-eximdsn-156079974
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1nQkHk-0007PF-NL@cloud.ecp.com.py>
Date: Sun, 06 Mar 2022 03:22:28 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cloud.ecp.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: mailnull
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22
X-Source-Dir: /
X-Spam-Status: No, score=-0.9
X-Spam-Score: -8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients.
This is a permanent error. The following address(es) failed: [...]
Content analysis details: (-0.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL
was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[108.161.128.167 listed in list.dnswl.org]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish
X-Spam-Flag: NO
--1646547748-eximdsn-156079974
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
root@localhost
retry timeout exceeded
--1646547748-eximdsn-156079974
Content-type: message/delivery-status
Reporting-MTA: dns; cloud.ecp.com.py
Action: failed
Final-Recipient: rfc822;root@localhost
Status: 5.0.0
--1646547748-eximdsn-156079974
Content-type: message/rfc822
Return-path: <root@cloud.ecp.com.py>
Received: from root by cloud.ecp.com.py with local (Exim 4.94.2)
(envelope-from <root@cloud.ecp.com.py>)
id 1nQkHi-0007OY-Jw
for root@localhost; Sun, 06 Mar 2022 03:22:26 -0300
Date: Sun, 06 Mar 2022 03:22:26 -0300
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1nQkHi-0007OY-Jw@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: The file properties have changed:
File: /usr/sbin/init
Current inode: 20718641 Stored inode: 20718645
Warning: The file properties have changed:
File: /usr/sbin/runlevel
Current inode: 20719117 Stored inode: 20719133
Warning: The file properties have changed:
File: /usr/sbin/sshd
Current inode: 20710315 Stored inode: 20719849
Warning: The file properties have changed:
File: /usr/bin/bash
Current inode: 20718124 Stored inode: 20709499
Warning: The file properties have changed:
File: /usr/bin/ldd
Current inode: 20719328 Stored inode: 20709547
Warning: The file properties have changed:
File: /usr/bin/rpm
Current inode: 20719223 Stored inode: 20720654
Warning: The file properties have changed:
File: /usr/bin/sh
Current inode: 20709836 Stored inode: 20710155
Warning: The file properties have changed:
File: /usr/bin/size
Current inode: 20710147 Stored inode: 20710156
Warning: The file properties have changed:
File: /usr/bin/ssh
Current inode: 20710227 Stored inode: 20709471
Warning: The file properties have changed:
File: /usr/bin/strings
Current inode: 20710156 Stored inode: 20710299
Warning: Package manager verification has failed:
File: /usr/bin/su
The file permissions have changed
The file group has changed
Warning: The file properties have changed:
File: /usr/bin/sudo
Current inode: 20713144 Stored inode: 20718614
Warning: The file properties have changed:
File: /usr/bin/systemctl
Current inode: 20709873 Stored inode: 20709877
Warning: The file properties have changed:
File: /usr/local/bin/passwd
Current hash: 0b8530bf5149a03d9cfffc3f31a415375f2925601e9c15af27e2f4a5bb2b69b8
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Warning: The file properties have changed:
File: /usr/lib/systemd/systemd
Current inode: 20717570 Stored inode: 20718561
Warning: The file properties have changed:
File: /usr/local/cpanel/bin/jail_safe_passwd
Current hash: 0b8530bf5149a03d9cfffc3f31a415375f2925601e9c15af27e2f4a5bb2b69b8
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Current inode: 21108254 Stored inode: 21107907
Current size: 3367448 Stored size: 3379392
Current file modification time: 1643870820 (03-Feb-2022 03:47:00)
Stored file modification time : 1622087181 (26-May-2021 23:46:21)
----------------------- End Rootkit Hunter Scan -----------------------
--1646547748-eximdsn-156079974--