File: /home/w3com/mail/.soporte@w3_com_py/cur/1648188562.H660527P21744.s3.yayogua.com.py,S=17328:2,
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Fri, 25 Mar 2022 03:09:22 -0300
Received: from cloud.ecp.com.py ([108.161.128.167]:48514)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
id 1nXd8T-0005Yq-25
for soporte@w3.com.py; Fri, 25 Mar 2022 03:09:22 -0300
Received: from mailnull by cloud.ecp.com.py with local (Exim 4.94.2)
id 1nXd7o-0005fR-M8
for root@cloud.ecp.com.py; Fri, 25 Mar 2022 03:08:40 -0300
X-Failed-Recipients: root@localhost
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cloud.ecp.com.py>
To: root@cloud.ecp.com.py
References: <E1nXd7m-0005em-Ta@cloud.ecp.com.py>
Content-Type: multipart/report; report-type=delivery-status; boundary=1648188520-eximdsn-1068500152
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1nXd7o-0005fR-M8@cloud.ecp.com.py>
Date: Fri, 25 Mar 2022 03:08:40 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cloud.ecp.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: mailnull
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22
X-Source-Dir: /
X-Spam-Status: No, score=-5.9
X-Spam-Score: -58
X-Spam-Bar: -----
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients.
This is a permanent error. The following address(es) failed: [...]
Content analysis details: (-5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[108.161.128.167 listed in list.dnswl.org]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish
X-Spam-Flag: NO
--1648188520-eximdsn-1068500152
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
root@localhost
retry timeout exceeded
--1648188520-eximdsn-1068500152
Content-type: message/delivery-status
Reporting-MTA: dns; cloud.ecp.com.py
Action: failed
Final-Recipient: rfc822;root@localhost
Status: 5.0.0
--1648188520-eximdsn-1068500152
Content-type: message/rfc822
Return-path: <root@cloud.ecp.com.py>
Received: from root by cloud.ecp.com.py with local (Exim 4.94.2)
(envelope-from <root@cloud.ecp.com.py>)
id 1nXd7m-0005em-Ta
for root@localhost; Fri, 25 Mar 2022 03:08:38 -0300
Date: Fri, 25 Mar 2022 03:08:38 -0300
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1nXd7m-0005em-Ta@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: No hash value found for file '/usr/sbin/adduser' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/adduser
Current file modification time: 1607140124 (05-Dec-2020 00:48:44)
Stored file modification time : 1565319054 (08-Aug-2019 22:50:54)
Warning: No hash value found for file '/usr/sbin/depmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/depmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: The file properties have changed:
File: /usr/sbin/ifdown
Current hash: 69026ac688e78a6f54406fd4a4b92bb655fa9795cb043cafb1ebf7782985a38b
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current size: 1651 Stored size: 0
Current file modification time: 1590144273 (22-May-2020 06:44:33)
Stored file modification time : 1605543307 (16-Nov-2020 13:15:07)
Warning: The command '/usr/sbin/ifdown' has been replaced by a script: /usr/sbin/ifdown: Bourne-Again shell script, ASCII text executable
Warning: The file properties have changed:
File: /usr/sbin/ifup
Current hash: f5ce9f5f014159aa479a88a4754b4a1980f307fac68863477341e62787f8e52c
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current size: 5010 Stored size: 0
Current file modification time: 1590144273 (22-May-2020 06:44:33)
Stored file modification time : 1605543307 (16-Nov-2020 13:15:07)
Warning: The command '/usr/sbin/ifup' has been replaced by a script: /usr/sbin/ifup: Bourne-Again shell script, ASCII text executable
Warning: No hash value found for file '/usr/sbin/init' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/init
Current inode: 20718641 Stored inode: 20718645
Current file modification time: 1642229182 (15-Jan-2022 03:46:22)
Stored file modification time : 1612283656 (02-Feb-2021 13:34:16)
Warning: No hash value found for file '/usr/sbin/insmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/insmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/lsmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/lsmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/modinfo' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/modinfo
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/modprobe' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/modprobe
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/rmmod' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/rmmod
Current file modification time: 1607140132 (05-Dec-2020 00:48:52)
Stored file modification time : 1585709895 (31-Mar-2020 22:58:15)
Warning: No hash value found for file '/usr/sbin/runlevel' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/sbin/runlevel
Current inode: 20719117 Stored inode: 20719133
Current file modification time: 1642229182 (15-Jan-2022 03:46:22)
Stored file modification time : 1612283656 (02-Feb-2021 13:34:16)
Warning: The file properties have changed:
File: /usr/sbin/sshd
Current hash: e8209c80518ad2d9b6ee2bd02c3b856b75d650e48fc89cfb6aa634cb033b41e8
Stored hash : 2c6bf828ee0b4e78c49a71affd3d33b7916700cf7a288cd1a55fc4e701e50d68
Current inode: 20710315 Stored inode: 20719849
Current size: 852888 Stored size: 852856
Current file modification time: 1637771716 (24-Nov-2021 13:35:16)
Stored file modification time : 1565314847 (08-Aug-2019 21:40:47)
Warning: No hash value found for file '/usr/bin/awk' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/awk
Current file modification time: 1544781212 (14-Dec-2018 06:53:32)
Stored file modification time : 1498686765 (28-Jun-2017 17:52:45)
Warning: The file properties have changed:
File: /usr/bin/bash
Current hash: 00f8cbc5b3a6640af5ac18d01bc5a666f6f583b1379b9491e0bcc28ba78c92e9
Stored hash : a5f3d6f51fe87d0a01b4d4a1907952bdaf31b5f0887f5b2253a83f9f0180c2ce
Current inode: 20718124 Stored inode: 20709499
Current file modification time: 1637771607 (24-Nov-2021 13:33:27)
Stored file modification time : 1585707451 (31-Mar-2020 22:17:31)
Warning: The command '/usr/bin/egrep' has been replaced by a script: /usr/bin/egrep: POSIX shell script, ASCII text executable
Warning: The command '/usr/bin/fgrep' has been replaced by a script: /usr/bin/fgrep: POSIX shell script, ASCII text executable
Warning: The file properties have changed:
File: /usr/bin/ldd
Current inode: 20719328 Stored inode: 20709547
Current file modification time: 1634148427 (13-Oct-2021 15:07:07)
Stored file modification time : 1619616913 (28-Apr-2021 09:35:13)
Warning: The file properties have changed:
File: /usr/bin/links
Current hash: 52d888a65f7e8c4e9837eb98d0c617af3ffbf5c51426036f69deeb31e93a2d37
Stored hash : e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Current permissions: 0777 Stored permissions: 0644
Current size: 23 Stored size: 0
Current file modification time: 1556098118 (24-Apr-2019 05:28:38)
Stored file modification time : 1547139654 (10-Jan-2019 14:00:54)
Current symbolic link target: '/usr/bin/links' -> '/usr/bin/elinks'
Stored symbolic link target : '/usr/bin/links' -> '/usr/bin'
Warning: No hash value found for file '/usr/bin/mail' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/mail
Current file modification time: 1556097493 (24-Apr-2019 05:18:13)
Stored file modification time : 1523430473 (11-Apr-2018 03:07:53)
Warning: The file properties have changed:
File: /usr/bin/mount
Current permissions: 4755 Stored permissions: 04755
Warning: The file properties have changed:
File: /usr/bin/newgrp
Current permissions: 4755 Stored permissions: 04755
Warning: The file properties have changed:
File: /usr/bin/passwd
Current permissions: 4755 Stored permissions: 04755
Warning: The file properties have changed:
File: /usr/bin/rpm
Current hash: 764435ab9069a528c9d9e2ed189495a0976fb70c21048d3465fc4bb1b9db56cc
Stored hash : e67e2e26f2af8b26e49af6716dd77195e3a3c5a80ddb25566d9479f1e12ec0f3
Current inode: 20719223 Stored inode: 20720654
Current file modification time: 1637771614 (24-Nov-2021 13:33:34)
Stored file modification time : 1601486999 (30-Sep-2020 13:29:59)
Warning: No hash value found for file '/usr/bin/sh' in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/sh
Current inode: 20709836 Stored inode: 20710155
Current file modification time: 1638427595 (02-Dec-2021 03:46:35)
Stored file modification time : 1585707450 (31-Mar-2020 22:17:30)
Warning: The file properties have changed:
File: /usr/bin/size
Current hash: a3149a8a6720f9632c9e7a7a54da79fa5bd510b7feaed3e1802f799d7ea351dd
Stored hash : 675ce4c82b76795a81b1a881edf7531fc3835ceed65c31eb5131e69377a3f0b8
Current inode: 20710147 Stored inode: 20710156
Current size: 33128 Stored size: 33136
Current file modification time: 1635781155 (01-Nov-2021 12:39:15)
Stored file modification time : 1601570232 (01-Oct-2020 12:37:12)
Warning: The file properties have changed:
File: /usr/bin/ssh
Current hash: fa13da75ac5c9a7483d3913848f9426d40443d863c589fa27b589bcd8e0e907c
Stored hash : e9b3c35d06a35c933dfd35d5270a19f546ae14805d8516808f68d9c5fa729e1e
Current inode: 20710227 Stored inode: 20709471
Current size: 774544 Stored size: 774568
Current file modification time: 1637771716 (24-Nov-2021 13:35:16)
Stored file modification time : 1565314847 (08-Aug-2019 21:40:47)
Warning: The file properties have changed:
File: /usr/bin/strings
Current hash: beda0c5037909c0b6dd5362c86d99783803d9275b0b018a29e6975ba6a7e8f81
Stored hash : 115c7f1c72a59358a108c51fb564d63c07091b5ef165ba8207697b18ec627b75
Current inode: 20710156 Stored inode: 20710299
Current size: 33328 Stored size: 29112
Current file modification time: 1635781155 (01-Nov-2021 12:39:15)
Stored file modification time : 1601570232 (01-Oct-2020 12:37:12)
Warning: The file properties have changed:
File: /usr/bin/su
Current permissions: 4750 Stored permissions: 04755
Current gid: 10 Stored gid: 0
Warning: The file properties have changed:
File: /usr/bin/sudo
Current hash: d1447d29ab94efdcec015285becef8844ca091168f6294a3dc16ecf7557fe5fb
Stored hash : 5cb8f12bf3d41710f766af89eb46c0ea480acd4b349fff31b2b092b415b94bb2
Current permissions: 4111 Stored permissions: 04111
Current inode: 20713144 Stored inode: 20718614
Current size: 151424 Stored size: 147336
Current file modification time: 1634214537 (14-Oct-2021 09:28:57)
Stored file modification time : 1611698161 (26-Jan-2021 18:56:01)
Warning: The file properties have changed:
File: /usr/bin/systemctl
Current hash: 5992309364a8b4dbba203cfc0069326b9cb5dc8a59f1f2e3645f982683b112f7
Stored hash : d394f76388d6ca59bf702e0944939b651347da0e3a1519c673fd22299a21a7c5
Current inode: 20709873 Stored inode: 20709877
Current size: 721712 Stored size: 721744
Current file modification time: 1642092896 (13-Jan-2022 13:54:56)
Stored file modification time : 1612283756 (02-Feb-2021 13:35:56)
Warning: The file properties have changed:
File: /usr/local/bin/passwd
Current hash: 0b8530bf5149a03d9cfffc3f31a415375f2925601e9c15af27e2f4a5bb2b69b8
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Warning: The file properties have changed:
File: /usr/lib/systemd/systemd
Current hash: 4496a5f28b240cf12a61fd4bd3b8a46641ec6e08ad381076972028e1459d12c2
Stored hash : 625836c224c80acfd1759086bc1ea3a1b1fa5dc24e8b08b73c09d792f1869ca9
Current inode: 20717570 Stored inode: 20718561
Current size: 1632960 Stored size: 1632744
Current file modification time: 1642092896 (13-Jan-2022 13:54:56)
Stored file modification time : 1612283756 (02-Feb-2021 13:35:56)
Warning: The file properties have changed:
File: /usr/local/cpanel/bin/jail_safe_passwd
Current hash: 0b8530bf5149a03d9cfffc3f31a415375f2925601e9c15af27e2f4a5bb2b69b8
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Current inode: 21108254 Stored inode: 21107907
Current size: 3367448 Stored size: 3379392
Current file modification time: 1643870820 (03-Feb-2022 03:47:00)
Stored file modification time : 1622087181 (26-May-2021 23:46:21)
----------------------- End Rootkit Hunter Scan -----------------------
--1648188520-eximdsn-1068500152--