File: /home/w3com/mail/.amussi@w3_com_py/new/1652340307.H341072P23767.s3.yayogua.com.py,S=8174
Return-path: <>
Envelope-to: soporte@w3.com.py
Delivery-date: Thu, 12 May 2022 03:25:07 -0400
Received: from cloud.ecp.com.py ([108.161.128.167]:58066)
by s3.yayogua.com.py with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
id 1np3C3-00061V-GK
for soporte@w3.com.py; Thu, 12 May 2022 03:25:07 -0400
Received: from mailnull by cloud.ecp.com.py with local (Exim 4.95)
id 1np3BO-000AMK-U2
for root@cloud.ecp.com.py;
Thu, 12 May 2022 03:24:22 -0400
X-Failed-Recipients: root@localhost
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@cloud.ecp.com.py>
To: root@cloud.ecp.com.py
References: <E1np3BN-000ALd-P7@cloud.ecp.com.py>
Content-Type: multipart/report; report-type=delivery-status; boundary=1652340262-eximdsn-303301473
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1np3BO-000AMK-U2@cloud.ecp.com.py>
Date: Thu, 12 May 2022 03:24:22 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.ecp.com.py
X-AntiAbuse: Original Domain - cloud.ecp.com.py
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cloud.ecp.com.py: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cloud.ecp.com.py: mailnull
X-Source: /usr/lib/systemd/systemd
X-Source-Args: /usr/lib/systemd/systemd --switched-root --system --deserialize 22
X-Source-Dir: /
X-Spam-Status: No, score=-5.9
X-Spam-Score: -58
X-Spam-Bar: -----
X-Ham-Report: Spam detection software, running on the system "s3.yayogua.com.py",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients.
This is a permanent error. The following address(es) failed: [...]
Content analysis details: (-5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[108.161.128.167 listed in list.dnswl.org]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.2 KAM_LOTSOFHASH Emails with lots of hash-like gibberish
-0.0 T_SCC_BODY_TEXT_LINE No description available.
X-Spam-Flag: NO
--1652340262-eximdsn-303301473
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
root@localhost
retry timeout exceeded
--1652340262-eximdsn-303301473
Content-type: message/delivery-status
Reporting-MTA: dns; cloud.ecp.com.py
Action: failed
Final-Recipient: rfc822;root@localhost
Status: 5.0.0
--1652340262-eximdsn-303301473
Content-type: message/rfc822
Return-path: <root@cloud.ecp.com.py>
Received: from root by cloud.ecp.com.py with local (Exim 4.95)
(envelope-from <root@cloud.ecp.com.py>)
id 1np3BN-000ALd-P7
for root@localhost;
Thu, 12 May 2022 03:24:21 -0400
Date: Thu, 12 May 2022 03:24:21 -0400
To: root@localhost
Subject: rkhunter Daily Run on cloud.ecp.com.py
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <E1np3BN-000ALd-P7@cloud.ecp.com.py>
From: root <root@cloud.ecp.com.py>
--------------------- Start Rootkit Hunter Update ---------------------
[ Rootkit Hunter version 1.4.6 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ No update ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
Checking file i18n/ja [ No update ]
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: The file properties have changed:
File: /usr/sbin/init
Current inode: 20718641 Stored inode: 20718645
Warning: The file properties have changed:
File: /usr/sbin/rsyslogd
Current inode: 20719897 Stored inode: 20709448
Warning: The file properties have changed:
File: /usr/sbin/runlevel
Current inode: 20719117 Stored inode: 20719133
Warning: The file properties have changed:
File: /usr/sbin/sshd
Current inode: 20710315 Stored inode: 20719849
Warning: The file properties have changed:
File: /usr/bin/bash
Current inode: 20718124 Stored inode: 20709499
Warning: The file '/usr/bin/dpkg' exists on the system, but it is not present in the 'rkhunter.dat' file.
Warning: The file '/usr/bin/dpkg-query' exists on the system, but it is not present in the 'rkhunter.dat' file.
Warning: The file properties have changed:
File: /usr/bin/ldd
Current inode: 20719328 Stored inode: 20709547
Warning: The file properties have changed:
File: /usr/bin/rpm
Current inode: 20719223 Stored inode: 20720654
Warning: The file properties have changed:
File: /usr/bin/sh
Current inode: 20709836 Stored inode: 20710155
Warning: The file properties have changed:
File: /usr/bin/size
Current inode: 20710147 Stored inode: 20710156
Warning: The file properties have changed:
File: /usr/bin/ssh
Current inode: 20710227 Stored inode: 20709471
Warning: The file properties have changed:
File: /usr/bin/strings
Current inode: 20710156 Stored inode: 20710299
Warning: Package manager verification has failed:
File: /usr/bin/su
The file permissions have changed
The file group has changed
Warning: The file properties have changed:
File: /usr/bin/sudo
Current inode: 20713144 Stored inode: 20718614
Warning: The file properties have changed:
File: /usr/bin/systemctl
Current inode: 20709873 Stored inode: 20709877
Warning: The file properties have changed:
File: /usr/local/bin/passwd
Current hash: be54aae7a4bc3e260816451da848f7f89b8e7650dd61b3b320221e78d617a838
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Warning: The file properties have changed:
File: /usr/lib/systemd/systemd
Current inode: 20717570 Stored inode: 20718561
Warning: The file properties have changed:
File: /usr/local/cpanel/bin/jail_safe_passwd
Current hash: be54aae7a4bc3e260816451da848f7f89b8e7650dd61b3b320221e78d617a838
Stored hash : 9c385efe58efe70d1b367a81d69bf9e7f111a3ba9c91963d93baf86d14331a70
Current inode: 21108270 Stored inode: 21107907
Current size: 3389104 Stored size: 3379392
Current file modification time: 1648669754 (30-Mar-2022 15:49:14)
Stored file modification time : 1622087181 (26-May-2021 23:46:21)
----------------------- End Rootkit Hunter Scan -----------------------
--1652340262-eximdsn-303301473--