Monitoring Novembre 2017

monitoring@federez.net

10 participants
148 discussions

Cron <root@dodecagon> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )

par root＠federez.net

/etc/cron.weekly/ssl-cert-check: ERROR: The file named /var/tmp/cert.qIDKnb is unreadable or doesn't exist ERROR: Please check to make sure the certificate for ldap-ro.federez.net:636 is valid

7 années, 5 mois

2 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Sat, 11 Nov 2017 22:38:06 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libruby2.3 2.3.3-1+deb9u2 ruby2.3 2.3.3-1+deb9u2 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour ruby2.3 (libruby2.3 ruby2.3) --- ruby2.3 (2.3.3-1+deb9u2) stretch-security; urgency=high * asn1: fix out-of-bounds read in decoding constructed objects [CVE-2017-14033] (Closes: #875928) Original patch by Kazuki Yamaguchi; backported from the standalone openssl package * lib/webrick/log.rb: sanitize any type of logs [CVE-2017-10784] (Closes: #875931) Original patch by Yusuke Endoh; backported to Ruby 2.3 by Usaku NAKAMURA * fix Buffer underrun vulnerability in Kernel.sprintf [CVE-2017-0898] (Closes: #875936) Backported to Ruby 2.3 by Usaku NAKAMURA * Whitelist classes and symbols that are in Gem spec YAML [CVE-2017-0903] (Closes: #879231) Original patch by Aaron Patterson; backported from the standalone Rubygems package * thread_pthread.c: do not wakeup inside child processes Avoid child Ruby processed being stuck in a busy loop (Closes: #876377) Original patch by Eric Wong -- Antonio Terceiro <terceiro(a)debian.org> Sun, 22 Oct 2017 12:45:48 -0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

7 années, 5 mois

Undelivered Mail Returned to Sender

par MAILER-DAEMON＠nonagon.crans.org

This is the mail system at host nonagon.crans.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system <monitoring(a)federez.net> (expanded from <root>): host smtp.crans.org[138.231.136.39] said: 550 5.1.0 <root(a)nonagon.crans.org>: Sender address rejected: User unknown in relay recipient table (in reply to RCPT TO command)

7 années, 5 mois

Cron <root@quigon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

Failed authorization procedure. ldap-ro.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ldap-ro.federez.net/.well-known/acme-challenge/f-vL2cqM7uCBc0l1L-w2r…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p", wiki-backup.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://wiki-backup.federez.net/.well-known/acme-challenge/77z6zkntg5sbKCo5-…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p"

7 années, 5 mois

Cron <root@quigon> /root/scripts/renew_letsencrypt_certificates.sh 1>/dev/null

par root＠quigon.rez-gif.supelec.fr

Failed authorization procedure. ldap-ro.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ldap-ro.federez.net/.well-known/acme-challenge/1Pir1iyOKLNfMCwbnq1ES…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p", wiki-backup.federez.net (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://wiki-backup.federez.net/.well-known/acme-challenge/5S6rAC3dbKxK5LMZI…: "<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p"

7 années, 5 mois

BANNED contents (.exe, .exe-ms, Proforma Invoice SO-012720180005 TT Slip Pdf.exe) in mail FROM [212.237.35.50]:50492 <HuongLe012@gmail.com>

par Content-filter＠quigon.federez.net

No viruses were found. Banned name: .exe,.exe-ms,Proforma Invoice SO-012720180005 TT Slip Pdf.exe Content type: Banned Internal reference code for the message is 22462-11/jke5d1rIu98x First upstream SMTP client IP address: [212.237.35.50] According to a 'Received:' trace, the message apparently originated at: [212.237.16.217], 11t10.com unknown [212.237.35.50] Return-Path: <HuongLe012(a)gmail.com> From: "Huong Le"<HuongLe012(a)gmail.com> Subject: Fw: Re: PI no. SO-012720180005 The message has been quarantined as: j/banned-jke5d1rIu98x The message WAS NOT relayed to: <admin(a)federez.net>: 554 5.7.0 Bounce, id=22462-11 - BANNED: .exe,.exe-ms,Proforma Invoice SO-012720180005 TT Slip Pdf.exe

7 années, 5 mois

monit alert -- Execution failed mailman

par monit＠quigon.federez.net

Execution failed Service mailman Date: Thu, 09 Nov 2017 06:27:38 Action: alert Host: quigon.federez.net Description: failed to start (exit status 0) -- no output Monit, unique employé de federez,

7 années, 5 mois

monit alert -- Does not exist mailman

par monit＠quigon.federez.net

Does not exist Service mailman Date: Thu, 09 Nov 2017 06:27:07 Action: restart Host: quigon.federez.net Description: process is not running Monit, unique employé de federez,

7 années, 5 mois

BANNED contents (.exe, .exe-ms, Proforma Invoice SO-01201800025 TT Slip Pdf.exe) in mail FROM [212.237.35.50]:51540 <HuongLe012@gmail.com>

par Content-filter＠quigon.federez.net

No viruses were found. Banned name: .exe,.exe-ms,Proforma Invoice SO-01201800025 TT Slip Pdf.exe Content type: Banned Internal reference code for the message is 22462-08/3_ooJcVzhTT8 First upstream SMTP client IP address: [212.237.35.50] According to a 'Received:' trace, the message apparently originated at: [212.237.16.217], 11t10.com unknown [212.237.35.50] Return-Path: <HuongLe012(a)gmail.com> From: "Huong Le"<HuongLe012(a)gmail.com> Subject: Fw: Re: PI no. SO-01201800025 The message has been quarantined as: 3/banned-3_ooJcVzhTT8 The message WAS NOT relayed to: <admin(a)federez.net>: 554 5.7.0 Bounce, id=22462-08 - BANNED: .exe,.exe-ms,Proforma Invoice SO-01201800025 TT Slip Pdf.exe

7 années, 5 mois

BANNED contents (.exe, .exe-ms, Proforma Invoice SO-01201800025 TT Slip Pdf.exe) in mail FROM [212.237.35.50]:57834 <HuongLe012@gmail.com>

par Content-filter＠quigon.federez.net

No viruses were found. Banned name: .exe,.exe-ms,Proforma Invoice SO-01201800025 TT Slip Pdf.exe Content type: Banned Internal reference code for the message is 22463-07/kN5mdaGmrx2H First upstream SMTP client IP address: [212.237.35.50] According to a 'Received:' trace, the message apparently originated at: [212.237.16.217], 11t10.com unknown [212.237.35.50] Return-Path: <HuongLe012(a)gmail.com> From: "Huong Le"<HuongLe012(a)gmail.com> Subject: Fw: Re: PI no. SO-01201800025 The message has been quarantined as: k/banned-kN5mdaGmrx2H The message WAS NOT relayed to: <admin(a)federez.net>: 554 5.7.0 Bounce, id=22463-07 - BANNED: .exe,.exe-ms,Proforma Invoice SO-01201800025 TT Slip Pdf.exe

7 années, 5 mois

Aller à la page :

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Novembre 2017