[Eisfair] Wer fährt meinen Server runter?

Sa Mai 14 09:48:25 CEST 2016

Hallo,

vor 2 Wochen schonmal und nun auch heute nacht wurde mein Server 
runtergefahren und ich verstehe nicht wieso. War das ein cron-Job? 
(finde keinen entsprechenden!) clamav ?

jetzt bin ich echt gespannt...

Viele Grüße
Alex

May 14 03:25:20 myeis clamd[23173]: XMLDOCS support enabled.
May 14 03:25:20 myeis clamd[23173]: HWP3 support enabled.
May 14 03:25:20 myeis clamd[23173]: Self checking disabled.
May 14 03:26:56 myeis imapd[24371]: imaps SSL service init from 10.179.59.28
May 14 03:26:56 myeis imapd[24371]: Logout user=??? host=[10.179.59.28]
May 14 03:28:00 myeis fcron[25065]: Job '/var/owncloud/owncloud-cron.sh' 
started for user wwwrun (pid 25074)
May 14 03:28:04 myeis fcron[25065]: Job '/var/owncloud/owncloud-cron.sh' 
completed
May 14 03:30:00 myeis fcron[26476]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' started for user root 
(pid 26485)
May 14 03:30:02 myeis fcron[26476]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' completed
May 14 03:30:02 myeis shutdown[26583]: shutting down for system halt
May 14 03:30:02 myeis init: Switching to runlevel: 0
May 14 03:30:02 myeis login: pam_unix(login:session): session closed for 
user root
May 14 03:30:04 myeis FaxQueuer[4795]: QUIT
May 14 03:30:04 myeis init: Re-reading inittab
May 14 03:30:04 myeis fcrontab[26911]: installing file /tmp/fcr-NGT9Fd 
for user root
May 14 03:30:04 myeis fcron[4694]: updating configuration from 
/var/spool/fcron
May 14 03:30:04 myeis fcron[4694]: adding new file root
May 14 03:30:04 myeis fcrontab[26929]: installing file /tmp/fcr-nOSYhh 
for user wwwrun
May 14 03:30:04 myeis fcron[4694]: updating configuration from 
/var/spool/fcron
May 14 03:30:04 myeis fcron[4694]: adding new file wwwrun
May 14 03:30:04 myeis fcron[4694]: SIGTERM signal received
May 14 03:30:05 myeis fcron[4694]: Exiting with code 0
May 14 03:30:07 myeis fcron[26964]: fcron[26964] 3.2.0 started
May 14 03:30:07 myeis fcron[26964]: @reboot jobs will only be run at 
computer's startup.
May 14 03:30:07 myeis fcron[26964]: updating configuration from 
/var/spool/fcron
May 14 03:30:07 myeis fcron[26964]: adding file wwwrun
May 14 03:30:07 myeis fcron[26964]: adding file root
May 14 03:30:07 myeis mini_httpd[6670]: exiting due to signal 15
May 14 03:30:13 myeis /usr/sbin/faxquit[27317]: FIFO: open: No such 
device or address
May 14 03:30:15 myeis OVPN_server[6446]: event_wait : Interrupted system 
call (code=4)
May 14 03:30:15 myeis OVPN_server[6446]: TCP/UDP: Closing socket
May 14 03:30:15 myeis OVPN_server[6446]: ERROR: Linux route delete 
command failed: shell command exited with error status: 7
May 14 03:30:15 myeis OVPN_server[6446]: Closing TUN/TAP interface
May 14 03:30:15 myeis OVPN_server[6446]: SIGTERM[hard,] received, 
process exiting
May 14 03:30:15 myeis xinetd[2742]: Starting reconfiguration
May 14 03:30:15 myeis xinetd[2742]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.conf] [line=7]
May 14 03:30:15 myeis xinetd[2742]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=25]
May 14 03:30:15 myeis xinetd[2742]: Reading included configuration file: 
/etc/xinetd.d/sedXAiUPA [file=/etc/xinetd.d/sedXAiUPA] [line=25]
May 14 03:30:15 myeis xinetd[2742]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=0]
May 14 03:30:15 myeis xinetd[2742]: Reading included configuration file: 
/etc/xinetd.d/time [file=/etc/xinetd.d/time] [line=15]
May 14 03:30:15 myeis xinetd[2742]: Swapping defaults
May 14 03:30:15 myeis xinetd[2742]: readjusting service ssh
May 14 03:30:15 myeis xinetd[2742]: readjusting service time-stream
May 14 03:30:15 myeis xinetd[2742]: readjusting service time-dgram
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4 server 15122
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4 server 23948
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4 server 23949
May 14 03:30:15 myeis xinetd[2742]: service imap4 deactivated
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 22045
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 20336
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 20712
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 20755
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 20838
May 14 03:30:15 myeis xinetd[2742]: Sending signal 9 to imap4s server 19272
May 14 03:30:15 myeis xinetd[2742]: service imap4s deactivated
May 14 03:30:15 myeis xinetd[2742]: Reconfigured: new=0 old=3 dropped=2 
(services)
May 14 03:30:15 myeis xinetd[2742]: unknown child process 22045 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 20336 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 20712 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 20755 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 20838 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 19272 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 15122 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 23948 died
May 14 03:30:15 myeis xinetd[2742]: unknown child process 23949 died
May 14 03:30:30 myeis squid[5758]: Squid Parent: child process 5760 
exited with status 0
May 14 03:30:32 myeis fcrontab[27926]: installing file /tmp/fcr-OPuhmk 
for user root
May 14 03:30:32 myeis fcron[26964]: updating configuration from 
/var/spool/fcron
May 14 03:30:32 myeis fcron[26964]: adding new file root
May 14 03:30:32 myeis fcrontab[27944]: installing file /tmp/fcr-oh4Uom 
for user wwwrun
May 14 03:30:32 myeis fcron[26964]: updating configuration from 
/var/spool/fcron
May 14 03:30:32 myeis fcron[26964]: adding new file wwwrun
May 14 03:30:32 myeis fcron[26964]: SIGTERM signal received
May 14 03:30:32 myeis fcron[26964]: Exiting with code 0
May 14 03:30:34 myeis fcron[27967]: fcron[27967] 3.2.0 started
May 14 03:30:34 myeis fcron[27967]: @reboot jobs will only be run at 
computer's startup.
May 14 03:30:34 myeis fcron[27967]: updating configuration from 
/var/spool/fcron
May 14 03:30:34 myeis fcron[27967]: adding file wwwrun
May 14 03:30:34 myeis fcron[27967]: adding file root
May 14 03:30:34 myeis BFB[28103]: Brute_Force_Blocking wurde gestoppt
May 14 03:30:38 myeis xinetd[2742]: Exiting...
May 14 03:30:40 myeis xinetd[28194]: Reading included configuration 
file: /etc/xinetd.d/imap [file=/etc/xinetd.conf] [line=7]
May 14 03:30:40 myeis xinetd[28194]: Reading included configuration 
file: /etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=25]
May 14 03:30:40 myeis xinetd[28194]: Reading included configuration 
file: /etc/xinetd.d/sedXAiUPA [file=/etc/xinetd.d/sedXAiUPA] [line=25]
May 14 03:30:40 myeis xinetd[28194]: Reading included configuration 
file: /etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=0]
May 14 03:30:40 myeis xinetd[28194]: Reading included configuration 
file: /etc/xinetd.d/time [file=/etc/xinetd.d/time] [line=15]
May 14 03:30:40 myeis xinetd[28194]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
May 14 03:30:40 myeis xinetd[28194]: Started working: 2 available services
May 14 03:30:40 myeis xinetd[28194]: Exiting...
May 14 03:30:40 myeis fcron[27967]: SIGTERM signal received
May 14 03:30:40 myeis fcron[27967]: Exiting with code 0
May 14 03:30:41 myeis exiting on signal 15

---
Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
https://www.avast.com/antivirus