26
Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço em Disco OK Dmesg OK Logs OK Dat Anti-Vírus OK Top - Memória / Processos / Carga OK Processos OK Portas Tcp Udp Abertas OK MRTG - Tráfego OK MRTG - Processador OK Ipaudit Diário OK Ipaudit Semanal OK Squid Reports - TopSites OK Squid Reports - TopUsers OK Nagios - Disponibilidade HTTP 100,00% Nagios - Disponibilidade SMTP 99,95%

Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Relatório Semanal U&M - InvestLinux – 17/12/2012

Uptime / Last OK

Espaço em Disco OK

Dmesg OK

Logs OK

Dat Anti-Vírus OK

Top - Memória / Processos / Carga OK

Processos OK

Portas Tcp Udp Abertas OK

MRTG - Tráfego OK

MRTG - Processador OK

Ipaudit Diário OK

Ipaudit Semanal OK

Squid Reports - TopSites OK

Squid Reports - TopUsers OK

Nagios - Disponibilidade HTTP 100,00%

Nagios - Disponibilidade SMTP 99,95%

Page 2: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Uptime / LastUptime (Tempo Online do Servidor) Last (Conexões remotas)

[root@uem-gw]# uptime 07:28:38 up 83 days, 21:42, 1 user, load average: 0.81, 0.58, 0.56

[root@uem-gw]# last | sort -k 3 | moreuem ftpd27417 177.87.162.114 Wed Dec 5 01:48 - 01:48 (00:00) uem ftpd27418 177.87.162.114 Wed Dec 5 01:48 - 01:58 (00:10) uem ftpd27495 177.87.162.114 Wed Dec 5 01:50 - 01:50 (00:00) il-adm pts/0 187.109.112.9 Fri Dec 7 09:35 - 09:55 (00:19) il-adm pts/0 187.109.112.9 Mon Dec 10 07:40 - 16:24 (08:44) il-adm pts/1 187.109.112.9 Mon Dec 10 11:39 - 13:26 (01:47) il-adm pts/0 187.109.112.9 Mon Dec 17 07:28 still logged in il-adm pts/0 187.109.112.9 Mon Dec 3 14:57 - 17:23 (02:26) il-adm pts/0 187.109.112.9 Mon Dec 3 19:44 - 22:34 (02:49) il-adm pts/0 187.109.112.9 Mon Dec 3 23:08 - 23:32 (00:24) il-adm pts/0 187.109.112.9 Thu Dec 13 15:55 - 17:50 (01:55) il-adm pts/0 187.109.112.9 Thu Dec 6 11:17 - 11:38 (00:21) il-adm pts/0 187.109.112.9 Thu Dec 6 14:45 - 22:50 (08:04) il-adm pts/2 187.109.112.9 Thu Dec 6 16:03 - 22:50 (06:46) il-adm pts/0 187.109.112.9 Tue Dec 11 11:24 - 14:16 (02:51) il-adm pts/0 187.109.112.9 Tue Dec 11 16:52 - 17:23 (00:31) il-adm pts/1 187.109.112.9 Tue Dec 11 16:54 - 17:23 (00:29) il-adm pts/0 187.109.112.9 Tue Dec 4 16:13 - 17:18 (01:05) il-adm pts/0 187.109.112.9 Wed Dec 12 15:20 - 16:15 (00:55) il-adm pts/0 187.109.112.9 Wed Dec 5 18:43 - 21:46 (03:03) il-adm pts/1 187.109.112.9 Wed Dec 5 18:49 - 21:46 (02:57) uem ftpd25323 189.3.236.211 Fri Dec 14 08:26 - 08:36 (00:09) uem ftpd31708 189.3.236.211 Fri Dec 14 17:40 - 17:50 (00:10) uem ftpd3022 189.3.236.211 Fri Dec 14 17:52 - 17:52 (00:00) uem ftpd3026 189.3.236.211 Fri Dec 14 17:53 - 17:53 (00:00) uem ftpd4193 189.3.236.211 Mon Dec 3 09:05 - 09:05 (00:00) uem ftpd4209 189.3.236.211 Mon Dec 3 09:06 - 09:16 (00:10) uem ftpd7920 189.3.236.211 Mon Dec 3 09:23 - 09:24 (00:00) uem ftpd7922 189.3.236.211 Mon Dec 3 09:24 - 09:26 (00:02) uem ftpd8486 189.3.236.211 Mon Dec 3 09:30 - 09:36 (00:05) uem ftpd15802 189.3.236.211 Mon Dec 3 10:27 - 10:37 (00:10) uem ftpd16664 189.3.236.211 Mon Dec 3 10:42 - 10:47 (00:05) uem ftpd18170 189.3.236.211 Mon Dec 3 11:12 - 11:22 (00:10) uem ftpd10457 189.3.236.211 Mon Dec 3 14:46 - 14:56 (00:10) uem ftpd11320 189.3.236.211 Mon Dec 3 15:01 - 15:06 (00:04) uem ftpd12521 189.3.236.211 Mon Dec 3 15:16 - 15:26 (00:10) uem ftpd16860 189.3.236.211 Mon Dec 3 15:34 - 15:36 (00:01) uem ftpd3831 189.3.236.211 Sat Dec 1 10:56 - 10:56 (00:00) uem ftpd3854 189.3.236.211 Sat Dec 1 10:56 - 11:06 (00:10) uem ftpd4489 189.3.236.211 Sat Dec 1 11:09 - 11:16 (00:07) uem ftpd10366 189.3.236.211 Sat Dec 1 11:35 - 11:45 (00:10) uem ftpd18980 189.3.236.211 Sat Dec 1 12:55 - 13:05 (00:10) uem ftpd24515 189.3.236.211 Sat Dec 1 17:48 - 18:00 (00:12) uem ftpd24970 189.3.236.211 Sat Dec 1 17:58 - 18:00 (00:01)

Espaço em Disco[root@uem-gw]# df -hSist. Arq. Tam Usad Disp Uso% Montado em/dev/sda3 38G 28G 7,9G 78% /varrun 1014M 268K 1014M 1% /var/runvarlock 1014M 0 1014M 0% /var/lockudev 1014M 52K 1014M 1% /devdevshm 1014M 0 1014M 0% /dev/shm/dev/sdb1 50G 21G 27G 45% /backup/dev/sda1 471M 140M 308M 32% /boot//192.168.0.105/Pessoal 20G 16G 4,1G 80% /ftp/Pessoal//192.168.0.105/Public 200G 169G 32G 85% /ftp/Public//192.168.0.105/Restrito 200G 169G 32G 85% /home/Restrito//192.168.0.100/CorporeRM 47G 23G 25G 48% /home/ponto//192.168.0.105/BKP-linux 30G 17G 14G 55% /backup-remoto

Page 3: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Dmesg

Dmesg – Alertas de Console (Eventuais Erros de Disco, Rede, Hardware em geral)- Sem informações relevantes -

Logs

Verificação superficial de logs do sistema: ( syslog(tmsys) / secure(tms) / squid(tmsq) )

Dat Anti-Vírus

[root@uem-gw]# freshclamClamAV update process started at Mon Dec 17 07:45:53 2012main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)daily.cld is up to date (version: 15866, sigs: 345564, f-level: 63, builder: neo)bytecode.cld is up to date (version: 208, sigs: 41, f-level: 63, builder: neo)

Semana Anterior:ClamAV update process started at Mon Dec 10 07:48:17 2012 main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven) daily.cld is up to date (version: 15708, sigs: 297527, f-level: 63, builder: jesler) bytecode.cld is up to date (version: 203, sigs: 40, f-level: 63, builder: neo)

Top - Memória / Processos / Carga- Sem informações relevantes -

Processos- Sem informações relevantes -

Portas Tcp Udp Abertas[root@uem-gw]# netstat -ap | grep LISTEN | grep -v STREAMtcp 0 0 localhost:60000 *:* LISTEN 6846/postgrey.pid -tcp 0 0 192.168.0.1:5666 *:* LISTEN 3742/nrpe tcp 0 0 *:10050 *:* LISTEN 9156/zabbix_agentdtcp 0 0 localhost:zebra *:* LISTEN 9546/zebra tcp 0 0 *:rsync *:* LISTEN 7421/rsync tcp 0 0 localhost:mysql *:* LISTEN 6726/mysqld tcp 0 0 localhost:bgpd *:* LISTEN 9550/bgpd tcp 0 0 *:webmin *:* LISTEN 9186/perl tcp 0 0 *:81 *:* LISTEN 19765/apache2 tcp 0 0 *:bgp *:* LISTEN 9550/bgpd tcp 0 0 *:ftp *:* LISTEN 1602/proftpd: (accetcp 0 0 200.199.9.234:domain *:* LISTEN 18612/named tcp 0 0 200.216.228.210:domain *:* LISTEN 18612/named tcp 0 0 177.38.168.1:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.29:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.27:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.25:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.23:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.21:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.19:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.17:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.15:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.13:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.11:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.9:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.7:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.3:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.5:domain *:* LISTEN 18612/named tcp 0 0 10.0.0.1:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.28:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.29:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.12:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.50:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.11:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.10:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.9:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.8:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.7:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.6:domain *:* LISTEN 18612/named

Page 4: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

tcp 0 0 200.243.57.4:domain *:* LISTEN 18612/named tcp 0 0 200.243.57.3:domain *:* LISTEN 18612/named tcp 0 0 correio.uem.com.:domain *:* LISTEN 18612/named tcp 0 0 uemnotes.uem.com:domain *:* LISTEN 18612/named tcp 0 0 192.168.0.2:domain *:* LISTEN 18612/named tcp 0 0 192.168.0.1:domain *:* LISTEN 18612/named tcp 0 0 localhost:domain *:* LISTEN 18612/named tcp 0 0 *:ssh *:* LISTEN 854/sshd tcp 0 0 *:3128 *:* LISTEN 5515/(squid) tcp 0 0 *:smtp *:* LISTEN 7400/master tcp 0 0 *:1723 *:* LISTEN 7408/pptpd tcp6 0 0 [::]:rsync [::]:* LISTEN 7421/rsync tcp6 0 0 [::]:bgp [::]:* LISTEN 9550/bgpd tcp6 0 0 [::]:domain [::]:* LISTEN 18612/named tcp6 0 0 [::]:ssh [::]:* LISTEN 854/sshd tcp6 0 0 ip6-localhost:953 [::]:* LISTEN 18612/named Obs: Comando mostra na quarta coluna, preferencialmente, o nome do serviço após o caracter “:”.

root@uem-gw:~# netstat -nap | grep LISTEN | grep -v STREAMtcp 0 0 127.0.0.1:60000 0.0.0.0:* LISTEN 6846/postgrey.pid -tcp 0 0 192.168.0.1:5666 0.0.0.0:* LISTEN 3742/nrpe tcp 0 0 0.0.0.0:10050 0.0.0.0:* LISTEN 9156/zabbix_agentdtcp 0 0 127.0.0.1:2601 0.0.0.0:* LISTEN 9546/zebra tcp 0 0 0.0.0.0:873 0.0.0.0:* LISTEN 7421/rsync tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 6726/mysqld tcp 0 0 127.0.0.1:2605 0.0.0.0:* LISTEN 9550/bgpd tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 9186/perl tcp 0 0 0.0.0.0:81 0.0.0.0:* LISTEN 19765/apache2 tcp 0 0 0.0.0.0:179 0.0.0.0:* LISTEN 9550/bgpd tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 1602/proftpd: (accetcp 0 0 200.199.9.234:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.216.228.210:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 177.38.168.1:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.29:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.27:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.25:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.23:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.21:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.19:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.17:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.15:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.13:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.11:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.9:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.7:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.3:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.5:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 10.0.0.1:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.28:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.29:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.12:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.50:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.11:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.10:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.9:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.8:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.7:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.6:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.4:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.3:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.2:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 200.243.57.5:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 192.168.0.2:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 192.168.0.1:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 18612/named tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 854/sshd tcp 0 0 0.0.0.0:3128 0.0.0.0:* LISTEN 5515/(squid) tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 18612/named tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 7400/master tcp 0 0 0.0.0.0:1723 0.0.0.0:* LISTEN 7408/pptpd tcp6 0 0 :::873 :::* LISTEN 7421/rsync tcp6 0 0 :::179 :::* LISTEN 9550/bgpd tcp6 0 0 :::53 :::* LISTEN 18612/named tcp6 0 0 :::22 :::* LISTEN 854/sshd tcp6 0 0 ::1:953 :::* LISTEN 18612/named Obs: Comando mostra na quarta coluna a porta do serviço após o caracter “:”.

Page 5: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

MRTG - Tráfego*

Internet – eth1

Roteador Embratel

Link Oi – eth2

VPN Yamana – tun1

Page 6: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

VPN Juruti

VPN Rio Capim – tun4

VPN Zâmbia – tun6

VPN Carajás – tun7

Page 7: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Roteador Jangada – 189.52.77.26

Page 8: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UeM ADM – CPU Utilization

UeM ADM – Load

UeM GW – CPU Utilization

UeM GW – Load

*Os gráficos foram comparados com os da semana anterior. Em caso de alteração significativa, é feita a análise de possível problema e relatado como observação abaixo do mesmo.Os Gráficos não comentados foram considerados normais. Caso queira análise de algum específico, basta fazer o pedido.

Page 9: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Ipaudit Diário

- Sem informações relevantes -

Ipaudit Semanal (Top 10)

IPHost Name Incoming

(bytes)Outgoing

(bytes)Total

(bytes)

200.243.057.002 correio.uem.com.br 85,635,867,736 35,744,978,603 121,380,846,339

200.243.057.005 uemnotes.uem.com.br 24,246,165,353 66,079,639,296 90,325,804,649

192.168.000.001 - 16,020,528,158 36,460,278,764 52,480,806,922

192.168.000.065 - 14,552,250,921 16,259,641,146 30,811,892,067

200.243.057.011 - 19,803,952,109 7,528,520,239 27,332,472,348

200.243.057.008 - 17,381,931,363 9,863,251,736 27,245,183,099

192.168.000.099 - 15,495,730,250 10,287,106,752 25,782,837,002

192.168.000.042 - 12,336,807,984 7,426,010,062 19,762,818,046

192.168.000.103 uemnotes.uem.com.br 6,869,941,551 8,704,043,700 15,573,985,251

192.168.000.107 uemantspam.uem.com.br 4,525,614,500 2,058,602,727 6,584,217,227

Squid Reports Semanal – 09/12/2012 a 15/12/2012

Squid Reports – TopSites

NUM ACCESSED SITE CONNECT BYTES TIME

1 au.download.windowsupdate.com 300.67K 9.93G 931.06M

2 s.glbimg.com 262.59K 932.77M 85.00M

3 osce80-en.url.trendmicro.com 200.52K 135.92M 78.65M

4 s2.glbimg.com 192.81K 786.03M 99.86M

5 www.google-analytics.com 59.66K 41.56M 9.30M

6 www.google.com 52.38K 1.14G 137.43M

7 download.windowsupdate.com 49.60K 1.06G 189.73M

8 mail.yimg.com 44.47K 165.49M 31.25M

9 www.google.com.br 41.06K 525.43M 68.99M

10 ads.img.globo.com 37.99K 166.18M 30.13M

11 pagead2.googlesyndication.com 34.29K 359.28M 34.17M

12 clients1.google.com.br 34.06K 27.65M 9.20M

13 ads.globo.com 32.26K 29.02M 5.15M

14 www.receita.fazenda.gov.br 32.10K 289.80M 187.77M

15 oss-content.securestudies.com 30.21K 8.63M 15.70M

16 l.yimg.com 29.48K 152.54M 35.53M

17 googleads.g.doubleclick.net 23.87K 76.10M 14.22M

18 www.beforward.jp 23.49K 207.06M 69.89M

19 b.scorecardresearch.com 22.93K 11.07M 8.20M

20 ad.doubleclick.net 21.49K 33.48M 7.40M

Page 10: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Squid Reports – TopUsers

Squid Reports – Tentativas de acesso a Sites Indevidos

LOCAL ACESSADO IPwww.assistatvonline.com 192.168.16.112www.bigpenisguide.com 192.168.12.134www.jfsexy.com.br 192.168.0.17www.novinhacaiunanet.com 192.168.17.222www.novinhasafada.com.br 192.168.17.222www.tvonlinegratis.tv 192.168.16.112

Obs1: Foi acrescentada a expressão “www.novinha” ao arquivo /etc/squid/site_proibido.txt a fim de impedir o acesso de sites relacionados.

Page 11: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Trend Micro - InterScan Messaging Security Suite

DADOS DO SISTEMA

NOME VERSÃO CORRENTE DISPONÍVEL VERSÃO ANTERIORScan engine 9.700.1001 9.700.1001 9.700.1001Virus pattern 9.599.00 9.599.00 9.585.00Spyware/grayware pattern 1.355.00 1.355.00 1.353.00IntelliTrap pattern 0.167.00 0.167.00 0.167.00IntelliTrap exceptions 0.829.00 0.829.00 0.827.00Anti-spam engine 6.800.1017 6.800.1017 6.800.1017Spam pattern 19456.006 19456.006 19438.002URL Filtering Engine 3.500.1047 3.000.1029 3.500.1047

GRÁFICOS – PERÍODO 09/12/2012 A 15/12/2012

Scanning ConditionsTotal Message % Incoming Outgoing

Total message count 103629 100.00 98568 5061

Virus or malicious code 0 0.00 0 0

Spyware/grayware 0 0.00 0 0

Spam 14126 13.63 14120 6

Phish 0 0.00 0 0

Suspicious URLs - Web Reputation 0 0.00 0 0

DKIM enforcement 0 0.00 0 0

Attachment 17 0.02 14 3

Size 0 0.00 0 0

Content 300 0.29 279 21

Compliance 0 0.00 0 0

Others 0 0.00 0 0

Scanning exceptions 1 0.00 1 0

Spam Tagged by Cloud Pre-Filter 0 0.00 0 0

IP Profiler 914 0.88 914 0

Email reputation 64127 61.88 64127 0

Clean email 24144 23.30 19113 5031

Trend Micro Email Encryption 0 0.00 0 0

Spam by Action

Page 12: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Spam ActionsDetections Message % Size (MB)

Total spam message count 79167 100.00 265.265

Quarantined 14126 17.84 265.265

Deleted 0 0.00 0.000

Tagged 14125 17.84 265.263

Other 0 0.00 0.000

Rejected by Email reputation 64127 81.00 N/A

Rejected by IP Profiler 914 1.15 N/A

Top 10 Spam RecipientsRecipient Total Message Count Total Spam Msgs Spam Msgs % Spam Size (MB) Spam Size %

[email protected] 922 328 35.57 8.239 [email protected] 438 263 60.05 7.801 [email protected] 489 252 51.53 5.466 [email protected] 533 249 46.72 3.478 [email protected] 429 245 57.11 5.619 [email protected] 350 241 68.86 3.808 [email protected] 547 239 43.69 16.627 [email protected] 480 208 43.33 7.522 [email protected] 434 206 47.47 4.509 10.32

[email protected] 356 201 56.46 3.559 25.92

Virus and Malicious Code Summary

Detections Message %

Total detections 0 0.00

Messages deleted 0 0.00

Messages quarantined 0 0.00

Attachments cleaned 0 0.00

Messages with attachments deleted 0 0.00

Messages blocked by IP Profiler 0 0.00

Top 10 Virus and Malicious Code Detections1N/A 02N/A 03N/A 04N/A 05N/A 06N/A 07N/A 08N/A 09N/A 0

10N/A 0

Top 10 Virus RecipientsRecipient Total Message Count Total Virus Msgs Virus Msgs % Virus Size (MB) Virus Size %

1N/A 0 0 0.00 0.000 0.002N/A 0 0 0.00 0.000 0.003N/A 0 0 0.00 0.000 0.004N/A 0 0 0.00 0.000 0.005N/A 0 0 0.00 0.000 0.006N/A 0 0 0.00 0.000 0.007N/A 0 0 0.00 0.000 0.008N/A 0 0 0.00 0.000 0.009N/A 0 0 0.00 0.000 0.00

10N/A 0 0 0.00 0.000 0.00

Page 13: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

CACTI – Gráficos

Período de 10/11/2012 a 17/12/2012

UEMFS

Page 14: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço
Page 15: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMICA

Page 16: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMNOTES

Page 17: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMPRD

*

Page 18: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço
Page 19: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMRMSA

Page 20: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço
Page 21: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Nagios

Disponibilidade – últimos 7 dias

Host Service % Time OK% Time Warning

% Time Unknown

% Time Critical

% Time Undetermined

internet_embratel Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

internet_oi Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

link-carajas Rede_Ping58.034% (58.034%)

0.000% (0.000%)

0.000% (0.000%)

41.966% (41.966%)

0.000%

link-ebt-jangada Rede_Ping98.552% (98.552%)

0.000% (0.000%)

0.000% (0.000%)

1.448% (1.448%)

0.000%

link-jangada Rede_Ping85.127% (85.127%)

0.000% (0.000%)

0.000% (0.000%)

14.873% (14.873%)

0.000%

link-juruti Rede_Ping85.790% (85.790%)

0.000% (0.000%)

0.000% (0.000%)

14.210% (14.210%)

0.000%

uem1_Rede_Ping86.388% (86.388%)

0.000% (0.000%)

0.000% (0.000%)

13.612% (13.612%)

0.000%

link-vlopes Rede_Ping98.832% (98.832%)

0.000% (0.000%)

0.000% (0.000%)

1.168% (1.168%)

0.000%

uem1_Rede_Ping99.856% (99.856%)

0.000% (0.000%)

0.000% (0.000%)

0.144% (0.144%)

0.000%

link-yamana Rede_Ping99.430% (99.430%)

0.000% (0.000%)

0.000% (0.000%)

0.570% (0.570%)

0.000%

uem1_Rede_Ping62.813% (62.813%)

0.000% (0.000%)

0.000% (0.000%)

37.187% (37.187%)

0.000%

link-zambia Rede_Ping99.640% (99.640%)

0.000% (0.000%)

0.000% (0.000%)

0.360% (0.360%)

0.000%

uem1_Rede_Ping99.869% (99.869%)

0.000% (0.000%)

0.000% (0.000%)

0.131% (0.131%)

0.000%

nagios_remoto Rede_Http99.729% (99.729%)

0.000% (0.000%)

0.000% (0.000%)

0.271% (0.271%)

0.000%

uem1_Rede_Http99.916% (99.916%)

0.000% (0.000%)

0.000% (0.000%)

0.084% (0.084%)

0.000%

router_cisco Rede_Ping99.802% (99.802%)

0.198% (0.198%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Telnet100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

storage-119 Rede_Ping99.056% (99.056%)

0.000% (0.000%)

0.000% (0.000%)

0.944% (0.944%)

0.000%

storage-120 Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

switch-3com-B Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

switch-3com-C Rede_Ping99.454% (99.454%)

0.546% (0.546%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

switch-3com-D Rede_Ping99.256% (99.256%)

0.744% (0.744%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

switch-3com-E Rede_Ping99.504% (99.504%)

0.496% (0.496%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

switch-3com-F Rede_Ping57.677% (57.677%)

0.000% (0.000%)

0.000% (0.000%)

42.323% (42.323%)

0.000%

uem-adm Local_Carga100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_Root100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Processos100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Users100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Http:82100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Page 22: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_SSH100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem-gw Local_Carga99.851% (99.851%)

0.149% (0.149%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_Root99.952% (99.952%)

0.000% (0.000%)

0.000% (0.000%)

0.048% (0.048%)

0.000%

Local_Disk_backup100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_bkpremoto

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_ftp_pessoal

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_ftp_public

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_home_ponto

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Disk_home_restrito

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Processos100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Local_Users100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Dns100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ftp100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Http:81100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_SSH100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Squid:3128100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Local_Disk_ftp_public

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Local_Disk_home_ponto

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemantspam-imss Rede_Ping99.010% (99.010%)

0.000% (0.000%)

0.000% (0.000%)

0.990% (0.990%)

0.000%

Rede_SSH99.007% (99.007%)

0.000% (0.000%)

0.000% (0.000%)

0.993% (0.993%)

0.000%

uemap-aplicacao Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uembes-blackberry Rede_Http99.088% (99.088%)

0.000% (0.000%)

0.000% (0.000%)

0.912% (0.912%)

0.000%

Rede_LotusDomino99.088% (99.088%)

0.000% (0.000%)

0.000% (0.000%)

0.912% (0.912%)

0.000%

Rede_Ping97.105% (97.105%)

0.496% (0.496%)

0.000% (0.000%)

2.398% (2.398%)

0.000%

uemdev Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_SAP100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemfs-fileserver Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_NetBios100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_NetBios100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemica-metaframe Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Metaframe100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Page 23: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Rede_TS100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Metaframe

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_TS100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemmine-database Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Sql100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Sql100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemnotes-correio Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Https100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ldap100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Smtp99.951% (99.951%)

0.000% (0.000%)

0.000% (0.000%)

0.049% (0.049%)

0.000%

uem1_Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Https100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Smtp99.901% (99.901%)

0.000% (0.000%)

0.000% (0.000%)

0.099% (0.099%)

0.000%

uemprd Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_SAP100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_SAP100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemrmsa-database Rede_Oracle100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Oracle100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uemvm-vmware Rede_Ping99.034% (99.034%)

0.000% (0.000%)

0.000% (0.000%)

0.966% (0.966%)

0.000%

vm-isodoc Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Rede_Postgresql100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Http100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Postgresql

100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

vpn-server-mk-lan Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

vpn-server-mk-wan Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

uem1_Rede_Ping100.000% (100.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000% (0.000%)

0.000%

Average98.152% (98.152%)

0.027% (0.027%)

0.000% (0.000%)

1.821% (1.821%)

0.000%

Page 24: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

Trend Micro - Office Scan

Update Status for Networked Computers

* itens marcados com a cor amarela possuem a mesma versão da semana anterior

Top 10 Security Risk Statistics for Networked Computers

Virus/Malware Statistics:

Virus/Malware

Name Infections

TSC_GENCLEAN 2314

TSPY_ZBOT.SKA 924

TROJ_SPNR.19G412 784

TROJ_ZEROA.SM2 546

Mal_OtorunN 467

TROJ_SIREFEF.EM 376

RTKT_ZACESS.SM11 341

Mal_Siref32 334

TROJ_SIREFEF.DD 301

TROJ_SIREFEF.QA 277

Last reset:22/5/2012 16:11:20

Infected Computers

Name Detections Log

USER-HP 995 View

UEMFS 478 View

UEM-SAFETY 332 View

UEMOP917 289 View

HP24565236893 276 View

UEMOP507 141 View

Page 25: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMOP709 123 View

UEMOP511 116 View

UEMOP804 102 View

UEMOP935 100 View

Last reset:22/5/2012 16:11:49

Infection Source

Name Detections

HP-DISPATCH2\ADMINISTRATOR 1210

HP33671896628\EDWIN SIKAKENA 349

HP33671896628\OLIVER CHILESHE 105

HP33671896628\GILLY NYIRENDA 98

192.168.9.242\ADMINISTRADOR 70

HP33671896628\LOMBE CHOMBA 64

U-92CFD590AD0D4\MAINTENANCE 45

UEMDEV\UEMSOTREQ 37

192.168.4.12\KEILLA REGINA 35

192.168.9.38\ADMINISTRADOR 34

Spyware/Grayware Statistics:

Spyware/Grayware

Name Infections

CRCK_KEYGEN 46

HKTL_KEYGEN 32

ADW_BHO 14

ADW_SCANNER 12

HKTL_CRACKCF 10

HKTL_USURF 9

ADW_SOLIMBA 7

CRCK_PATCH 6

CRCK_PATCHER 6

CRCK_CRACK 5

Last reset:22/5/2012 16:11:57

Infected Computers

Name Detections Log

UEMOP984 23 View

UEMFS 14 View

UEMOP928 12 View

UEMMBB262 12 View

UEMOP932 11 View

UEMOP954 9 View

Page 26: Relatório Semanal U&M - InvestLinux – 17/12/2012portal.uem.com.br/relatorio/2012/relatorio-uem... · Relatório Semanal U&M - InvestLinux – 17/12/2012 Uptime / Last OK Espaço

UEMOP511 8 View

UEMOP809 8 View

UEMOP979 7 View

UEMOP933 3 View

Last reset:22/5/2012 16:12:04