RootForum Community

Resources for System-Administrators
https://www.rootforum.org/forum/

Mail.err frage

https://www.rootforum.org/forum/viewtopic.php?t=46597

Page 1 of 1

Mail.err frage

Posted: 2007-07-24 22:07
by karadeniz
Hallo,

Ich hätte ne Frage, würde mich sehr freuen und währ sehr danbkar wenn ich eine Antwort bekommen würde,

Ich bekomme die Meldungen,

Code: Select all

Jul 24 11:00:20 server imapd: 1185267620.810115 DISCONNECTED, ip=[63.147.124.201], headers=0, body=0, rcvd=0, sent=278, maildir=/
Jul 24 11:02:00 server imapd: 1185267720.636531 DISCONNECTED, ip=[63.147.124.201], headers=0, body=0, rcvd=0, sent=278, maildir=/
Jul 24 11:02:00 server imapd: 1185267720.637773 DISCONNECTED, ip=[63.147.124.201], headers=0, body=0, rcvd=0, sent=278, maildir=/
Jul 24 11:02:00 server imapd: 1185267720.639465 DISCONNECTED, ip=[63.147.124.201], headers=0, body=0, rcvd=0, sent=278, maildir=/
Jul 24 11:02:00 server imapd: 1185267720.641210 DISCONNECTED, ip=[63.147.124.201], headers=0, body=0, rcvd=0, sent=278, maildir=/




davor hab ich die bekommen,

Code: Select all

Jul 15 03:13:18 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:13:18 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:13:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:14:33 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:14:39 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:14:56 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:02 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:08 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:13 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:19 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:25 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:31 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:36 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:42 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:42 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:48 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:15:54 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:00 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:17 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:29 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:34 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:34 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:40 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:45 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:46 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:51 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:52 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:57 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:16:57 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:03 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:09 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:15 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:21 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:26 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:32 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:38 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:43 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:49 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:17:55 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:18:00 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:18:18 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:18:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:18:53 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:18:59 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:05 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:10 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:11 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:16 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:17 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:28 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:29 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:34 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:35 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:40 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:41 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:46 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:46 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:52 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:19:58 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:04 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:10 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:16 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:22 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:27 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:33 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:39 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:45 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:51 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:20:57 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:02 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:08 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:17 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:18 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:19 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:23 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:24 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:29 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:29 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:35 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:35 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:41 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:41 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:46 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Jul 15 03:21:47 server pop3d: LOGIN FAILED, ip=[69.228.253.222]
Kann mir vielleicht sagen was das zu bedeuten hat ?
Ich danke im Voraus für jede Antwort... :idea:

Re: Mail.err frage

Posted: 2007-07-24 23:22
by dodolin
Ersteres kann vieles sein: Ein legitimer Client, ein Portscan, jemand, der sich einloggen will, wegen gedropptem Ident aber in einen Timeout läuft, etc.

Zweiteres ist einfach das Rauschen im Netz: Jemand versucht sich bei dir einzuloggen, um Passwörter rauszufinden.

Re: Mail.err frage

Posted: 2007-07-26 01:20
by adjustman
dodolin wrote:Zweiteres ist einfach das Rauschen im Netz: Jemand versucht sich bei dir einzuloggen, um Passwörter rauszufinden.
oder hat seins einfach vergessen und hat den Client laufen (und merkt nix mehr) :lol:

Re: Mail.err frage

Posted: 2007-07-26 10:27
by rootsvr
Letzteres ist ne IP aus Amerika.. wenn Du da keine Kunden hast ist es vermutlich nen bruteforce Angriff.

--> abuse schreiben
--> ip blocken
All times are UTC+01:00
Page 1 of 1