185.17.1.248のIPからのアタックをgrepかけた結果である。
○ちなみにアタックしてきているIPはロシアのモスクワからはるばる海を越えてやってきてます。
whoisをひくと、いかのプロバイダからやってきている事が確認できます。
うぜーな!
% This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '185.17.1.0 - 185.17.1.255' % Abuse contact for '185.17.1.0 - 185.17.1.255' is 'info@le.lc' inetnum: 185.17.1.0 - 185.17.1.255 org: ORG-LEL4-RIPE netname: LE descr: LE country: RU admin-c: NA4577-RIPE tech-c: NA4577-RIPE status: ASSIGNED PA mnt-by: MNT-NTX created: 2015-08-11T14:07:37Z last-modified: 2015-08-11T14:07:37Z source: RIPE organisation: ORG-LEL4-RIPE org-name: Longbow Electric LLC org-type: Other address: Ekvatornaya str., bld 14, app 31 address: 630060 address: Novosibirsk address: RUSSIAN FEDERATION phone: +79859746811 fax-no: +79859746811 abuse-c: AR16767-RIPE mnt-ref: VG82356-MNT mnt-ref: MNT-NTX mnt-ref: MNT-NTX mnt-by: MNT-NTX abuse-mailbox: abuse@le.lc created: 2013-01-21T14:04:53Z last-modified: 2015-09-30T09:57:53Z source: RIPE # Filtered role: NTX-NOC address: Russia, Moscow, Nizhgorodskaya 32 nic-hdl: NA4577-RIPE mnt-by: MNT-NTX remarks: *** remarks: *** remarks: *** created: 2014-11-05T18:02:34Z last-modified: 2014-11-05T18:03:36Z source: RIPE # Filtered % Information related to '185.17.1.0/24AS199388' route: 185.17.1.0/24 descr: LE-1 origin: AS199388 mnt-by: MNT-NTX created: 2015-08-24T16:18:58Z last-modified: 2015-08-24T16:18:58Z source: RIPE % This query was served by the RIPE Database Query Service version 1.80.1 (DB-2)
○送信テストをしてもて、オープンリレーになっていないかをチェックしていますね。
NOQUEUE: reject: RCPT from unknown[185.17.1.248]: 554 5.7.1 <unknown[185.17.1.248]>: Client host rejected: Access denied;
○辞書アタックってどういうログをはくのか!?不明な方もいらっしゃると思うので一例を下記の通り実際のログを掲載してみました。
ざーっと、思いつく文言でユーザがいるかいないかをチェックしていますね。
ユーザがいると、パスワードを求められるので、次のステップとしては
そのユーザへの辞書クラックを始める訳です。
Oct 18 05:28:59 [809] : auth failure: [user=service] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:33:46 [812] : auth failure: [user=agent] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:43:35 [809] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:47:38 [809] : auth failure: [user=service] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:51:59 [812] : auth failure: [user=agent] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:04:06 [812] : auth failure: [user=spam] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:08:03 [812] : auth failure: [user=video] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:22:43 [812] : auth failure: [user=spam] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:26:07 [812] : auth failure: [user=video] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:30:00 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:42:14 [812] : auth failure: [user=sekretariat] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:57:37 [812] : auth failure: [user=contakt] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:00:23 [812] : auth failure: [user=sekretariat] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:16:15 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:16:26 [812] : auth failure: [user=secretaria] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:32:37 [812] : auth failure: [user=sales] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:34:39 [812] : auth failure: [user=secretaria] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:48:56 [812] : auth failure: [user=exit] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:50:42 [812] : auth failure: [user=webmaster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:58:54 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:02:18 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:08:55 [812] : auth failure: [user=webmaster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:23:46 [812] : auth failure: [user=education] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:24:56 [812] : auth failure: [user=baseball] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:43:04 [812] : auth failure: [user=baseball] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:58:30 [812] : auth failure: [user=fax] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:59:07 [812] : auth failure: [user=backup] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:16:53 [812] : auth failure: [user=fax] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:17:17 [812] : auth failure: [user=backup] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:33:29 [812] : auth failure: [user=backuppc] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:51:39 [812] : auth failure: [user=formation] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:51:47 [812] : auth failure: [user=backuppc] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:07:50 [812] : auth failure: [user=badmin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:07:57 [809] : auth failure: [user=general] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:26:02 [809] : auth failure: [user=badmin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:42:09 [809] : auth failure: [user=bank] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:42:38 [812] : auth failure: [user=guest] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:55:00 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:00:27 [812] : auth failure: [user=bank] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:01:04 [809] : auth failure: [user=guest] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:16:42 [809] : auth failure: [user=billing] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:35:03 [809] : auth failure: [user=billing] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:35:43 [809] : auth failure: [user=sample] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:51:08 [809] : auth failure: [user=biblioteca] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:52:11 [812] : auth failure: [user=sales01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:09:27 [812] : auth failure: [user=biblioteca] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:10:29 [812] : auth failure: [user=sales01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:25:33 [812] : auth failure: [user=blink] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:43:53 [812] : auth failure: [user=blink] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:45:15 [812] : auth failure: [user=sales1] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:59:50 [812] : auth failure: [user=blog] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:18:09 [812] : auth failure: [user=blog] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:20:01 [812] : auth failure: [user=score] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:27:03 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:34:21 [812] : auth failure: [user=bo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:36:15 [812] : auth failure: [user=scores] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:52:48 [812] : auth failure: [user=bo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:54:41 [812] : auth failure: [user=scores] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:09:04 [812] : auth failure: [user=boffice] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:11:01 [812] : auth failure: [user=scan] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:27:24 [812] : auth failure: [user=boffice] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:43:37 [812] : auth failure: [user=book] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:02:01 [812] : auth failure: [user=book] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:04:18 [812] : auth failure: [user=scanner] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:18:15 [812] : auth failure: [user=box] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:36:41 [812] : auth failure: [user=box] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:53:02 [812] : auth failure: [user=business] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:55:25 [809] : auth failure: [user=send] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:11:34 [809] : auth failure: [user=business] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:13:59 [809] : auth failure: [user=send] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:24:09 [809] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:27:47 [809] : auth failure: [user=buster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:30:12 [809] : auth failure: [user=setting] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:46:06 [809] : auth failure: [user=buster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:02:23 [809] : auth failure: [user=cache] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:20:43 [809] : auth failure: [user=cache] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:36:55 [812] : auth failure: [user=captured] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:55:19 [812] : auth failure: [user=captured] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:58:27 [812] : auth failure: [user=root] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:11:22 [812] : auth failure: [user=captures] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:14:49 [812] : auth failure: [user=hr] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:29:44 [812] : auth failure: [user=captures] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:33:16 [812] : auth failure: [user=hr] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:46:00 [812] : auth failure: [user=ceo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:56:20 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:04:24 [812] : auth failure: [user=ceo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:08:10 [812] : auth failure: [user=info] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:20:35 [812] : auth failure: [user=checkin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:24:21 [812] : auth failure: [user=intern] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:38:56 [812] : auth failure: [user=checkin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:42:47 [812] : auth failure: [user=intern] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:55:17 [812] : auth failure: [user=checkout] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:13:46 [809] : auth failure: [user=checkout] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:30:02 [809] : auth failure: [user=chief] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:48:29 [809] : auth failure: [user=chief] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:52:16 [809] : auth failure: [user=library] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:04:43 [809] : auth failure: [user=clamav] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:08:34 [812] : auth failure: [user=monitor] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:22:53 [812] : auth failure: [user=clamav] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:26:47 [809] : auth failure: [user=monitor] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:38:44 [809] : auth failure: [user=clerk] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:42:47 [812] : auth failure: [user=newsletter] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:53:10 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:56:38 [812] : auth failure: [user=clerk] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:00:56 [812] : auth failure: [user=newsletter] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:12:06 [812] : auth failure: [user=client] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:16:57 [809] : auth failure: [user=office] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:30:02 [809] : auth failure: [user=client] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:35:13 [809] : auth failure: [user=office] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:45:51 [809] : auth failure: [user=communication] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:51:11 [809] : auth failure: [user=reception] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:59:17 [812] : auth failure: [user=rurineko] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:03:45 [812] : auth failure: [user=communication] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:09:33 [812] : auth failure: [user=reception] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:19:31 [812] : auth failure: [user=com] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:37:31 [812] : auth failure: [user=com] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:43:39 [812] : auth failure: [user=user01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:53:20 [809] : auth failure: [user=couple] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:59:56 [809] : auth failure: [user=user1] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 05:14:44 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 08:51:19 [812] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 12:30:09 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 15:24:00 [812] : auth failure: [user=gomi] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 16:11:32 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 19:54:52 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 23:34:31 [812] : auth failure: [user=test] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 20 02:09:38 [780] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 20 10:33:26 [782] : auth failure: [user=asdgas] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 20 10:33:53 [780] : auth failure: [user=asdgas] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 22 00:11:48 [782] : auth failure: [user=noauth] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:51 [780] : auth failure: [user=spam] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:53 [782] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:54 [782] : auth failure: [user=noauth] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:56 [782] : auth failure: [user=info] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:57 [782] : auth failure: [user=spam] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:58 [782] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:00 [782] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:01 [782] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:03 [782] : auth failure: [user=info] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:03 [782] : auth failure: [user=mail] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:05 [780] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:06 [780] : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:08 [780] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:09 [780] : auth failure: [user=sales] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:10 [780] : auth failure: [user=mail] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:11 [782] : auth failure: [user=support] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:13 [782] : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:14 [782] : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:16 [782] : auth failure: [user=sales] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:16 [782] : auth failure: [user=help] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:18 [782] : auth failure: [user=support] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:19 [782] : auth failure: [user=contact] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:21 [782] : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:21 [782] : auth failure: [user=office] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:23 [782] : auth failure: [user=help] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:24 [782] : auth failure: [user=staff] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:26 [782] : auth failure: [user=contact] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:26 [782] : auth failure: [user=news] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:29 [782] : auth failure: [user=office] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:29 [782] : auth failure: [user=careers] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:31 [782] : auth failure: [user=staff] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:32 [782] : auth failure: [user=fax] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:34 [782] : auth failure: [user=news] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:34 [782] : auth failure: [user=abuse] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:37 [782] : auth failure: [user=careers] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:37 [782] : auth failure: [user=hostmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:39 [782] : auth failure: [user=fax] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:39 [782] : auth failure: [user=noreply] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:42 [782] : auth failure: [user=abuse] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:42 [782] : auth failure: [user=pop3] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:44 [782] : auth failure: [user=hostmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:45 [782] : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:47 [782] : auth failure: [user=noreply] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:47 [782] : auth failure: [user=web] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:50 [782] : auth failure: [user=pop3] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:50 [782] : auth failure: [user=www] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:52 [782] : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:55 [782] : auth failure: [user=web] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:57 [782] : auth failure: [user=www] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 22:12:13 [782] : auth failure: [user=muietrista] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 22 22:13:03 [780] : auth failure: [user=muietrista] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 23 02:08:21 [782] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 23 02:09:19 [780] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 23 03:59:31 [780] : auth failure: [user=test] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 23 13:07:12 [780] : auth failure: [user=gomi] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]