【手口】実際に辞書アタックってこういう感じ!

この記事を読む およそ時間 9

 

185.17.1.248のIPからのアタックをgrepかけたである。

○ちなみにアタックしてきているIPはロシアのモスクワからはるばる海を越えてやってきてます。

whoisをひくと、いかのプロバイダからやってきている事が確認できます。

うぜーな!

  % This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '185.17.1.0 - 185.17.1.255'

% Abuse contact for '185.17.1.0 - 185.17.1.255' is 'info@le.lc'

inetnum:        185.17.1.0 - 185.17.1.255
org:            ORG-LEL4-RIPE
netname:        LE
descr:          LE
country:        RU
admin-c:        NA4577-RIPE
tech-c:         NA4577-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-NTX
created:        2015-08-11T14:07:37Z
last-modified:  2015-08-11T14:07:37Z
source:         RIPE

organisation:   ORG-LEL4-RIPE
org-name:       Longbow Electric LLC
org-type:       Other
address:        Ekvatornaya str., bld 14, app 31
address:        630060
address:        Novosibirsk
address:        RUSSIAN FEDERATION
phone:          +79859746811
fax-no:         +79859746811
abuse-c:        AR16767-RIPE
mnt-ref:        VG82356-MNT
mnt-ref:        MNT-NTX
mnt-ref:        MNT-NTX
mnt-by:         MNT-NTX
abuse-mailbox:  abuse@le.lc
created:        2013-01-21T14:04:53Z
last-modified:  2015-09-30T09:57:53Z
source:         RIPE # Filtered

role:           NTX-NOC
address:        Russia, Moscow, Nizhgorodskaya 32
nic-hdl:        NA4577-RIPE
mnt-by:         MNT-NTX
remarks:        ***
remarks:        ***
remarks:        ***
created:        2014-11-05T18:02:34Z
last-modified:  2014-11-05T18:03:36Z
source:         RIPE # Filtered

% Information related to '185.17.1.0/24AS199388'

route:          185.17.1.0/24
descr:          LE-1
origin:         AS199388
mnt-by:         MNT-NTX
created:        2015-08-24T16:18:58Z
last-modified:  2015-08-24T16:18:58Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.80.1 (DB-2)

 

○送信テストをしてもて、オープンリレーになっていないかをチェックしていますね。

○辞書アタックってどういうログをはくのか!?不明な方もいらっしゃると思うので一例を下記の通り実際のログを掲載してみました。

ざーっと、思いつく文言でユーザがいるかいないかをチェックしていますね。

ユーザがいると、パスワードを求められるので、次のステップとしては

そのユーザへの辞書クラックを始める訳です。

Oct 18 05:28:59 [809] : auth failure: [user=service] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:33:46 [812] : auth failure: [user=agent] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:43:35 [809] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:47:38 [809] : auth failure: [user=service] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 05:51:59 [812] : auth failure: [user=agent] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:04:06 [812] : auth failure: [user=spam] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:08:03 [812] : auth failure: [user=video] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:22:43 [812] : auth failure: [user=spam] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:26:07 [812] : auth failure: [user=video] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:30:00 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:42: [812] : auth failure: [user=sekretariat] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 06:57:37 [812] : auth failure: [user=contakt] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:00:23 [812] : auth failure: [user=sekretariat] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:16:15 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:16:26 [812] : auth failure: [user=secretaria] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:32:37 [812] : auth failure: [user=sales] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:34:39 [812] : auth failure: [user=secretaria] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:48:56 [812] : auth failure: [user=exit] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:50:42 [812] : auth failure: [user=webmaster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 07:58:54 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:02:18 [812] : auth failure: [user=contact] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:08:55 [812] : auth failure: [user=webmaster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:23:46 [812] : auth failure: [user=education] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:24:56 [812] : auth failure: [user=baseball] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:43:04 [812] : auth failure: [user=baseball] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:58:30 [812] : auth failure: [user=fax] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 08:59:07 [812] : auth failure: [user=backup] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:16:53 [812] : auth failure: [user=fax] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:17:17 [812] : auth failure: [user=backup] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:33:29 [812] : auth failure: [user=backuppc] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:51:39 [812] : auth failure: [user=formation] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 09:51:47 [812] : auth failure: [user=backuppc] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:07:50 [812] : auth failure: [user=badmin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:07:57 [809] : auth failure: [user=general] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:26:02 [809] : auth failure: [user=badmin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:42:09 [809] : auth failure: [user=bank] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:42:38 [812] : auth failure: [user=guest] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 10:55:00 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:00:27 [812] : auth failure: [user=bank] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:01:04 [809] : auth failure: [user=guest] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:16:42 [809] : auth failure: [user=billing] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:35:03 [809] : auth failure: [user=billing] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:35:43 [809] : auth failure: [user=sample] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:51:08 [809] : auth failure: [user=biblioteca] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 11:52:11 [812] : auth failure: [user=sales01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:09:27 [812] : auth failure: [user=biblioteca] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:10:29 [812] : auth failure: [user=sales01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:25:33 [812] : auth failure: [user=blink] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:43:53 [812] : auth failure: [user=blink] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:45:15 [812] : auth failure: [user=sales1] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 12:59:50 [812] : auth failure: [user=blog] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:18:09 [812] : auth failure: [user=blog] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:20:01 [812] : auth failure: [user=score] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:27:03 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:34:21 [812] : auth failure: [user=bo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:36:15 [812] : auth failure: [user=scores] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:52:48 [812] : auth failure: [user=bo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 13:54:41 [812] : auth failure: [user=scores] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:09:04 [812] : auth failure: [user=boffice] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:11:01 [812] : auth failure: [user=scan] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:27:24 [812] : auth failure: [user=boffice] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 14:43:37 [812] : auth failure: [user=book] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:02:01 [812] : auth failure: [user=book] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:04:18 [812] : auth failure: [user=scanner] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:18:15 [812] : auth failure: [user=box] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:36:41 [812] : auth failure: [user=box] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:53:02 [812] : auth failure: [user=business] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 15:55:25 [809] : auth failure: [user=send] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:11:34 [809] : auth failure: [user=business] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:13:59 [809] : auth failure: [user=send] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:24:09 [809] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:27:47 [809] : auth failure: [user=buster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:30:12 [809] : auth failure: [user=setting] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 16:46:06 [809] : auth failure: [user=buster] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:02:23 [809] : auth failure: [user=cache] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:20:43 [809] : auth failure: [user=cache] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:36:55 [812] : auth failure: [user=captured] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:55:19 [812] : auth failure: [user=captured] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 17:58:27 [812] : auth failure: [user=root] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:11:22 [812] : auth failure: [user=captures] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:14:49 [812] : auth failure: [user=hr] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:29:44 [812] : auth failure: [user=captures] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:33:16 [812] : auth failure: [user=hr] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:46:00 [812] : auth failure: [user=ceo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 18:56:20 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:04:24 [812] : auth failure: [user=ceo] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:08:10 [812] : auth failure: [user=info] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:20:35 [812] : auth failure: [user=checkin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:24:21 [812] : auth failure: [user=intern] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:38:56 [812] : auth failure: [user=checkin] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:42:47 [812] : auth failure: [user=intern] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 19:55:17 [812] : auth failure: [user=checkout] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:13:46 [809] : auth failure: [user=checkout] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:30:02 [809] : auth failure: [user=chief] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:48:29 [809] : auth failure: [user=chief] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 20:52:16 [809] : auth failure: [user=library] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:04:43 [809] : auth failure: [user=clamav] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:08:34 [812] : auth failure: [user=monitor] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:22:53 [812] : auth failure: [user=clamav] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:26:47 [809] : auth failure: [user=monitor] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:38:44 [809] : auth failure: [user=clerk] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:42:47 [812] : auth failure: [user=newsletter] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:53:10 [812] : auth failure: [user=admin] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 21:56:38 [812] : auth failure: [user=clerk] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:00:56 [812] : auth failure: [user=newsletter] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:12:06 [812] : auth failure: [user=client] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:16:57 [809] : auth failure: [user=office] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:30:02 [809] : auth failure: [user=client] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:35:13 [809] : auth failure: [user=office] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:45:51 [809] : auth failure: [user=communication] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:51:11 [809] : auth failure: [user=reception] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 22:59:17 [812] : auth failure: [user=rurineko] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:03:45 [812] : auth failure: [user=communication] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:09:33 [812] : auth failure: [user=reception] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:19:31 [812] : auth failure: [user=com] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:37:31 [812] : auth failure: [user=com] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:43:39 [812] : auth failure: [user=user01] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:53:20 [809] : auth failure: [user=couple] [service=smtp] [realm=mx.a.com] [mech=shadow] [reason=Unknown]
Oct 18 23:59:56 [809] : auth failure: [user=user1] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 05:14:44 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 08:51:19 [812] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 12:30:09 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 15:24:00 [812] : auth failure: [user=gomi] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 16:11:32 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 19:54:52 [809] : auth failure: [user=abuse] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 19 23:34:31 [812] : auth failure: [user=test] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 20 02:09:38 [780] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 20 10:33:26 [782] : auth failure: [user=asdgas] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 20 10:33:53 [780] : auth failure: [user=asdgas] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 22 00:11:48 [782] : auth failure: [user=noauth] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:51 [780] : auth failure: [user=spam] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:53 [782] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:54 [782] : auth failure: [user=noauth] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:56 [782] : auth failure: [user=info] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:57 [782] : auth failure: [user=spam] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:11:58 [782] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:00 [782] : auth failure: [user=test] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:01 [782] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:03 [782] : auth failure: [user=info] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:03 [782] : auth failure: [user=mail] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:05 [780] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:06 [780] : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:08 [780] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:09 [780] : auth failure: [user=sales] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:10 [780] : auth failure: [user=mail] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:11 [782] : auth failure: [user=support] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:13 [782] : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:14 [782] : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:16 [782] : auth failure: [user=sales] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:16 [782] : auth failure: [user=help] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:18 [782] : auth failure: [user=support] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:19 [782] : auth failure: [user=contact] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:21 [782] : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:21 [782] : auth failure: [user=office] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:23 [782] : auth failure: [user=help] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:24 [782] : auth failure: [user=staff] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:26 [782] : auth failure: [user=contact] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:26 [782] : auth failure: [user=news] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:29 [782] : auth failure: [user=office] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:29 [782] : auth failure: [user=careers] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:31 [782] : auth failure: [user=staff] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:32 [782] : auth failure: [user=fax] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:34 [782] : auth failure: [user=news] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:34 [782] : auth failure: [user=abuse] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:37 [782] : auth failure: [user=careers] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:37 [782] : auth failure: [user=hostmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:39 [782] : auth failure: [user=fax] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:39 [782] : auth failure: [user=noreply] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:42 [782] : auth failure: [user=abuse] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:42 [782] : auth failure: [user=pop3] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:44 [782] : auth failure: [user=hostmaster] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:45 [782] : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:47 [782] : auth failure: [user=noreply] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:47 [782] : auth failure: [user=web] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:50 [782] : auth failure: [user=pop3] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:50 [782] : auth failure: [user=www] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:52 [782] : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:55 [782] : auth failure: [user=web] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 00:12:57 [782] : auth failure: [user=www] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 22 22:12:13 [782] : auth failure: [user=muietrista] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 22 22:13:03 [780] : auth failure: [user=muietrista] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 23 02:08:21 [782] : auth failure: [user=admin] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 23 02:09:19 [780] : auth failure: [user=administrator] [service=smtp] [realm=] [mech=shadow] [reason=Unknown]
Oct 23 03:59:31 [780] : auth failure: [user=test] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]
Oct 23 13:07:12 [780] : auth failure: [user=gomi] [service=smtp] [realm=a.com] [mech=shadow] [reason=Unknown]

Related posts