Anzeige:
Ergebnis 1 bis 2 von 2

Thema: was ist hier passiert?

  1. #1
    Registrierter Benutzer
    Registriert seit
    Feb 2003
    Beiträge
    208

    was ist hier passiert?

    hi!

    ich habe gerad meine logs geprüft und folgendes gefunden:

    /var/log/auth.log
    Code:
    Jan 25 10:16:21 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:21 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost'
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:21 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:21 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:21 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:23 server postfix/smtpd[1812]: sql auxprop plugin using mysql engine 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:25 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:25 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:25 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:25 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:25 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:30 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:30 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:30 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:30 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:30 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:35 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:35 server postfix/smtpd[1734]: commit transaction
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin Parse the username webmaster@mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin try and connect to a host 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin trying to open db 'syscp' on host 'localhost' 
    Jan 25 10:16:35 server postfix/smtpd[1734]: begin transaction
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin create statement from userPassword webmaster mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de'; 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin create statement from cmusaslsecretPLAIN webmaster mail.domain.de 
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin doing query select password from mail_users where username='webmaster@mail.domain.de';
    Jan 25 10:16:35 server postfix/smtpd[1734]: sql plugin: no result found
    Jan 25 10:16:35 server postfix/smtpd[1734]: commit transaction
    was bedeutet das?

  2. #2
    404 - Title not found Avatar von LKH
    Registriert seit
    Jul 1999
    Ort
    Jena
    Beiträge
    3.709
    Hi,

    sieht aus wie erfolglose Authentifizierungsversuch beim Postfix mit einem SQL-Plugin. Wenn es wesentlich mehr Einträge sind ist das vielleicht eine Bruteforce-Attacke ...

    LKH
    freedom is just another word for nothing left to loose ...

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •