Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : Is my site under brute force attack?



Threaded Mode | Print  

 Is my site under brute force attack?, I have an auth error every few seconds in my dovecot log (2 Replies, Read 24601 times)
wolfatadfilm
Group: Member
Post Group: Newbie
Posts: 2
Status:
Unfortunately i have no experience with dovecot, just found it strange that the log looks like this below -- any idea what I can do against it?
May 25 23:59:43 auth: Error: passwd-file(sewell@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 25 23:59:58 auth: Error: passwd-file(jeltz@v22018126552678683.quicksrv.de,185.137.111.44): stat(/etc/vmail/v22018126552678683.quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:04 auth: Error: passwd-file(forest@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:06 auth: Error: passwd-file(sesqui@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:32 auth: Error: passwd-file(ses@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:40 auth: Error: passwd-file(forrest@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:41 auth: Error: passwd-file(score@quicksrv.de,185.137.111.145): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:00:57 auth: Error: passwd-file(jeg@v22018126552678683.quicksrv.de,185.137.111.44): stat(/etc/vmail/v22018126552678683.quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:01 auth: Error: passwd-file(servix@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:15 auth: Error: passwd-file(forums@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:24 auth: Error: passwd-file(ser@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:40 auth: Error: passwd-file(scirocco@quicksrv.de,185.137.111.145): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:50 auth: Error: passwd-file(seq@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:51 auth: Error: passwd-file(fox@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:57 auth: Error: passwd-file(jeffs@v22018126552678683.quicksrv.de,185.137.111.44): stat(/etc/vmail/v22018126552678683.quicksrv.de/passwd) failed: No such file or directory
May 26 00:01:57 auth: Error: passwd-file(postmaster,185.222.209.97): stat(/etc/vmail//passwd) failed: No such file or directory
May 26 00:02:16 auth: Error: passwd-file(seki@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:02:21 auth: Error: passwd-file(data,185.36.81.166): stat(/etc/vmail//passwd) failed: No such file or directory
May 26 00:02:28 auth: Error: passwd-file(frances@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:02:41 auth: Error: passwd-file(schmitt@quicksrv.de,185.137.111.145): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:02:42 auth: Error: passwd-file(segovia@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:02:57 auth: Error: passwd-file(jdean@v22018126552678683.quicksrv.de,185.137.111.44): stat(/etc/vmail/v22018126552678683.quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:10 auth: Error: passwd-file(francis@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:10 auth: Error: passwd-file(secundus@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:36 auth: Error: passwd-file(seaslug@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:38 auth: Error: passwd-file(frank@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:41 auth: Error: passwd-file(schilling@quicksrv.de,185.137.111.145): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:59 auth: Error: passwd-file(jcl@v22018126552678683.quicksrv.de,185.137.111.44): stat(/etc/vmail/v22018126552678683.quicksrv.de/passwd) failed: No such file or directory
May 26 00:03:59 auth: Error: passwd-file(seascape@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:04:13 auth: Error: passwd-file(frankie@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:04:25 auth: Error: passwd-file(seas@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:04:41 auth: Error: passwd-file(scherzo@quicksrv.de,185.137.111.145): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:04:49 auth: Error: passwd-file(franky@quicksrv.de,185.137.111.77): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
May 26 00:04:51 auth: Error: passwd-file(sears@quicksrv.de,185.137.111.14): stat(/etc/vmail/quicksrv.de/passwd) failed: No such file or directory
IP: --   

Is my site under brute force attack?
wolke
Group: NOC
Post Group: Elite Member
Posts: 437
Status:
Yes, the normal everyday madness. These are automated scripts that try to get into mailaccounts and use it for spamming (at best).
Nothing to worry. Anyway you should use fail2ban.
IP: --   

Is my site under brute force attack?
wolfatadfilm
Group: Member
Post Group: Newbie
Posts: 2
Status:
Thank you for that, wolke. Thought so... Will look into fail2ban.
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is April 18, 2024, 11:05 pm.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.120