Бесконечные попытки входа с несуществующих почтовых адресов

@h1tman32 · Регистрация: 18.03.2016

Author24 — интернет-сервис помощи студентам

Добрый день! Наблюдаю такую картину в логах Kerio Connect - Протоколы - Security. Эта проблема еще с 2014 года. Бесконечные попытки на вход каких то левых почтовых ящиков в нашу корпоративную почту. Началась с тех пор как прошлый админ создал этот почтовый сервер. Сейчас хочу исправить. Вот небольшой текст лога для ясности ситуации:

Кликните здесь для просмотра всего текста

[27/Sep/2019 09:40:39] SMTP: User devtest@cvincom.md doesn't exist. Attempt from IP address 46.38.144.202.
[27/Sep/2019 09:40:42] SMTP: User watchdog@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:40:45] Failed SMTP login from 46.38.144.202
[27/Sep/2019 09:40:46] SMTP: User khelms@cvincom.md doesn't exist. Attempt from IP address 46.38.144.146.
[27/Sep/2019 09:40:47] SMTP: User movie@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179.
[27/Sep/2019 09:40:48] Failed SMTP login from 46.38.144.57
[27/Sep/2019 09:40:52] Failed SMTP login from 46.38.144.146
[27/Sep/2019 09:40:53] Failed SMTP login from 46.38.144.179
[27/Sep/2019 09:40:58] SMTP: User arch@cvincom.md doesn't exist. Attempt from IP address 46.38.144.32.
[27/Sep/2019 09:41:03] SMTP: User voyage@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:41:04] Failed SMTP login from 46.38.144.32
[27/Sep/2019 09:41:09] SMTP: User alyson@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150.
[27/Sep/2019 09:41:09] Failed SMTP login from 46.38.144.57
[27/Sep/2019 09:41:15] Failed SMTP login from 45.142.195.150
[27/Sep/2019 09:41:18] SMTP: User test@cvincom.md doesn't exist. Attempt from IP address 185.211.245.198.
[27/Sep/2019 09:41:20] SMTP: User asd@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179.
[27/Sep/2019 09:41:24] Failed SMTP login from 185.211.245.198
[27/Sep/2019 09:41:26] SMTP: User test@cvincom.md doesn't exist. Attempt from IP address 185.211.245.198.
[27/Sep/2019 09:41:26] Failed SMTP login from 46.38.144.179
[27/Sep/2019 09:41:32] Failed SMTP login from 185.211.245.198
[27/Sep/2019 09:41:33] SMTP: User s111@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:41:39] Failed SMTP login from 46.38.144.57
[27/Sep/2019 09:41:40] SMTP: User popmail@cvincom.md doesn't exist. Attempt from IP address 46.38.144.17.
[27/Sep/2019 09:41:46] Failed SMTP login from 46.38.144.17
[27/Sep/2019 09:41:50] SMTP: User vonda@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150.
[27/Sep/2019 09:41:53] SMTP: User forum@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179.
[27/Sep/2019 09:41:56] Failed SMTP login from 45.142.195.150
[27/Sep/2019 09:41:58] SMTP: User pops@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:41:59] Failed SMTP login from 46.38.144.179
[27/Sep/2019 09:42:04] Failed SMTP login from 46.38.144.57
[27/Sep/2019 09:42:23] SMTP: User oliver@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:42:27] SMTP: User rewards@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179.
[27/Sep/2019 09:42:29] Failed SMTP login from 46.38.144.57
[27/Sep/2019 09:42:30] SMTP: User pansy@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150.
[27/Sep/2019 09:42:33] Failed SMTP login from 46.38.144.179
[27/Sep/2019 09:42:36] Failed SMTP login from 45.142.195.150
[27/Sep/2019 09:42:37] SMTP: User FO@cvincom.md doesn't exist. Attempt from IP address 46.38.144.146.
[27/Sep/2019 09:42:43] Failed SMTP login from 46.38.144.146
[27/Sep/2019 09:42:48] SMTP: User siam@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57.
[27/Sep/2019 09:42:54] Failed SMTP login from 46.38.144.57

Как это можно исправить, чтобы не терроризировали почтовый сервер?

Dmitry · 27.09.2019, 14:41

закрыть порт наружу
а так, будут ломиться все левые спамеры, кто нашел адрес сервака

@h1tman32 0 / 0 / 0 Регистрация: 18.03.2016 Сообщений: 5
		1
	Бесконечные попытки входа с несуществующих почтовых адресов 27.09.2019, 09:57. Показов 3352. Ответов 1 Метки нет (Все метки) Добрый день! Наблюдаю такую картину в логах Kerio Connect - Протоколы - Security. Эта проблема еще с 2014 года. Бесконечные попытки на вход каких то левых почтовых ящиков в нашу корпоративную почту. Началась с тех пор как прошлый админ создал этот почтовый сервер. Сейчас хочу исправить. Вот небольшой текст лога для ясности ситуации: Кликните здесь для просмотра всего текста [27/Sep/2019 09:40:39] SMTP: User devtest@cvincom.md doesn't exist. Attempt from IP address 46.38.144.202. [27/Sep/2019 09:40:42] SMTP: User watchdog@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:40:45] Failed SMTP login from 46.38.144.202 [27/Sep/2019 09:40:46] SMTP: User khelms@cvincom.md doesn't exist. Attempt from IP address 46.38.144.146. [27/Sep/2019 09:40:47] SMTP: User movie@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179. [27/Sep/2019 09:40:48] Failed SMTP login from 46.38.144.57 [27/Sep/2019 09:40:52] Failed SMTP login from 46.38.144.146 [27/Sep/2019 09:40:53] Failed SMTP login from 46.38.144.179 [27/Sep/2019 09:40:58] SMTP: User arch@cvincom.md doesn't exist. Attempt from IP address 46.38.144.32. [27/Sep/2019 09:41:03] SMTP: User voyage@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:41:04] Failed SMTP login from 46.38.144.32 [27/Sep/2019 09:41:09] SMTP: User alyson@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150. [27/Sep/2019 09:41:09] Failed SMTP login from 46.38.144.57 [27/Sep/2019 09:41:15] Failed SMTP login from 45.142.195.150 [27/Sep/2019 09:41:18] SMTP: User test@cvincom.md doesn't exist. Attempt from IP address 185.211.245.198. [27/Sep/2019 09:41:20] SMTP: User asd@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179. [27/Sep/2019 09:41:24] Failed SMTP login from 185.211.245.198 [27/Sep/2019 09:41:26] SMTP: User test@cvincom.md doesn't exist. Attempt from IP address 185.211.245.198. [27/Sep/2019 09:41:26] Failed SMTP login from 46.38.144.179 [27/Sep/2019 09:41:32] Failed SMTP login from 185.211.245.198 [27/Sep/2019 09:41:33] SMTP: User s111@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:41:39] Failed SMTP login from 46.38.144.57 [27/Sep/2019 09:41:40] SMTP: User popmail@cvincom.md doesn't exist. Attempt from IP address 46.38.144.17. [27/Sep/2019 09:41:46] Failed SMTP login from 46.38.144.17 [27/Sep/2019 09:41:50] SMTP: User vonda@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150. [27/Sep/2019 09:41:53] SMTP: User forum@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179. [27/Sep/2019 09:41:56] Failed SMTP login from 45.142.195.150 [27/Sep/2019 09:41:58] SMTP: User pops@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:41:59] Failed SMTP login from 46.38.144.179 [27/Sep/2019 09:42:04] Failed SMTP login from 46.38.144.57 [27/Sep/2019 09:42:23] SMTP: User oliver@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:42:27] SMTP: User rewards@cvincom.md doesn't exist. Attempt from IP address 46.38.144.179. [27/Sep/2019 09:42:29] Failed SMTP login from 46.38.144.57 [27/Sep/2019 09:42:30] SMTP: User pansy@cvincom.md doesn't exist. Attempt from IP address 45.142.195.150. [27/Sep/2019 09:42:33] Failed SMTP login from 46.38.144.179 [27/Sep/2019 09:42:36] Failed SMTP login from 45.142.195.150 [27/Sep/2019 09:42:37] SMTP: User FO@cvincom.md doesn't exist. Attempt from IP address 46.38.144.146. [27/Sep/2019 09:42:43] Failed SMTP login from 46.38.144.146 [27/Sep/2019 09:42:48] SMTP: User siam@cvincom.md doesn't exist. Attempt from IP address 46.38.144.57. [27/Sep/2019 09:42:54] Failed SMTP login from 46.38.144.57 Как это можно исправить, чтобы не терроризировали почтовый сервер? 0

Dmitry 13016 / 7407 / 801 Регистрация: 09.09.2009 Сообщений: 28,983
	27.09.2019, 14:41	2
	закрыть порт наружу а так, будут ломиться все левые спамеры, кто нашел адрес сервака 0