Pak kalau saya lihat di session SMTP in ada yg aneh selalu ada session
smtp dari WIN-4I4NISBJACL, tapi emailnya tidak terdaftar spt contoh
dibawah ini : bernard, betsy,beta
Apakah ini ada yang mencoba hack ?
Mon 2016-05-30 14:40:34.045: 05: Session 456333; child 0011
Mon 2016-05-30 14:40:34.045: 05: Accepting SMTP connection from
192.168.10.1:61296 to 192.168.10.2:25
Mon 2016-05-30 14:40:34.049: 03: --> 220 webmail.pttdp.com ESMTP MDaemon
15.5.2; Mon, 30 May 2016 14:40:34 +0700
Mon 2016-05-30 14:40:36.422: 02: <-- EHLO WIN-4I4NISBJACL
Mon 2016-05-30 14:40:36.422: 03: --> 250-webmail.pttdp.com Hello
WIN-4I4NISBJACL, pleased to meet you
Mon 2016-05-30 14:40:36.422: 03: --> 250-ETRN
Mon 2016-05-30 14:40:36.422: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2016-05-30 14:40:36.422: 03: --> 250-8BITMIME
Mon 2016-05-30 14:40:36.422: 03: --> 250-ENHANCEDSTATUSCODES
Mon 2016-05-30 14:40:36.422: 03: --> 250-STARTTLS
Mon 2016-05-30 14:40:36.422: 03: --> 250 SIZE
Mon 2016-05-30 14:40:41.946: 02: <-- AUTH LOGIN
Mon 2016-05-30 14:40:41.946: 03: --> 334 VXNlcm5hbWU6
Mon 2016-05-30 14:40:42.599: 02: <-- YmVybmFyZA==
Mon 2016-05-30 14:40:42.599: 03: --> 334 UGFzc3dvcmQ6
Mon 2016-05-30 14:40:43.246: 02: <-- ******
Mon 2016-05-30 14:40:43.246: 04: Failed SMTP authentication attempt from
192.168.10.1 for "bern...@pttdp.com"
Mon 2016-05-30 14:40:43.246: 03: --> 535 5.7.8 Authentication failed
Mon 2016-05-30 14:40:44.209: 05: Connection closed
Mon 2016-05-30 14:40:44.209: 04: SMTP session terminated (Bytes in/out:
62/316)
Mon 2016-05-30 14:41:47.482: 05: Session 456407; child 0003
Mon 2016-05-30 14:41:47.482: 05: Accepting SMTP connection from
192.168.10.1:56670 to 192.168.10.2:25
Mon 2016-05-30 14:41:47.483: 03: --> 220 webmail.pttdp.com ESMTP MDaemon
15.5.2; Mon, 30 May 2016 14:41:47 +0700
Mon 2016-05-30 14:41:49.834: 02: <-- EHLO WIN-4I4NISBJACL
Mon 2016-05-30 14:41:49.835: 03: --> 250-webmail.pttdp.com Hello
WIN-4I4NISBJACL, pleased to meet you
Mon 2016-05-30 14:41:49.835: 03: --> 250-ETRN
Mon 2016-05-30 14:41:49.835: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2016-05-30 14:41:49.835: 03: --> 250-8BITMIME
Mon 2016-05-30 14:41:49.835: 03: --> 250-ENHANCEDSTATUSCODES
Mon 2016-05-30 14:41:49.835: 03: --> 250-STARTTLS
Mon 2016-05-30 14:41:49.835: 03: --> 250 SIZE
Mon 2016-05-30 14:41:57.000: 02: <-- AUTH LOGIN
Mon 2016-05-30 14:41:57.000: 03: --> 334 VXNlcm5hbWU6
Mon 2016-05-30 14:41:57.896: 02: <-- YmV0YQ==
Mon 2016-05-30 14:41:57.896: 03: --> 334 UGFzc3dvcmQ6
Mon 2016-05-30 14:41:58.831: 02: <-- ******
Mon 2016-05-30 14:41:58.831: 04: Failed SMTP authentication attempt from
192.168.10.1 for "b...@pttdp.com"
Mon 2016-05-30 14:41:58.831: 03: --> 535 5.7.8 Authentication failed
Mon 2016-05-30 14:41:59.895: 05: Connection closed
Mon 2016-05-30 14:41:59.895: 04: SMTP session terminated (Bytes in/out:
58/316)
Mon 2016-05-30 14:42:35.656: 05: Session 456460; child 0011
Mon 2016-05-30 14:42:35.657: 05: Accepting SMTP connection from
192.168.10.1:56208 to 192.168.10.2:25
Mon 2016-05-30 14:42:35.662: 03: --> 220 webmail.pttdp.com ESMTP MDaemon
15.5.2; Mon, 30 May 2016 14:42:35 +0700
Mon 2016-05-30 14:42:37.099: 02: <-- EHLO WIN-4I4NISBJACL
Mon 2016-05-30 14:42:37.099: 03: --> 250-webmail.pttdp.com Hello
WIN-4I4NISBJACL, pleased to meet you
Mon 2016-05-30 14:42:37.099: 03: --> 250-ETRN
Mon 2016-05-30 14:42:37.099: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Mon 2016-05-30 14:42:37.099: 03: --> 250-8BITMIME
Mon 2016-05-30 14:42:37.099: 03: --> 250-ENHANCEDSTATUSCODES
Mon 2016-05-30 14:42:37.099: 03: --> 250-STARTTLS
Mon 2016-05-30 14:42:37.099: 03: --> 250 SIZE
Mon 2016-05-30 14:42:42.299: 02: <-- AUTH LOGIN
Mon 2016-05-30 14:42:42.299: 03: --> 334 VXNlcm5hbWU6
Mon 2016-05-30 14:42:42.970: 02: <-- YmV0c3k=
Mon 2016-05-30 14:42:42.970: 03: --> 334 UGFzc3dvcmQ6
Mon 2016-05-30 14:42:43.659: 02: <-- ******
Mon 2016-05-30 14:42:43.660: 04: Failed SMTP authentication attempt from
192.168.10.1 for "be...@pttdp.com"
Mon 2016-05-30 14:42:43.660: 03: --> 535 5.7.8 Authentication failed
Mon 2016-05-30 14:42:44.718: 05: Connection closed
Mon 2016-05-30 14:42:44.719: 04: SMTP session terminated (Bytes in/out:
54/316)
--
--MDaemon-L----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 16.0.2, SP 5.0, BES 2.0.2, OC 3.5.2, SG 3.0.3
