Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » User fake_password_98.# (fake_password_98.#<_at_>domain.com)
  •  
henk

Messages: 39
Karma: 0
Send a private message to this user
This weekend we had some maintenance and testing on a new Kerio server and in the security log we found a couple of these entries:

ADMIN: User fake_password_98.#<_at_>domain.com doesn't exist. Attempt from IP address 192.168.7.10.
Administration login from 192.168.7.10 failed: user fake_password_98.#<_at_>domain.com does not exist.

This was around the time we were doing our testing and the IP address mentioned is the IP address from the Kerio machine. What are these errors?
  •  
freakinvibe

Messages: 1525
Karma: 60
Send a private message to this user
Someone (or some program) is trying to login into your Kerio Administration with the user name fake_password_98.#<_at_>domain.com

As this user doesn't exist on your KMS installation, you get this error message. It means that the login has failed.

Make sure your Kerio server hasn't been infected with a virus.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
henk

Messages: 39
Karma: 0
Send a private message to this user
That was the first thing we thought. But this was at the same time we were doing some testing with Kerio. Also, we installed Kerio yesterday on this server. Still think this is really a hacker?
  •  
freakinvibe

Messages: 1525
Karma: 60
Send a private message to this user
How are you accessing the administration, via Web or via Console?

Also, what did you exactly do in your "maintenance and testing"?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
henk

Messages: 39
Karma: 0
Send a private message to this user
For the most we used the web. When we experienced some issues as reported here:

http://forums.kerio.com/index.php?t=msg&th=18254&sta rt=0&

We used the console.

"Maintenance and testing" was not the right way to put it since it was only the latter. We installed Kerio next to the Apple mail service to do a test drive with the Kerio migration tool since we want to migrate from Apple mail service to Kerio.

[Updated on: Mon, 11 October 2010 12:05]

  •  
freakinvibe

Messages: 1525
Karma: 60
Send a private message to this user
It sounds to me that the migration tool might have caused this. I guess it uses an admin account to login so it can migrate. Have you configured that properly?

I don't know the migration tool, so I am just guessing.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
henk

Messages: 39
Karma: 0
Send a private message to this user
Sounds plausible. We have forwarded this and other issues to support so let's see what they have to say. Thanks for your help.
Previous Topic: internal database
Next Topic: Kerio Connect Backups - Size and time to complete?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Sep 20 16:44:00 CEST 2017

Total time taken to generate the page: 0.00991 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.