Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SMTP server connection from "" closed after 3 bad commands
  •  
eXtremer

Messages: 59
Karma: 0
Send a private message to this user
Is there an option to automatically ban the IP for half an hour or so ? because connection is closed after 3 bad commands but it keeps trying on and on.

Log:
[08/Apr/2011 02:26:38] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:26:43] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:26:46] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:26:46] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:26:52] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:26:59] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:00] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:00] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:27:06] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:13] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:14] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:14] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:27:20] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:27] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:28] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:28] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:27:34] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:41] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:42] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:42] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:27:48] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:55] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:56] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:27:56] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:28:02] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:09] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:10] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:10] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:28:16] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:23] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:24] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:24] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:28:30] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:34] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:38] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:38] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:28:44] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:51] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:52] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:28:52] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:28:58] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:05] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:06] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:06] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:29:12] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:19] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:20] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:20] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:29:26] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:33] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:34] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:34] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:29:40] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:47] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:48] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:29:48] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:29:54] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:01] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:02] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:02] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:30:08] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:15] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:16] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:16] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:30:22] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:29] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:30] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:30] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:30:36] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:43] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:44] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:44] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:30:50] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:57] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:58] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:30:58] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:31:04] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:11] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:12] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:12] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:31:18] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:25] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:26] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:26] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:31:32] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:39] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:40] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:40] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:31:46] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:53] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:54] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:31:54] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:32:00] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:07] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:08] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:08] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:32:14] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:21] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:22] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:22] SMTP server connection from 85.135.140.4 closed after 3 bad commands
[08/Apr/2011 02:32:28] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:35] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:36] Failed SMTP login from 85.135.140.4
[08/Apr/2011 02:32:36] SMTP server connection from 85.135.140.4 closed after 3 bad commands
  •  
ICT and Me

Messages: 940

Karma: 53
Send a private message to this user
No there isn't. It is a feature request.
Only way is to ban the IP on the firewall.

ICT and Me
Carlo Turk
The Netherlands
www.ictandme.nl
  •  
eXtremer

Messages: 59
Karma: 0
Send a private message to this user
ictandme wrote on Fri, 08 April 2011 09:07
No there isn't. It is a feature request.
Only way is to ban the IP on the firewall.


Yes, I can ban it with my Firewall only if I'm aware of what is happening at the moment, too bad Kerio Connect doesn't have such an option.
I hope the request will be fulfilled.
Previous Topic: multiple attachments
Next Topic: Satus 4.1.1 451 error
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Nov 21 16:57:19 CET 2017

Total time taken to generate the page: 0.00350 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.