Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Lots of relay attempt from IP address 127.0.0.1
  •  
nixius

Messages: 8
Karma: 0
Send a private message to this user
There are lots of messages "Relay attempt from IP address 127.0.0.1 ..." in the security log file. Here is a sample:

[15/Mar/2013 09:50:52] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <floria871nichols179<_at_>voidtee.com> rejected
[15/Mar/2013 09:56:01] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <ozell821curry349<_at_>lotawork.com> rejected
[15/Mar/2013 09:59:46] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <carolynn665coleman105<_at_>edgetee.com> rejected
[15/Mar/2013 10:00:38] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <digna153garcia774<_at_>expertous.com> rejected
[15/Mar/2013 10:05:42] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <temika240matthews724<_at_>downpulse.com> rejected
[15/Mar/2013 10:36:04] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <lilliam895goff662<_at_>perkface.com> rejected
[15/Mar/2013 10:42:21] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <marisela857browning692<_at_>maileenation.com> rejected
[15/Mar/2013 10:45:32] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <margery876dawson544<_at_>edgetee.com> rejected
[15/Mar/2013 11:04:15] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <oliva430drake133<_at_>perkface.com> rejected
[15/Mar/2013 11:17:03] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <leanne206perez586<_at_>busyvee.com> rejected
[15/Mar/2013 11:31:46] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <yanira833pearson848<_at_>drytor.com> rejected
[15/Mar/2013 11:34:06] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <elale572weiss760<_at_>lotawork.com> rejected
[15/Mar/2013 11:36:58] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <dora147hahn710<_at_>babblespan.com> rejected
[15/Mar/2013 11:40:03] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <janey388ruiz855<_at_>voidtee.com> rejected
[15/Mar/2013 11:45:08] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <lenore969england991<_at_>emailbeetle.com> rejected
[15/Mar/2013 11:45:33] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <LinseyEberlee2318<_at_>gmail.com> rejected
[15/Mar/2013 11:51:16] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <johnlaubachz<_at_>hotmail.com> rejected
[15/Mar/2013 11:53:51] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <tammera224love264<_at_>profitcheetah.com> rejected
[15/Mar/2013 11:56:20] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <demetria629page536<_at_>marketeepoint.com> rejected
[15/Mar/2013 12:01:41] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <raisa762jimenez863<_at_>marketeepoint.com> rejected
[15/Mar/2013 12:28:27] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <EastreAiton639<_at_>live.com> rejected
[15/Mar/2013 12:54:09] Relay attempt from IP address 127.0.0.1, mail from <xus@xo.biu.com> to <lorina977colon504<_at_>bentbook.com> rejected


WHAT'S WRONG??? FROM LOCALHOST 127.0.0.1??
Are there Trojans on my server??

HELP!!!!!
  •  
Lisa Lyons (Kerio)

Messages: 175
Karma: 8
Send a private message to this user
Hi, Nixius

It sounds to me like you may have a program attempting to send mails, what other applications or servers do you have installed on this machine?

You might find it easier to create a ticket with the support team, so that we may advise you properly. It may not actually be a virus or trojan, but it is certainly something you should have double-checked by our engineers. http://www.kerio.com/support/

They will need some further debugging information, too, so if you could provide them with the following, this will help.

Within the Administration Console, go to Logs -> Debug
Right-click in the right window Left-click on 'Messages'
Enable 'SMTP Server' and 'SMTP Client'
Click OK
Right-click again and click on 'Clear Log'
Replicate the problem, then go back to the debug log. You can right-click on the log and choose save as and save it to a text file.

This may be sufficient to help you identify the issue, but if you want to get help from Support, please send them the resulting file, plus the security log from the same time frame.

Thanks

Kerio Technical Support
Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
  •  
nixius

Messages: 8
Karma: 0
Send a private message to this user
Thanks very much.
I've enabled SMTP log in debug. No same situation happened till now.

Thanks again.

[Updated on: Fri, 15 March 2013 12:33]

  •  
nixius

Messages: 8
Karma: 0
Send a private message to this user
Previous Topic: Exchange ActiveSync becomes a paid service
Next Topic: Missing Notes in Blackberry Z10/Q10
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 11:22:56 CET 2017

Total time taken to generate the page: 0.00408 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.