Hacking Attempt - SMTP Server: Authentication failed.

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject: Hacking Attempt - SMTP Server: Authentication failed.

Feedback Type: Question

Product Area: Domino Server

Technical Area: Administration

Platform: ALL

Release: 8.5

Reproducible: Always

Is there a way to block attempts after x number of failures?

I have pages and pages of this on what seems like a weekly basis:

10/09/2009 01:36:07 AM SMTP Server: Authentication failed for user xinjiang ; connecting host 58.63.148.42
10/09/2009 01:36:08 AM SMTP Server: Authentication failed for user xinjiang ; connecting host 58.63.148.42
10/09/2009 01:36:09 AM SMTP Server: Authentication failed for user xinjiang ; connecting host 58.63.148.42
10/09/2009 01:36:10 AM SMTP Server: Authentication failed for user xinjiang ; connecting host 58.63.148.42
10/09/2009 01:36:11 AM SMTP Server: Authentication failed for user xinjiang ; connecting host 58.63.148.42

As you can imagine, the ip address changes with each batch so I can't issolate the attacks by ip.

Thanks in advance for the help,
Scott.

Feedback number WEBB7WNNB3 created by ~George Zekluvitchikle on 10/09/2009

Status: Open
Comments: