weird maillog/impad entries

xcobaltdude

Verified User
Joined
Aug 25, 2004
Messages
24
Greetings,
Been seeing a few of these entries per day for a few weeks. Googling didn't yield anything useful. Any ideas?

Aug 6 07:53:29 ns imapd[7279]: Command stream end of file, while reading line user=??? host=video.yourchurch.org [64.90.41.187]
Aug 6 07:53:29 ns imapd[7277]: Command stream end of file, while reading line user=??? host=video.yourchurch.org [64.90.41.187]
Aug 6 07:21:00 ns imapd[6971]: Command stream end of file, while reading line user=??? host=216-110-193-134.lsnetworks.net [216.110.193.134]
Aug 6 07:21:00 ns imapd[6964]: Command stream end of file, while reading line user=??? host=216-110-193-134.lsnetworks.net [216.110.193.134]
Aug 4 16:48:45 ns imapd[31857]: Command stream end of file, while reading line user=??? host=[62.253.226.60]
Aug 4 16:48:45 ns imapd[31853]: Command stream end of file, while reading line user=??? host=[62.253.226.60]
 
Actually google does find some useful stuff if you know what you're reading... it took me a while.

It could be either a breakin attempt or unexpectedly disconnected IMAP sessions.

If you're not getting any complaints it's probably the former.

Jeff
 
My first thought - PRIOR to googling - was improper disconnect or logout by a client, but I don't believe that it's a client logout issue due to the location of the IP's (Texas,Oregon) since we don't have clients there. Of course, we could have travelling clients, but these errors come from many different physical locations worldwide. Attacks seem more likely....
 
I think so as well.

Do I know you, xcobaltdude? nobaloney.net was at one time the largest independent Cobalt support group (before Cobalt Networks was bought by Sun).

Jeff
 
I'm positive that we "ran into" each other on the old cobalt users' list (I think I used a different handle back then)... and I recognize your name. You don't still have some Raq's online, do you? Wonder whatever happened to Carrie......I still have some of her notes on setting up software.....
 
Carrie switched to a different platform as well; I just don't remember which.

Of the 60 servers or so in our data center, probably around 35 - 40 are still Cobalt RaQs.

Of the systems I personally manage: less than ten.

I might be installing a CentOS/BlueQuartz system next week.

But we're fully committed to DA now; a look at our website should make that clear.

(We were also a Plesk Gold Partner for a while, but we're slowly removing all references to Plesk from our website.)

Jeff
 
Back
Top