메일로그..
작성자 정보
- 메일러 작성
- 작성일
컨텐츠 정보
- 1,927 조회
- 1 댓글
- 0 추천
- 목록
본문
메일로그에 아래와 같은 로그가 무지 많네요..
해킹당한건가요?
아니면 왜 이런 현상이 발생되는건가요?
알려주세요ㅠㅠ
Dec 3 23:42:49 hostname xinetd[25561]: EXIT: imap pid=30772 duration=0(sec)
Dec 3 23:42:52 hostname xinetd[25561]: START: imap pid=30773 from=127.0.0.1
Dec 3 23:42:53 hostname xinetd[25561]: EXIT: imap pid=30773 duration=1(sec)
Dec 3 23:42:53 hostname xinetd[25561]: START: imap pid=30774 from=127.0.0.1
Dec 3 23:42:53 hostname xinetd[25561]: EXIT: imap pid=30774 duration=0(sec)
Dec 3 23:42:56 hostname xinetd[25561]: START: imap pid=30775 from=127.0.0.1
Dec 3 23:42:57 hostname xinetd[25561]: EXIT: imap pid=30775 duration=1(sec)
Dec 3 23:42:57 hostname xinetd[25561]: START: imap pid=30776 from=127.0.0.1
Dec 3 23:42:57 hostname xinetd[25561]: EXIT: imap pid=30776 duration=0(sec)
Dec 3 23:43:01 hostname xinetd[25561]: START: imap pid=30777 from=127.0.0.1
Dec 3 23:43:01 hostname xinetd[25561]: EXIT: imap pid=30777 duration=0(sec)
Dec 3 23:43:02 hostname xinetd[25561]: START: imap pid=30778 from=127.0.0.1
Dec 3 23:43:02 hostname xinetd[25561]: EXIT: imap pid=30778 duration=0(sec)
Dec 3 23:43:05 hostname xinetd[25561]: START: imap pid=30779 from=127.0.0.1
Dec 3 23:43:05 hostname xinetd[25561]: EXIT: imap pid=30779 duration=0(sec)
Dec 3 23:43:14 hostname xinetd[25561]: START: imap pid=30780 from=127.0.0.1
Dec 3 23:43:14 hostname xinetd[25561]: EXIT: imap pid=30780 duration=0(sec)
Dec 3 23:43:14 hostname xinetd[25561]: START: imap pid=30781 from=127.0.0.1
Dec 3 23:43:14 hostname xinetd[25561]: EXIT: imap pid=30781 duration=0(sec)
Dec 3 23:43:29 hostname xinetd[25561]: START: imap pid=30782 from=127.0.0.1
Dec 3 23:43:29 hostname xinetd[25561]: EXIT: imap pid=30782 duration=0(sec)
Dec 3 23:43:29 hostname xinetd[25561]: START: imap pid=30783 from=127.0.0.1
Dec 3 23:43:29 hostname xinetd[25561]: EXIT: imap pid=30783 duration=0(sec)
Dec 3 23:43:31 hostname xinetd[25561]: START: imap pid=30784 from=127.0.0.1
..................................
Dec 3 23:12:11 hostname imapd[30544]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:16 hostname imapd[30545]: imap service init from 127.0.0.1
Dec 3 23:12:16 hostname imapd[30545]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:16 hostname imapd[30545]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:16 hostname imapd[30546]: imap service init from 127.0.0.1
Dec 3 23:12:16 hostname imapd[30546]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:17 hostname imapd[30546]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:28 hostname imapd[30547]: imap service init from 127.0.0.1
Dec 3 23:12:28 hostname imapd[30547]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:28 hostname imapd[30547]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:28 hostname imapd[30548]: imap service init from 127.0.0.1
Dec 3 23:12:28 hostname imapd[30548]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:29 hostname imapd[30548]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:35 hostname imapd[30549]: imap service init from 127.0.0.1
Dec 3 23:12:35 hostname imapd[30549]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:35 hostname imapd[30549]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:12:36 hostname imapd[30550]: imap service init from 127.0.0.1
Dec 3 23:12:36 hostname imapd[30550]: Login user=user1 host=[127.0.0.1]
Dec 3 23:12:36 hostname imapd[30550]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:13:09 hostname imapd[30551]: imap service init from 127.0.0.1
Dec 3 23:13:09 hostname imapd[30551]: Login user=user1 host=[127.0.0.1]
Dec 3 23:13:09 hostname imapd[30551]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:13:11 hostname imapd[30552]: imap service init from 127.0.0.1
Dec 3 23:13:11 hostname imapd[30552]: Login user=user1 host=[127.0.0.1]
Dec 3 23:13:12 hostname imapd[30552]: Logout user=user1 host=[127.0.0.1]
Dec 3 23:13:17 hostname imapd[30553]: imap service init from 127.0.0.1
관련자료
-
이전
-
다음
도리님의 댓글
- 도리
- 작성일
user1의 id를 사용하는 사람이 .. 웹메일을 사용하는 정상적인 로그로 보입니다.
그치만 너무 많다면, 외부사용자가 비밀번호를 알기위해서 무작위로 넣어 보는 경우로 볼 수 도 있으니.. 웹로그를 확인해 보시는 것도 좋은 방법일 듯 합니다.