[BlueOnyx:06935] TROUBLE LOGGING IN TO BLUE ONYX (MAILMAN MESSAGE)

[Rodrigo Ordoñez Licona]

Hi,

 

Has anyone seen this behavior
, this morning, 2 BO servers did not allow the
admin to login. It said session expired.

We ssh to them and checked logs and saw this kind of entries

 

Apr  9 08:34:32 maria cced(smd)[3830]: client 0:[48:30270]: AUTHKEY to user
"" failed

 

We issued a /etc/init.d/cced.init restart

And we were sent to the configuration wizard, we followed the wizard. And
the we were able to login correctly.


.However we found about this strange entry in the logs entry

Apr  9 08:43:04 maria cced(smd)[19804]: client 9:[48:13313]: CREATE
"Mailman" "description" "=" "default maillist" "name" "=" "mailman"
"password" "=" xxx "site" "=" "server" "fqdn" "=" "maria.xnet.mx" "owner"
"=" "admin@????"

Apr  9 08:43:04 maria cced(smd)[19804]: client 9:[48:13313]: CREATE Mailman
failed (-3)

 

Does this indicate a hack attempt, anyone seen this before

 

Regards


Rodrigo O
Xnet

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20110409/a08b1bbb/attachment.html>