On Fri, Jun 21, 2013 at 10:27:07AM +1200, Hugh Davenport wrote:
The attack lasted around 4 minutes, in which there was 1161 lines
in the log for a
single attacker ip, and no other similar logs previously.
Would this be enough to kill not only the VM running dovecot, but
the underlying host
Checked the main logs. No go. Didn't check qemu logs. Will do that.
I'm starting to think it was the power as when I turned of the UPS as a test.
The server shutdown as well... Will get that fixed.
Cheers,
Hugh
Stefan Hajnoczi stefa...@gmail.com wrote:
On Fri, Jun 21, 2013 at 10:27:07AM
21.06.2013 02:27, Hugh Davenport wrote:
Hey All,
I'm just wondering whether this is what caused my server to crash.
If some activity in a virtual machine causes the host to crash, it is
a serious bug in qemu/kvm which should be identified fixed.
Thanks,
/mjt
--
To unsubscribe from this
Hey All,
I'm just wondering whether this is what caused my server to crash.
Started last night in NZ land.
Jun 20 19:22:11 elm dovecot: imap-login: Disconnected (tried to use
disallowed plaintext auth): user=, rip=attackerip, lip=10.0.0.3,
session=0C8LzpDfZQDINsQC
occasionally get
Jun 20
