아래의 로그는 portsentry 탐지에 의한 결과구요..  아래와 같은 메시가 며칠전부터
계속 오고 있읍니다.
어떻게 해석을 해야될지도 모르겠고 또 왜 이런게 자꾸오는 걸까요.. 답답해 죽겠읍
니다..
/etc/tcp.smtp 에
204.252.57.249:deny 이렇게 등록을 해놨는데도 계속 오는군요..
저희 서버에서 204.252.57.249에서 오는 메일을 거부하는 거 같기는 한데요..
도통 모르겠군요..
 그리고 rtsd탐지에 의한 로그도 있읍니다...
 
=====================================================================
=======
Aug 23 14:54:01 edufree qmail: 967010041.923837 delivery 19803: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:01 edufree qmail: 967010041.925699 delivery 19808: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:01 edufree qmail: 967010041.938076 delivery 19804: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:01 edufree qmail: 967010041.945041 delivery 19805: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.061604 delivery 19806: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.169896 delivery 19807: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.269899 delivery 19809: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.361556 delivery 19810: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.394874 delivery 19811: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.428203 delivery 19812: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.461550 delivery 19813: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.494870 delivery 19814: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.528196 delivery 19815: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.561534 delivery 19816: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.594859 delivery 19817: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.628197 delivery 19818: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.661525 delivery 19819: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.694850 delivery 19820: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.728179 delivery 19821: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:02 edufree qmail: 967010042.761514 delivery 19822: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.505065 delivery 19824: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.511928 delivery 19826: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.578114 delivery 19827: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.611820 delivery 19828: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.645170 delivery 19829: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.678105 delivery 19825: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.711444 delivery 19830: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.744770 delivery 19831: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.778102 delivery 19832: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.811424 delivery 19833: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.844765 delivery 19834: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.878087 delivery 19835: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.911419 delivery 19836: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.944750 delivery 19837: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:03 edufree qmail: 967010043.978081 delivery 19838: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:04 edufree qmail: 967010044.011412 delivery 19839: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:04 edufree qmail: 967010044.044741 delivery 19840: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:04 edufree qmail: 967010044.111401 delivery 19841: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:04 edufree qmail: 967010044.144731 delivery 19842: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:04 edufree qmail: 967010044.178062 delivery 19843: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:05 edufree qmail: 967010045.018353 delivery 19846: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
Aug 23 14:54:05 edufree qmail: 967010045.019432 delivery 19845: deferral:
Connected_to_204.252.57.249_but_greeting_failed./Remote_host_said:_521_T
his_system_is_configured_to_reject_mail_from_211.53.209.131/
 rtsd 내용.
===============
[00/08/23 12:50:02]
[Scan Attack] From 211.53.209.xxx:2257 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2258 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2259 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2260 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2261 To 204.252.57.249:25
 [00/08/23 14:53:59]
[Scan Attack] From 211.53.209.xxx:2328 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2329 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2330 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2331 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2332 To 204.252.57.249:25
 [00/08/23 14:54:01]
[Scan Attack] From 211.53.209.xxx:2348 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2349 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2350 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2351 To 204.252.57.249:25
[Scan Attack] From 211.53.209.xxx:2352 To 204.252.57.249:25
 그런데 저희 서버의 ip가 211.53.209.xxx거든요..
그럼 저희 쪽에서 204.252.57.249로 스캔했다는 건가요..
저희는 단지 웹서버, 메일서버, 네임서버만 운용하고 있읍니다..
위와 같은 로그들은 어떻게 해석을 해야 합니다..
꼭 답변주시면 고맙겠읍니다...