Current time: 05-07-2024, 06:55 AM Hello There, Guest! (LoginRegister)


Post Reply 
Possible attack?
Author Message
santerref Offline
Junior Member
*

Posts: 62
Joined: Apr 2008
Reputation: 0
Post: #1
Possible attack?
Hello, my ftp server crash 2 or 3 times each day and I don't know why but when i look into the logs i see this :

Code:
Mar  3 16:50:03 ks365184 proftpd[804]: ks365184.kimsufi.com (90.32.141.148[90.32.141.148]) - mod_delay/0.5: delaying for 498 usecs
Mar  3 16:56:39 ks365184 proftpd[1722]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 4533 usecs
Mar  3 16:56:46 ks365184 proftpd[1727]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 24016 usecs
Mar  3 16:56:47 ks365184 proftpd[1728]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 105 usecs
Mar  3 16:58:41 ks365184 proftpd[1841]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 4247 usecs
Mar  3 16:59:34 ks365184 proftpd[1891]: ks365184.kimsufi.com (90.32.138.132[90.32.138.132]) - mod_delay/0.5: delaying for 4649 usecs
Mar  3 17:04:55 ks365184 proftpd[5343]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 6461 usecs
Mar  3 17:07:26 ks365184 proftpd[5870]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 128 usecs
Mar  3 17:07:54 ks365184 proftpd[5878]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 1510 usecs
Mar  3 17:08:37 ks365184 proftpd[5926]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 2531 usecs
Mar  3 17:10:14 ks365184 proftpd[6369]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 12194 usecs
Mar  3 17:10:20 ks365184 proftpd[6370]: ks365184.kimsufi.com (90.32.138.132[90.32.138.132]) - mod_delay/0.5: delaying for 484 usecs
Mar  3 17:10:42 ks365184 proftpd[6375]: ks365184.kimsufi.com (213.246.59.190[213.246.59.190]) - mod_delay/0.5: delaying for 498 usecs
Mar  3 17:15:50 ks365184 proftpd[6981]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 5035 usecs
Mar  3 17:15:57 ks365184 proftpd[6985]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 41390 usecs
Mar  3 17:16:43 ks365184 proftpd[7046]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 7725 usecs
Mar  3 17:23:15 ks365184 proftpd[7814]: ks365184.kimsufi.com (90.59.139.101[90.59.139.101]) - mod_delay/0.5: delaying for 57432 usecs
Mar  3 17:23:40 ks365184 proftpd[7846]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 93022 usecs
Mar  3 17:24:01 ks365184 proftpd[7880]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 1438 usecs
Mar  3 17:24:22 ks365184 proftpd[7893]: ks365184.kimsufi.com (70.53.161.37[70.53.161.37]) - mod_delay/0.5: delaying for 109 usecs
Mar  3 17:25:38 ks365184 proftpd[8305]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 3332 usecs
Mar  3 17:26:58 ks365184 proftpd[8381]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 2 usecs
Mar  3 17:27:45 ks365184 proftpd[8449]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 358 usecs
Mar  3 17:28:44 ks365184 proftpd[8522]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 3365 usecs
Mar  3 17:28:45 ks365184 proftpd[8523]: ks365184.kimsufi.com (81.50.0.124[81.50.0.124]) - mod_delay/0.5: delaying for 3812 usecs
Mar  3 17:29:50 ks365184 proftpd[8589]: ks365184.kimsufi.com (90.59.139.101[90.59.139.101]) - mod_delay/0.5: delaying for 360 usecs
Mar  3 17:35:48 ks365184 proftpd[12422]: ks365184.kimsufi.com (74.56.30.111[74.56.30.111]) - mod_delay/0.5: delaying for 3320 usecs
Mar  3 17:37:00 ks365184 proftpd[12521]: ks365184.kimsufi.com (70.53.161.37[70.53.161.37]) - mod_delay/0.5: delaying for 2792 usecs
Mar  3 17:37:43 ks365184 proftpd[12556]: ks365184.kimsufi.com (24.201.54.192[24.201.54.192]) - mod_delay/0.5: delaying for 1933 usecs
Mar  3 17:39:17 ks365184 proftpd[12698]: ks365184.kimsufi.com (90.59.139.101[90.59.139.101]) - mod_delay/0.5: delaying for 45 usecs
Mar  3 17:43:14 ks365184 proftpd[13260]: ks365184.kimsufi.com (86.200.43.76[86.200.43.76]) - mod_delay/0.5: delaying for 6460 usecs
Mar  3 17:43:36 ks365184 proftpd[13278]: ks365184.kimsufi.com (24.201.54.192[24.201.54.192]) - mod_delay/0.5: delaying for 2520 usecs
Mar  3 17:44:09 ks365184 proftpd[13320]: ks365184.kimsufi.com (90.59.139.101[90.59.139.101]) - mod_delay/0.5: delaying for 16449 usecs
Mar  3 17:45:26 ks365184 proftpd[13726]: ks365184.kimsufi.com (86.200.43.76[86.200.43.76]) - mod_delay/0.5: delaying for 7416 usecs
Mar  3 17:45:30 ks365184 proftpd[13729]: ks365184.kimsufi.com (24.201.54.192[24.201.54.192]) - mod_delay/0.5: delaying for 356 usecs
Mar  3 17:45:37 ks365184 proftpd[13731]: ks365184.kimsufi.com (24.201.54.192[24.201.54.192]) - mod_delay/0.5: delaying for 2615 usecs
Mar  3 17:45:47 ks365184 proftpd[13740]: ks365184.kimsufi.com (69.159.112.5[69.159.112.5]) - mod_delay/0.5: delaying for 5139 usecs
Mar  3 17:47:24 ks365184 proftpd[14598]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 24428 usecs
Mar  3 17:47:31 ks365184 proftpd[14601]: ks365184.kimsufi.com (88.185.16.129[88.185.16.129]) - mod_delay/0.5: delaying for 7417 usecs
Mar  3 17:47:44 ks365184 proftpd[14645]: ks365184.kimsufi.com (86.200.43.76[86.200.43.76]) - mod_delay/0.5: delaying for 491 usecs
Mar  3 17:49:27 ks365184 proftpd[16017]: ks365184.kimsufi.com (90.59.139.101[90.59.139.101]) - mod_delay/0.5: delaying for 162 usecs

I'm not shure if this are attacks because the time between each line is long... if it was 1 or 2 seconds ok but this are like 2 or 3 minutes.
03-04-2009 02:59 AM
Find all posts by this user Quote this message in a reply
Post Reply 


Messages In This Thread
Possible attack? - santerref - 03-04-2009 02:59 AM
RE: Possible attack? - BeNe - 03-04-2009, 03:51 AM
RE: Possible attack? - santerref - 03-04-2009, 07:39 AM
RE: Possible attack? - sci2tech - 03-04-2009, 08:05 AM
RE: Possible attack? - santerref - 03-04-2009, 08:40 AM

Forum Jump:


User(s) browsing this thread: 1 Guest(s)