Log: FATAL: Someone is attacking your system.

[johanqnms]

I have a problem with the task: pollMonitoredInboxesForBouncedCampaignEmails because always show us "In progress" in the forum says us that check the sugarcrm.log

The log show me:


Mon Feb 15 10:43:12 2010 [10428][9dcb5517-027d-0333-3a05-4b55c353c642][FATAL] SugarPHPMailer encountered an error: SMTP Error: Data not accepted.
Thu Feb 18 08:06:01 2010 [3620][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Fri Feb 19 10:17:06 2010 [15358][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Sun Feb 21 18:39:19 2010 [18631][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Sun Feb 21 18:39:46 2010 [19655][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Mon Feb 22 02:19:18 2010 [15044][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Mon Feb 22 02:19:19 2010 [15805][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Mon Feb 22 05:11:39 2010 [15710][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.
Mon Feb 22 09:36:39 2010 [3059][1][FATAL] If you see a whole string of these, there is a chance someone is attacking your system.


Do you know about this problem : /
Thanks for the help

[salesagility]

That "FATAL" output is ignorable. It is a result of a security precaution put into the Schedulers module. That output will happen if someone tries to trigger cron.php more than once in 1 minute.

That your incidents happen sporadically tell me that you have started/stopped the cron task a few times or have manually tried to trigger in some way.

If you see "a whole string of these" in less than 1 minute, then yes, someone is likely trying to DDoS your server.