someone is trying to hack the server / account
probably best to block originating ip address?
Thanks - Paul Kudla (Manager SCOM.CA Internet Services Inc.)
Have A Happy Sunday AND Happy Sucessful 2026 !
Scom.ca Internet Services <http://www.scom.ca>
104-1009 Byron Street South
Whitby, Ontario - Canada
L1N 4S3
Toronto 416.642.7266
Main 1.866.411.7266
Fax 1.888.892.7266
Email [email protected]
On 2026-01-04 5:29 p.m., Bryan Simmons via dovecot wrote:
Log contains several messages from dovecot that are not clear to me
exactly what is occurring, single example below. These appear to be
login attempts for the same group of non existent user ids from various
rip addresses. Am I interpreting these correctly and, if so, is there
any issue with just ignoring them?
dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1
attempts in 0 secs): user=<[email protected]>, rip=0.0.0.0
Thank you, Bryan
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]