Repeated POP3 login failures not detected
Posted: 06 Jun 2023, 15:52
Hi
Repeated maillog entries of the following form were not detected when they should have been (obfuscated):
Log entries like this are rare.
CentOS Linux release 7.9.2009
cPanel 110.0.7
dovecot 2.3.19.1
Repeated maillog entries of the following form were not detected when they should have been (obfuscated):
Code: Select all
Jun 6 13:28:17 vps dovecot: pop3-login: Disconnected: Connection closed: read(size=984) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<someone@example.com>, method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, session=<FzFMJ3X9oKuwgfnA>CentOS Linux release 7.9.2009
cPanel 110.0.7
dovecot 2.3.19.1