[BlueOnyx:08406] Server Security

Donald Jacques djmitzlplick at yahoo.com
Thu Sep 8 21:17:41 PET 2011


I am seeing the following message quite often in my Logwatch reports:  ------------------------------------------------------------------------------------------------

dovecot: pop3-login: Disconnected (auth failed, 1 attempts):
user=<adrian>, method=PLAIN, rip=203.72.50.53, lip=65.39.71.132: 1 Time(s)

dovecot: pop3-login: Disconnected (auth failed, 1 attempts):
user=<advanced>, method=PLAIN, rip=203.72.50.53, lip=65.39.71.130: 1 Time(s)

------------------------------------------------------------------------------------------------

I see two ip addresses listed.
The 69.39.71.13x is a recurring attempt -- almost daily now.
Is there a way to block, or blacklist either ip address?
OR is there a setting I need to check?

Don




More information about the Blueonyx mailing list