hi, In my sys logs, I keep getting this error: Sep 21 21:58:25 Server1 dovecot: pop3-login: Aborted login (auth failed, 3 attempts): method=PLAIN, rip=88.88.88.88, lip=88.88.88.88, TLS this problem with this error is that the IP address its complaining about is the server IP, dose this have anything to do with fail2ban? note: that when my server was setup i used the ispconfig 3 ubuntu 12.04 guild, also IP=88.88.88.88 is an example of my server address, and pop3 port is already open. please advise
According to the line, someone tries to connect to po3 from your server. maybe a script like a ticket system or shop that tries to fetch emails and uses a wrong password?
ok so from the server itself? very strange, will try to check it out, I wish their was a better way to trace this issue.
