Oct 12 20:24:15 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.2 ... show moreOct 12 20:24:15 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:35 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:54 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:25:11 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user show less
Oct 12 20:24:15 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.2 ... show moreOct 12 20:24:15 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:35 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:24:54 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user
Oct 12 20:25:11 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<3QLx8yvOlN9JSRTY>): unknown user show less
Oct 12 06:31:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73. ... show moreOct 12 06:31:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:31:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:31:44 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:32:02 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:32:19 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user show less
Oct 12 06:31:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73. ... show moreOct 12 06:31:23 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:31:32 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:31:44 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:32:02 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user
Oct 12 06:32:19 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<n5VgUSDO+J9JSRTY>): unknown user show less
Oct 12 02:22:18 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.2 ... show moreOct 12 02:22:18 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:25 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:37 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:56 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:23:13 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user show less
Oct 12 02:22:18 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.2 ... show moreOct 12 02:22:18 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:25 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:37 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:22:56 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user
Oct 12 02:23:13 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],73.73.20.216,<MZuV1hzOIuhJSRTY>): unknown user show less
(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 5 ... show more(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 5 in the last 3600 secs show less
Brute-Force
Anonymous
(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 1 ... show more(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_IMAPD; Logs:
Oct 14 13:06:21 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 66 secs): user=<[email protected]>, method=PLAIN, rip=73.73.20.216, lip=209.188.21.35, TLS: Connection closed, session=<MO42BknO+I1JSRTY>
Oct 14 13:33:24 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 71 secs): user=<careers>, method=PLAIN, rip=73.73.20.216, lip=209.188.21.35, TLS: Connection closed, session=<EpWfZknOeItJSRTY> show less
Port Scan
Anonymous
(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 1 ... show more(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_IMAPD; Logs:
Oct 13 00:48:57 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 57 secs): user=<[email protected]>, method=PLAIN, rip=73.73.20.216, lip=209.188.21.35, TLS: Connection closed, session=<i6e+myrO4LdJSRTY>
Oct 13 01:45:54 host01 dovecot: imap-login: Disconnected (auth failed, 5 attempts in 61 secs): user=<[email protected]>, method=PLAIN, rip=73.73.20.216, lip=209.188.21.35, TLS: Connection closed, session=<WLwoZyvOmKJJSRTY> show less
(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 5 ... show more(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 5 in the last 3600 secs show less
(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 4 ... show more(imapd) Failed IMAP login from 73.73.20.216 (US/United States/c-73-73-20-216.hsd1.il.comcast.net): 4 in the last 3600 secs show less