Strange Dovecot unmatched entries?

Richard G

Verified User
Joined
Jul 6, 2008
Messages
12,554
Location
Maastricht
I'm getting a load of these kind of Dovecot entry's in my logwatch:

Dovecot: auth: passwd([email protected],77.169.xxx.xxx,</qB1xrsfsBdeNxxx>): unknown user: 1 Time(s)

I changed the ip here and a bit of the code between the < > markers.

Where is this coming from? I'm also seeing this on my own email adresses with my own ip adress behind it. But my mail is getting fetched with Outlook.
So there is no unknown user, no unknown password, I never have flaws in my mail.
Is this some kind of Dovecot bug or where are all these "unmatched entries" caused by?
 
I just want to say I am getting the same on my servers, Logwatch is always filled with loads of them. It's been like that for as long as I remember. I don't know why it is like that, but there does not seem to bee anything wrong. Hopefully someone else has more information.
 
Well I had them before, but in those cases it were bruteforces, not like my own ip with my own email, and not as much as these. Well... to be honoust... I don't always check them fully, but a year ago it were not that much and not with my own ip's.
So I'm curious.
 
Back
Top