Password Brute Force by Protocol
Question asked by John Marx - 11/24/2020 at 5:06 PM
How is this possible? This is the IP address of our mail server. Why is the server blocking itself and how do I find out what site is causing this issue?

1 Reply

Reply to Thread
Jade D Replied
Check your pop retrieval logs for a list of accounts that are retrieving "remote" mail, you'll most likely find that one of those accounts is connecting to itself and failing auth after a user was migrated, and the mailbox password changed.

Reply to Thread