The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Blocked smtpauth

Discussion in 'Security' started by mauriciosouza10, Apr 25, 2014.

  1. mauriciosouza10

    Joined:
    Apr 25, 2014
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I'm getting these warnings:

    Time: Fri Apr 25 21:28:46 2014 -0300
    IP: 80.146.33.135 (DE/Germany/p50922187.dip0.t-ipconnect.de)
    Failures: 5 (smtpauth)
    Interval: 3600 seconds
    Blocked: Permanent Block

    Log entries:

    2014-04-25 21:27:48 dovecot_login authenticator failed for p50922187.dip0.t-ipconnect.de ([192.168.2.33]) [80.146.33.135]:1099: 535 Incorrect authentication data (set_id=cadastro)
    2014-04-25 21:27:54 dovecot_login authenticator failed for p50922187.dip0.t-ipconnect.de ([192.168.2.33]) [80.146.33.135]:1099: 535 Incorrect authentication data (set_id=cadastro)
    2014-04-25 21:28:11 dovecot_login authenticator failed for p50922187.dip0.t-ipconnect.de ([192.168.2.33]) [80.146.33.135]:1099: 535 Incorrect authentication data (set_id=cadastro)
    2014-04-25 21:28:28 dovecot_login authenticator failed for p50922187.dip0.t-ipconnect.de ([192.168.2.33]) [80.146.33.135]:1099: 535 Incorrect authentication data (set_id=cadastro)
    2014-04-25 21:28:45 dovecot_login authenticator failed for p50922187.dip0.t-ipconnect.de ([192.168.2.33]) [80.146.33.135]:1099: 535 Incorrect authentication data (set_id=cadastro)


    I have the ports 21, 2082, 2083, 2086, 2087, 2095, 2096, 587, 143, 110 blocked for all and allowed only for my country, then I would like to know where this is happening authentication attempt? I have to block a range of ip?
     
  2. vanessa

    vanessa Well-Known Member
    PartnerNOC

    Joined:
    Sep 26, 2006
    Messages:
    817
    Likes Received:
    22
    Trophy Points:
    18
    Location:
    Virginia Beach, VA
    cPanel Access Level:
    DataCenter Provider
    It's from SMTP, port 25.
     
  3. mauriciosouza10

    Joined:
    Apr 25, 2014
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Thanks for reply. Did blocking port 25 and let the 587 open only to my country, let's see if resolves.
     
  4. mauriciosouza10

    Joined:
    Apr 25, 2014
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    But port 25 I can not block right? If I block I will not receive emails on the server right?
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,723
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Yes, the following post answers this question in detail:

    Blocking Port 25

    Thank you.
     
Loading...

Share This Page