Starting roughly 3 hours ago I started getting hit with these messages from one of my servers:
I am getting them for both exim and imap, 48 in all over the past 3 hours (~8/hour each service). I am going to try rebooting the server to see if that helps, but any idea what would have caused this?
-Michael
Code:
Server {servername}
Primary IP Address XXX.XXX.XXX.XXX
Service Name exim
Service Status failed ⛔
Notification The service “exim” appears to be down.
Service Check Method The system failed to connect to this service’s TCP/IP port.
Reason TCP Transaction Log:
<< 220-{servername} ESMTP Exim 4.91 #1 Mon, 17 Dec 2018 03:22:24 +0000
<< 220-We do not authorize the use of this system to transport unsolicited,
<< 220 and/or bulk e-mail.
>> EHLO localhost
<< 250-{servername} Hello localhost [127.0.0.1]
<< 250-SIZE 52428800
<< 250-8BITMIME
<< 250-PIPELINING
<< 250-AUTH PLAIN LOGIN
<< 250-STARTTLS
<< 250 HELP
>> AUTH PLAIN {long-auth-string-removed}
<< 535 Incorrect authentication data
exim: ** [535 Incorrect authentication data != 2]
: Died
Number of Restart Attempts 16
Service Check Raw Output The 'exim' service passed the check: exim (/usr/sbin/exim -ps -bd -q1h -oP /var/spool/exim/exim-daemon.pid) is running as mailnull with PID 17965 (systemd+/proc check method).
Startup Log Dec 17 03:11:12 {servername} systemd[1]: Starting Exim is a Mail Transport Agent, which is the program that moves mail from one machine to another....
Dec 17 03:11:12 {servername} systemd[1]: Started Exim is a Mail Transport Agent, which is the program that moves mail from one machine to another..
Log Messages 2018-12-17 03:11:12 exim 4.91 daemon started: pid=17965, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
-Michael