Email accounts don't work

Schnuupi

Member
Mar 2, 2014
14
0
1
cPanel Access Level
Root Administrator
I have email accounts which used to work fine but then suddenly stopped working. I can't log in, with roundcube I get Login Failed, with the others it tells me the password is incorrect, I've changed the passwords in cPanel and when I try to set it up on Android I get incorrect login details, also a mailbox which had quite a few mail went to 0/250MB.

Searched around but couldn't find anything like my problem.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Hello :)

Is it possible the email accounts have been locked by cPHulk brute force detection? Review the "Login/Brute History Report" in "WHM Home » Security Center » cPHulk Brute Force Protection" to determine if any entries exist for these accounts.

Thank you.
 

Schnuupi

Member
Mar 2, 2014
14
0
1
cPanel Access Level
Root Administrator
Hey no cPHulk was already disabled because it was blocking me logging into WHM.
Code:
[08-Apr-2014 17:55:06 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 86.134.xx.xx. LOGIN: Login failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (GET /cpsess5754231897/3rdparty/roundcube/index.php)
[08-Apr-2014 17:55:38 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 86.134.xx.xx. LOGIN: Login failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess5754231897/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 17:57:41 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 86.134.xx.xx. LOGIN: Login failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess5754231897/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 18:00:09 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 86.134.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess5754231897/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 18:02:19 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 86.134.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (GET /cpsess5754231897/3rdparty/roundcube/index.php)
[08-Apr-2014 18:25:35 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (GET /cpsess3662270239/3rdparty/roundcube/index.php)
[08-Apr-2014 18:26:33 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess3662270239/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 18:28:05 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess3662270239/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 18:28:25 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess3662270239/3rdparty/roundcube/index.php?_task=login&_action=login)
[08-Apr-2014 18:46:36 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. AUTHENTICATE PLAIN: Authentication failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /cpsess3662270239/3rdparty/roundcube/index.php?_task=login&_action=login)
[10-Apr-2014 21:06:55 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. LOGIN: Login failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (GET /cpsess3869738756/3rdparty/roundcube/index.php)
[10-Apr-2014 21:07:37 +0100]: IMAP Error: Login failed for user @ domain.co.uk from 81.155.xx.xx. LOGIN: Login failed. in /usr/local/cpanel/base/3rdparty/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (GET /cpsess3869738756/3rdparty/roundcube/index.php)
That's the roundcube errors.

Code:
Apr 13 03:29:11 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:29:11 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42923], protocol=IMAP
Apr 13 03:29:11 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 03:31:36 gm-host pop3d-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 03:31:37 gm-host pop3d-ssl: LOGIN, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57098]
Apr 13 03:31:37 gm-host pop3d-ssl: LOGOUT, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57098], top=0, retr=0, rcvd=20, sent=67, time=0, stls=1
Apr 13 03:34:12 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:34:12 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42927], protocol=IMAP
Apr 13 03:34:12 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 03:39:13 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:39:13 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42931], protocol=IMAP
Apr 13 03:39:14 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 03:44:14 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:44:14 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42935], protocol=IMAP
Apr 13 03:44:15 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 03:45:36 gm-host pop3d-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 03:45:37 gm-host pop3d-ssl: LOGIN, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57114]
Apr 13 03:45:37 gm-host pop3d-ssl: LOGOUT, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57114], top=0, retr=0, rcvd=20, sent=67, time=0, stls=1
Apr 13 03:49:14 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:49:14 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42939], protocol=IMAP
Apr 13 03:49:15 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 03:54:15 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:54:16 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42943], protocol=IMAP
Apr 13 03:54:16 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 03:58:52 gm-host pop3d-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 03:58:53 gm-host pop3d-ssl: LOGIN, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57122]
Apr 13 03:58:53 gm-host pop3d-ssl: LOGOUT, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57122], top=0, retr=0, rcvd=20, sent=67, time=0, stls=1
Apr 13 03:59:16 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 03:59:17 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42948], protocol=IMAP
Apr 13 03:59:17 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 04:04:18 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:04:18 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42952], protocol=IMAP
Apr 13 04:04:18 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 04:09:19 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:09:19 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42959], protocol=IMAP
Apr 13 04:09:19 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 04:13:37 gm-host pop3d-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 04:13:37 gm-host pop3d-ssl: LOGIN, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57125]
Apr 13 04:13:37 gm-host pop3d-ssl: LOGOUT, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57125], top=0, retr=0, rcvd=20, sent=67, time=0, stls=1
Apr 13 04:14:20 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:14:20 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42972], protocol=IMAP
Apr 13 04:14:20 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 04:17:41 gm-host imapd-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 04:17:41 gm-host imapd-ssl: LOGIN, [email protected], ip=[::ffff:84.106.xx.xx], port=[57138], protocol=IMAP
Apr 13 04:17:42 gm-host imapd-ssl: LOGOUT, [email protected], ip=[::ffff:84.106.xx.xx], headers=0, body=0, rcvd=212, sent=1057, time=1, starttls=1
Apr 13 04:19:21 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:19:21 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42976], protocol=IMAP
Apr 13 04:19:22 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 04:24:22 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:24:22 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42984], protocol=IMAP
Apr 13 04:24:23 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 04:27:45 gm-host pop3d-ssl: Connection, ip=[::ffff:84.106.xx.xx]
Apr 13 04:27:46 gm-host pop3d-ssl: LOGIN, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57144]
Apr 13 04:27:46 gm-host pop3d-ssl: LOGOUT, user=user @ otherdomain, ip=[::ffff:84.106.xx.xx], port=[57144], top=0, retr=0, rcvd=20, sent=67, time=0, stls=1
Apr 13 04:29:22 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:29:22 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42988], protocol=IMAP
Apr 13 04:29:23 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=1
Apr 13 04:34:23 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:34:24 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42992], protocol=IMAP
Apr 13 04:34:24 gm-host imapd: LOGOUT, user=cpanel@localhost, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=12, sent=86, time=0
Apr 13 04:39:24 gm-host imapd: Connection, ip=[::ffff:127.0.0.1]
Apr 13 04:39:25 gm-host imapd: LOGIN, user=cpanel@localhost, ip=[::ffff:127.0.0.1], port=[42996], protocol=IMAP
That's the maillog errors.
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Is this only happening with Roundcube, or do you notice the same behavior with other webmail clients?

Thank you.
 

Schnuupi

Member
Mar 2, 2014
14
0
1
cPanel Access Level
Root Administrator
It seems to only be the main domain of my site domain.co.uk that isn't working. My WHM is set hostname to server1.domain.co.uk and i made an account for cpanel for domain.co.uk and for a long time it was working fine.
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Could you confirm if this is happening with Roundcube exclusively, or if it also occurs with other webmail clients (Horde, SquirrelMail)?

Thank you.
 

Schnuupi

Member
Mar 2, 2014
14
0
1
cPanel Access Level
Root Administrator
Could you confirm if this is happening with Roundcube exclusively, or if it also occurs with other webmail clients (Horde, SquirrelMail)?

Thank you.
I did reply, I left one before I left the one about the domains. Clearly the forums here messed up. I said it happens on everything including clients like thunderbird and android.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Could you open a support ticket so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.