Displaying 2 results from an estimated 2 matches for "gmrll3gar861h".
2017 Mar 21
2
dovecot POP3 log shows too many identical RETR entries
...20 00:00:10 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:11 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=29932, secured,
session=<k6/gmRlL3gAr861h>
Mar 20 00:00:12 pi3 dovecot: pop3(user at example.com): Disconnected:
Logged out top=0/0, retr=1/64014, del=0/1429, size=478762716
Mar 20 00:00:13 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=26819, secured,
session...
2017 Mar 22
0
dovecot POP3 log shows too many identical RETR entries
...ecot: pop3(user at example.com): Disconnected: Logged out
> top=0/0, retr=1/64014, del=0/1429, size=478762716
> Mar 20 00:00:11 pi3 dovecot: pop3-login: Login: user=<user at example.com>,
> method=PLAIN, rip=43.243.173.97, lip=192.168.1.18, mpid=29932, secured,
> session=<k6/gmRlL3gAr861h>
> ==============
>
> What could be the possible reason?
stating the obvious: it looks like normal POP3 polling with abnormal short
interval.
To verify the guess sniff the network traffic, if the clients open a
connection in that short time. If so, check out the users devices, why t...