block ip

Samorai7

• October 29, 2019 13:50

Good day, I have an email account that receives successful logins from an unknown ip address I have the following information that I am trying to make sense off [QUOTE]

Local IP Address: Local Port: 995 Remote IP Address: Remote Port: 51075

I am playing around with the idea that this could be a login via a mail client because of the '995' port Also, if I wanted to prevent an ip address from accessing this webmail account, how would I go about doing this?

• 

  cPanelLauren

  • October 29, 2019 22:44

  If you have access to /var/log/maillog you could see how they're authenticating but ultimately if the mailbox is being accessed from somewhere you're unfamiliar with - the first step would be to change the password.

  0
• 

  keat63

  • October 30, 2019 08:35

  Also install CSF firewall and block the IP.

  0

Please sign in to leave a comment.