IP blocked because: (smtpauth) Failed SMTP AUTH login from - can someone explain?
- by gdaniel
Today I had a few users blocked in our server firewall because of:
(smtpauth) Failed SMTP AUTH login from
Can someone explain the reason? What does it exactly mean? Could someone be using the our website to access SMTP for spamming purpose?
UPDATE:
Server info:
Centos OS with CPanel and WHM. However no one has access to either.
Taking a look at the logs it looks like someone repetitively attempted to login with a known existent user/pass.