Some email client is constantly checking email every 8-10 seconds. Actual client of noted account says he has nothing on at the moment. Turned his phone off for us to ensure it wasn’t Outlook on his phone. Any other ideas of from where these entries might be coming?
Dec 29 14:20:03 imap-login: Info: Login: email@example.com, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13575, secured, session=<MsTgIN+akrF/AAAB>
Dec 29 14:20:03 imap(firstname.lastname@example.org): Info: Logged out in=12 out=412
Dec 29 14:20:12 imap-login: Info: Login: email@example.com, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=14010, secured, session=<ht1qId+amLF/AAAB>
Dec 29 14:20:12 imap(firstname.lastname@example.org): Info: Logged out in=12 out=412
The IP address seems to indicate ‘the call is coming from inside the house’ but I certainly don’t have anything running for this account and when my email client checks in I can see my IPv6 address in the relevant log entry.
Thanks for any leads.