I looked in the error logs for the round cube and there is not an error for this message at all it just seems to be in the reading pane of the webgui for roundcube.
Example output from the error.log in roundcube:
et from 63.208.139.216. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[23-Feb-2022 17:06:59 -0500]: <6hnoahi2> IMAP Error: Login failed for landm_brown88 against hoist.myninestar.net from 63.208.139.216. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[23-Feb-2022 17:52:12 -0500]: <oj7fogoe> PHP Error: Invalid response code received from server (POST /?_task=mail&_unlock=loading1645656732852&_framed=1&_lang=en_US&_action=send)
[23-Feb-2022 17:52:12 -0500]: <oj7fogoe> SMTP Error: Failed to set sender 'Rapidron5@myninestar.net'. 5.1.0 <Rapidron5@myninestar.net>: Sender address rejected: User unknown in local recipient table (Code: 550) in /var/www/html/program/lib/Roundcube/rcube.php on line 1728 (POST /?_task=mail&_unlock=loading1645656732852&_framed=1&_lang=en_US&_action=send)
[23-Feb-2022 20:00:40 -0500]: <656vn6ss> IMAP Error: Login failed for cherylmcd44 against hoist.myninestar.net from 63.208.139.52. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[23-Feb-2022 21:47:42 -0500]: <dr1rngvi> IMAP Error: Login failed for dallas8 against hoist.myninestar.net from 63.208.139.90. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[24-Feb-2022 07:20:19 -0500]: <614p8uee> IMAP Error: Login failed for jbbodell against hoist.myninestar.net from 174.211.108.135. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[24-Feb-2022 08:01:04 -0500]: <rn40ddt8> IMAP Error: Login failed for lwoutdoor against hoist.myninestar.net from 63.208.139.9. LOGIN: Login failed. in /var/www/html/program/lib/Roundcube/rcube_imap.php on line 196 (POST /?_task=login&_action=login)
[24-Feb-2022 08:01:27 -0500]: <203b2bsb> PHP Error: Request security check failed (POST /?_task=login&_action=login)
Which is a lot of login failures for accounts I send another invite today about 8:30 am got the same error
X-Original-To: pcsupport@myninestar.net
Delivered-To: pcsupport@myninestar.net
Received: from smtp55.redcondor.net (smtp55.redcondor.net [204.8.8.94])
by pulley.myninestar.net (Postfix) with ESMTP id EB3DFF00858
for <pcsupport@myninestar.net>; Thu, 24 Feb 2022 08:43:21 -0500 (EST)
Received-SPF: Pass (Receiver:smtp55.redcondor.net Explanation:40.107.92.103)
Received: from NAM10-BN7-obe.outbound.protection.outlook.com ([40.107.92.103])
by smtp55.redcondor.net ({c24fb42c-0a88-11ec-be81-a1d83607bb7d})
via TCP (inbound) with ESMTPS id 20220224134320632_0055
for <pcsupport@myninestar.net>;
Thu, 24 Feb 2022 13:43:20 +0000
X-RC-FROM: <rweston@ninestarconnect.com>
X-RC-RCPT: <pcsupport@myninestar.net>
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=XZR2uOHCVLdtkzKmyz7f3bbVId5pkGjMLx/fjvdQ7WxIP4uw4j1vD/q40oUIoB876gHp4aEwagNnyZehZd6RRUp8ADyk0NTRgx3McneB0DO/PXGTwJKCwIiNP2fSLxjzJ2RSJd7XVlHnfpwWo4MPP9UqenYrun6Y9GVqxm1o3MDZus6acbPmz0tC4ocYwIdSahyxzSTB89hIPmodBu8gyWio+qQ8r8lHcXz1PQt3A5IJilbIstpo6mwkJ7fkPZ1empLg/WRWl05UU7zBrQ17G2b91U6KwQI6QPP52OZcRvLbm8nPp8GqBiXfumB4n79q8mMHslfd+Aqq51/eTgw8/g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=rG8IyTGrRA+/eJvj1k/sb3IqbS+SLI0PH9lwVKhDewk=;
b=DE+l5q1aSXTN6siQFE2bN8HAJremUxe7k8A6ie7So43k6baeHzfIZey2QvAdtaaoo7iPuQwVxaoEXmBnfzsbwTYNOcqPB/Txz10BrAI4tjOl/AD6y1waoVef/1FaxzUX/OKEzGPgwbXj8y1zhcRBDHsFbacEvCbzDVKx1Zq0wTLiWPy3pIYjWVPUSMcBrf2pBpY82SyFCG7t0SJrPqPWly9CaH0/zxT/n/lKcbsFguLlELvgdE37JRJ7RbZociOogubzarVmJiFzJMrF9FWP4wFrBQHOb1B39YNUiyMnnI6TWLQywin/OGj2HbEwM3JxsaxApYEO5q3DQ9b9O4ABHQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=ninestarconnect.com; dmarc=pass action=none
header.from=ninestarconnect.com; dkim=pass header.d=ninestarconnect.com;
arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ninestarconnect.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=rG8IyTGrRA+/eJvj1k/sb3IqbS+SLI0PH9lwVKhDewk=;
b=YqsCRCZf0gLqeKwquebPiwgeanXKrFCTirCHkzNpl5A4B1LmCMNclToP7E3SdRVuw5EOoYxOUJoHutuNgaKbeJaC9F7lKzImEx7Z1ofxPCH+eufXlze0SPW+hzqDG1AlDWkJ9EMrGhvtiB3jIu0zP1cRhQXb092jKIxo7r7T09U=
Received: from SJ0PR17MB5960.namprd17.prod.outlook.com (2603:10b6:a03:43d::17)
by DM6PR17MB4118.namprd17.prod.outlook.com (2603:10b6:5:2b6::21) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4995.27; Thu, 24 Feb
2022 13:43:11 +0000
Received: from SJ0PR17MB5960.namprd17.prod.outlook.com
([fe80::6914:6da4:4272:65da]) by SJ0PR17MB5960.namprd17.prod.outlook.com
([fe80::6914:6da4:4272:65da%3]) with mapi id 15.20.4995.026; Thu, 24 Feb 2022
13:43:11 +0000
From: Ronnie Weston <RWeston@ninestarconnect.com>
To: pcsupport <pcsupport@myninestar.net>
Subject: Test Meeting #3
Thread-Topic: Test Meeting #3
Thread-Index: AdgphGtFLxyZCGznQM2eTfGwdDp1uwAAAqAg
Date: Thu, 24 Feb 2022 13:43:11 +0000
Message-ID:
<SJ0PR17MB596017F0FEB696BEC5DDC724B53D9@SJ0PR17MB5960.namprd17.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
authentication-results: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=ninestarconnect.com;
x-ms-exchange-calendar-series-instance-id:
BAAAAIIA4AB0xbcQGoLgCAAAAABwOvKMWinYAQAAAAAAAAAAEAAAABMwoxyV1SFHlxzqROJOkO4=
x-ms-traffictypediagnostic:
SJ0PR17MB5960:EE_MeetingMessage|DM6PR17MB4118:EE_MeetingMessage
x-ms-office365-filtering-correlation-id: dd9baf11-8ae6-4930-0e3f-08d9f79b9963
x-microsoft-antispam-prvs:
<DM6PR17MB4118A5FFE0B043644683A10DB53D9@DM6PR17MB4118.namprd17.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SJ0PR17MB5960.namprd17.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(4636009)(346002)(39840400004)(376002)(366004)(136003)(396003)(508600001)(7116003)(4270600006)(8676002)(55236004)(71200400001)(76116006)(66556008)(122000001)(66476007)(52536014)(64756008)(66946007)(66446008)(7696005)(38100700002)(33656002)(6506007)(2906002)(38070700005)(558084003)(186003)(5660300002)(26005)(6916009)(8936002)(316002)(55016003)(86362001)(9686003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?f3lHZMg/Tpyfp6VbcvpRdDXr2CNgAZ9vjs3yhzORRs6UJ97eG1GpuA9pfS?=
=?iso-8859-1?Q?Hq4jb52U4wyffg3BpG9MNaRf3K+YJyQavCuzQSOy4ZZky9o2q7JzoELR4b?=
=?iso-8859-1?Q?fkxbhKGQT17gGAwkvJXni8XdRvYXlTwCYzcoB6+NPdH1vxYF5es82hKZTz?=
=?iso-8859-1?Q?0i9XJkt1yR2C00kY3PuA1V3L0Q3EG1Hl/oE8hEYTecS5h+9JfDwVNxoVKt?=
=?iso-8859-1?Q?RrGWxvfHbb9UnQPPLmAedjuazc4pmgfiw6yAYyuSg61tG+ed0DPUvCrdl5?=
=?iso-8859-1?Q?5GPa+UtXboaZXt4Mnzz2rpuvcS0jRubqs07b2L7amZ4T4UumQwdYiPfT2Q?=
=?iso-8859-1?Q?41igG22NPcHdmGg4oRGNCjJNk3ersd+ac+jfe89SL5s3HSSou4EYGQCrs7?=
=?iso-8859-1?Q?M63Ate594dfveo7zQ2abBeNJvipjVba9g5AyYSMbb7ql/BorOeN7lGXFN2?=
=?iso-8859-1?Q?GWdCFzUShWcPj6xtN1IHxDMQKp1paS3gZOHDaun+1nwRfy74DbumZ+r6EB?=
=?iso-8859-1?Q?vTTzxBWXPgnnq7lBLs7su3MLNccFUB5sg5HbiARdnFYHbK3Q43yrGcCmEq?=
=?iso-8859-1?Q?/BKPc8OAOxXfEm2mywq837BWPeklN3k2cz8j+cMD9Ld7V4seyQ+ptJAcAB?=
=?iso-8859-1?Q?YFLeeO9owK6uVwZ22viRQ18DFN1oTwpOYheXtNIJC2tQFnMByv1jCCzxJ/?=
=?iso-8859-1?Q?7RRl0DBmrqO4vdqfMJL8M9WM5Jkm5wpVUQar6kAJFmgxBICyOBDJjgdfDl?=
=?iso-8859-1?Q?ElHL54x0b2frjnhtNv1V4hwz4MjJBzBPV+M2iMNHC/e0FeKIf/kOyyK1Fc?=
=?iso-8859-1?Q?aSSQhXyikRSgqi3/9/S5xjoCp1sMJAfvybqaqnPXDaDePNQKZ9nh356xa5?=
=?iso-8859-1?Q?J5fI/7DZ/2SQAJf+nuZ5afMlJ7Jw8GotLyo+WNlKzWQ6qa+eztH18v5AIw?=
=?iso-8859-1?Q?Ng+W0FugnCXT7wYHmSpBmft103cNK4E+ZZcz8btccUErBg+V5F/W4YVFo8?=
=?iso-8859-1?Q?A8VwuBeAuE8+goVf2e8lPKWsoaMTzZtkauQDEXqS4ajHlTHo2n/JmE856U?=
=?iso-8859-1?Q?4nMThTOTL5QbhMRpMnXwIIm0XprA68Lmj616FqSmS33POeitsOhGtmkGuR?=
=?iso-8859-1?Q?y9rVem6pEbhUaDX1ntQZ2ir2Eb6GrNJcVfWfrrCmI2QAVVKoRZ7YNlHj1H?=
=?iso-8859-1?Q?/qApStTh+MtKIMQme/AyaA437Aofyi+w6FN2pQfofg+rM7ijltOo1o+rye?=
=?iso-8859-1?Q?bv/F04Vpo802PZ+cdj0ORTOF5M0tCJJzZatduZNV6Rlmw3jeMSzNYuyHnp?=
=?iso-8859-1?Q?NJZIshj9foCk5w/7S11mf/nLxGTiI9LU/AdNNF8x3RSRBlA8Xmr+GUwOkT?=
=?iso-8859-1?Q?sR/x/cjSKJqp3evb86Bgt54o/jnCzWLvfJ6am0aWjwM4tFhWVQX8iNqtgt?=
=?iso-8859-1?Q?u9u87aJ/5jW2Y9SKTu/m9KoYUT7TuJPru/DUdvRjDmIM5in57faF5ZRu3f?=
=?iso-8859-1?Q?JCz73LLIb7pnYLIQzNos6M1whc6/aDxmuiuRCNrJwkE9OSo5AWoDNSo0DH?=
=?iso-8859-1?Q?eGEZQk0kx1kgFNiOgFP2BBzNVJ57TtzcvQVJEhBvn7B7/lTB2JmPSAPgNb?=
=?iso-8859-1?Q?bAT+5/9K5XR7OW8sB2BVQ/hYhuUlxqaoOG625U++fHzUZBLSsjD9WBEkS6?=
=?iso-8859-1?Q?DEZ22e6BmVCa4U0F4nKyZ5SouK09/Zp6H2xiFrLkqjGN/FkMeqLpXGPXAZ?=
=?iso-8859-1?Q?+2Qg=3D=3D?=
Content-Type: multipart/alternative;
boundary="_000_SJ0PR17MB596017F0FEB696BEC5DDC724B53D9SJ0PR17MB5960namp_"
MIME-Version: 1.0
X-OriginatorOrg: ninestarconnect.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SJ0PR17MB5960.namprd17.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: dd9baf11-8ae6-4930-0e3f-08d9f79b9963
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2022 13:43:11.3638
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 45330388-9ca9-424b-be1a-29721272041d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 8PyufT40s5lS9+OZipYwBFIgzeTa5fwgXn/ffx9V0vbPoU3+7h0zJIC8sSnBr/C4dlT5vjij4AMHrU1M+j3YPD4YknvrtXY/g+VlecAHpKM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR17MB4118
X-MAG-PROFILE: myninestar.net
X-MAG-CATEGORY: SENDER
X-MAG-FILTER: domain
X-MAG-INFO: ninestarconnect.com
X-MAG-ACTION: ACCEPT
undefined: undefined
The one thing I did notice in this one is Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4995.27; Thu, 24 Feb
2022 13:43:11 +0000
Received: from SJ0PR17MB5960.namprd17.prod.outlook.com
([fe80::6914:6da4:4272:65da]) by SJ0PR17MB5960.namprd17.prod.outlook.com
([fe80::6914:6da4:4272:65da%3]) with mapi id 15.20.4995.026; Thu, 24 Feb 2022
13:43:11 +000
Is the time off about five hours off but I tried one setting five hours back and get the same error message.