I see a lot of these in the IMAP log. The IP and domain is changed for security reasons.
08/09/21 08:05:20 IMAP-IN 10736 1.2.3.4 AUTHENTICATE authenticate plain 2 NO AUTHENTICATE LOGIN failed - Invalid username or password. 67 22 mydomain.com
What does this mean when there are no users displayed? They are all one line in the log and all have different IP's but the same domain. Is this a brute force attack?
IMAP login question
-
- Posts: 1370
- Joined: Thu Nov 11, 2004 5:26 pm
- Location: Kingsville, Texas
Re: IMAP login question
That's what it looks like to me.
Robert Williams, Owner
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!
Re: IMAP login question
so what action can I take to filter these out?