IMAP login question

Discussion forum for Enterprise Edition.
Post Reply
dcol
Posts: 173
Joined: Fri May 26, 2017 11:25 pm

IMAP login question

Post by dcol » Mon Aug 09, 2021 10:43 pm

I see a lot of these in the IMAP log. The IP and domain is changed for security reasons.

08/09/21 08:05:20 IMAP-IN 10736 1.2.3.4 AUTHENTICATE authenticate plain 2 NO AUTHENTICATE LOGIN failed - Invalid username or password. 67 22 mydomain.com

What does this mean when there are no users displayed? They are all one line in the log and all have different IP's but the same domain. Is this a brute force attack?

rfwilliams777
Posts: 1338
Joined: Thu Nov 11, 2004 5:26 pm
Location: Kingsville, Texas

Re: IMAP login question

Post by rfwilliams777 » Tue Aug 24, 2021 4:01 am

That's what it looks like to me.
Robert Williams, Owner
www.WWSHosting.net
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and get your first 2 months FREE!
We can be hired to help you with your Mail Enable server, too!

dcol
Posts: 173
Joined: Fri May 26, 2017 11:25 pm

Re: IMAP login question

Post by dcol » Tue Aug 24, 2021 4:06 am

so what action can I take to filter these out?

Post Reply