IMAP login question

Discussion forum for Enterprise Edition.
Post Reply
dcol
Posts: 237
Joined: Fri May 26, 2017 11:25 pm

IMAP login question

Post by dcol »

I see a lot of these in the IMAP log. The IP and domain is changed for security reasons.

08/09/21 08:05:20 IMAP-IN 10736 1.2.3.4 AUTHENTICATE authenticate plain 2 NO AUTHENTICATE LOGIN failed - Invalid username or password. 67 22 mydomain.com

What does this mean when there are no users displayed? They are all one line in the log and all have different IP's but the same domain. Is this a brute force attack?

rfwilliams777
Posts: 1370
Joined: Thu Nov 11, 2004 5:26 pm
Location: Kingsville, Texas

Re: IMAP login question

Post by rfwilliams777 »

That's what it looks like to me.
Robert Williams, Owner
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!

dcol
Posts: 237
Joined: Fri May 26, 2017 11:25 pm

Re: IMAP login question

Post by dcol »

so what action can I take to filter these out?

Post Reply