Strange IP address logged into my IMAP server

[Ehenzel1978]

Hello all,

I have a strange IP address logged into my IMAP service. The ip is 54.210.254.159. When I do a lookup on it, it says it's an Amazon Cloud server. The IP address doesn't appear to be doing any harm, but it's not supposed to be there. Does anyone know how I can stop this address from being able to connect to my IMAP service?

[MailEnable-Ian]

Hi,

You will need to block the IP in your firewall.

[Ehenzel1978]

Thank you very much Ian. That's what I did and it corrected the problem.

[Ehenzel1978]

After blocking the strange IP address through my firewall, the user that the IP address was tied to came to me and said that they were no longer getting email on their iPhone. After investigating, I found that the user had installed and was using an app called Cloud Magic. This app copies the credentials that are stored in it, sends them to the Cloud Magic server, which is hosted on the Amazon AWS, and the server then communicates with the mail server. It then forwards the mail to and from the phone and the server, acting as a middle man.

The user is my boss and he uses the Cloud Magic app because none of the other apps he could find did everything he needed them too. So, I can't block the IP address any more. The Amazon IP address hasn't caused any problems directly, but, I have noticed that the intrusion prevention warning emails I get about his address have gone way up in the last couple of weeks.

Does anyone know if there is a pattern of this with Cloud Magic? I've looked, but couldn't find much on that. Also, does anyone know of an IOS app that does the "push" with IMAP well? That is the main feature he is using. I tried to get him to switch to EAS protocols, but the built in mail client that he has DOES NOT play well with EAS. The only IOS apps I've found that really do are things like TouchDown. TouchDOwn is fantastic, but is a paid app.