Back to Community Threads
2
Block IP for authentication attempts using invalid accounts
Question asked by Warren Flack - 3/6/2019 at 12:26 PM
Unanswered
Hello All,

Is there a way with current IDS rules to automatically add an IP to the blacklist for accounts trying to authenticate with user accounts that do not exist on any domain/alias?

I'm seeing an increase in activity where ip's are randomly trying different usernames vs bruteforce on a single account.

Appreciate any suggestions you might have.

Many Thanks,

Warren.
Back to Community Threads

Reply to Thread

Related Knowledge Base Articles

Cannot Send Email MessagesSmarterMail > Troubleshooting
Recommended SPAM SettingsSmarterMail > Antispam and Antivirus
Set up Autodiscover for SmarterMailSmarterMail > Installation and Configuration
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Find a Compromised AccountSmarterMail > Troubleshooting