How to block Incorrect authentication data?

aboyz

Well-Known Member
Sep 29, 2003
108
0
166
Anyone know how to auto block 535 Incorrect authentication data from the exim_mainlog? I see IP coming in and trying to login as the user email address.

Is there a way to set it so if login failed from a source IP > 5, BAN that IP. is there a way to do that?

thanks
 

sysnishit

Active Member
Aug 13, 2018
25
3
3
Internet
cPanel Access Level
Root Administrator
Hello,

Install Config security firewall and configure to block, if login failed from sources IP > 5.
Setting for pop3 : If login failed > 5 block source IP. Same setting available for IMAP as well.

LF_POP3D = 5
LF_POP3D_PERM = 1
LF_SMTPAUTH = 5
LF_SMTPAUTH_PERM = 1
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,271
313
Houston