imap not allowing login for any users

[scristopher]

For all domains no user can login, webmail is not working either, when trying webmail after a few moments the user is redirected back to whatever webmail interfaces login page they use (mostly the roundcube login), when logging into horde horde shows no mailbox info at all.


The only things I can see in the maillog are that they fail to authenticate, I've created a new user as well and tested via thunderbird and get the same error:


Oct 12 09:58:38 fakehostname dovecot: imap-login: Disconnected (auth failed, 3 attempts in 14 secs): user=<[email protected]>, method=PLAIN, rip=xx.xx.xx.xx lip=xx.xx.xx.xx, session=<uWEosXmxLMxBEYEf>


I'm not seeing anything related to this in /usr/local/cpanel/error_log - I'm honestly really not sure what else to check at this point as I'm not finding any real errors anywhere else, any suggestions?

 

[scristopher]

It was the exim+dovecot brute-force attack detection in imunifi360, it somehow enabled itself and was causing the issue. After disabling everything was fine.

 

[cPanelLauren]

I'm glad to see you were able to identify and resolve the issue and thank you for updating here with the cause.