cPanel Server Management
For 24×7 cPanel Server Management with Monitoring, Unlimited Tech Support, Disaster Recovery, Security updates and much more Signup today!
If you have IMAP and POP3 authentication constantly fails and having problems with your mail clients. Large IMAP and POP3 authentication request, It may be DOS attack.
Check your cPHulk Brute Force Protection, Look under “Login/Brute History Report” if cPHulk is enabled and see if any of your email accounts have been locked out for excessive failed login attempts.
“WHM Home » Security Center » cPHulk Brute Force Protection”
It’s also possible the mail server is running out of available authentication daemons. Check your authentication processes values
“WHM Home » Service Configuration » Mailserver Configuration”
Use the following command to check large number of authentication failures per ip address.
awk ‘/auth failed/ {for (i=1;i<=NF;i=i+1) if ($i~/rip/) print $i}’ /var/log/maillog |sort|uniq -c|sort -n| tail
Try to block large authentication request ip address in your Firewall.
For CSF firewall,
csf -d
cPanel Server Management
AssistanZ is a pioneer in offering 24×7 cPanel Server Management Service since 2004. We offer 24×7 cPanel Server Management
cPanel Server Management
cPanel Installation and Setup
cPanel Server Optimization
cPanel Server Migration
cPanel Server Security and Hardering
cPanel Server Monitoring
cPanel Server Hack Recovery
and Much more
