to block IP? Anonymous
     to block IP? Synametrics Support
         to block IP? Simon

From: Anonymous
Date: 9/27/24 3:06 AM
Topic: to block IP?
Type: General Discussions
Post a follow up

Dear all

We get alert form our trial span firewall 

.........................................................................................................

Too many invalid login attempts made from 1XX.2XX.X7X.X6X.

This IP has been blocked for the next 10 minutes.

Someone from this IP is trying to connect to the Smtp Server on Xeams.

Total attempts so far: 3

------------------------------------------------------------------------------------

Can i Block IP let them can't try to login ?

Top

From: Synametrics Support
Date: 9/27/24 3:27 AM
Topic: to block IP?
Type: General Discussions
Post a follow up

Check https://www.xeams.com/clear-blocked-ip.htm for details.

Top

From: Simon
Date: 1/22/25 6:39 AM
Topic: to block IP?
Type: General Discussions
Post a follow up

I am also trying to find a way to block these IPs, on a Windows installation.

I have tried wail2ban, which is a PS script that checks Windows Event log and adds rules to the Windows Firewall. Unfortunately XEAMS does not write to the Windows Event log, only to it's own logs.

In principle, it is possibile to parse XEAMS InvalidPasswordAttempts.log and replicate the wail2ban functionality. 

A simpler approach may be to parse XEAMS InvalidPasswordAttempts.log and write corresponding events to the Windows Event log, using Write-EventLog.

 

 

Top