I have the mdaemon mailserver on windows 2012. i have problems with the smtp bruteforce attacks. i configured the server that block ip addreses that authanticate failed 3 times. but those attacks are very coomon and my server with performance is very bad. your solution can resolve my problem.
I would like to know if exists such a solution to implement at host level any kind of software to detect users who are using our IPs for port scanning and brute forcing servers over the internet.
Unfortunately we're very close to lose our leased /24 subnet and we need such a solution...