Allumetis

Allumetis is a security tool designed for organizations running on-premises Microsoft Exchange Server infrastructure. It monitors authentication activity across Exchange protocols and automatically blocks brute-force and credential-stuffing attacks before they result in account lockouts or unauthorized access. How it works: - Allumetis ingests authentication event logs generated by Exchange and Windows servers in real time - A security engine analyzes login failures, timing patterns, geographic location, and IP reputation to identify suspicious activity - When an attack is detected, it automatically creates blocking rules via native Windows Firewall integration - All events and responses are recorded and surfaced through a live dashboard Protocols monitored: - OWA (Outlook Web Access) - SMTP - IMAP - POP3 - Other Exchange authentication protocols Key behaviors: - Detects repeated authentication failures and attack patterns across multiple log sources - Evaluates failure frequency, timing, geographic location, and IP reputation - Supports configurable detection rules tailored to the environment - Blocks malicious IP addresses across all Exchange protocols simultaneously, preventing protocol-switching by attackers - Provides historical blocked IP records and attack trend reporting Deployment: - Installed as a lightweight Windows service on existing infrastructure - Designed to run alongside an existing Exchange environment with minimal disruption - Connects to Exchange, authentication, and Windows security logs as data sources