Exchange owa brute force attack bloked

[kocamehmet]

Hi,

I am using Exchange server. I want to prevent password attempt attacks coming via Owa. When the program makes more than one unsuccessful attempt, it blocks the IP address, but I can continue to try the password. Can you help?

Best regard,
Thanks.

[IzualYang]

An unsuccessful OWA login will redirect you to the login page with URL like: https://mail.contoso.com/owa/auth/logon.aspx?replaceCurrent=1&reason=2&url=https%3a%2f%2fmail.contoso.com%2fowa%2f

# OWA "reason" codes: 
# 
# reason=0	Nothing
# reason=1	You've successfully signed out of Outlook Web App. Please close all browser windows.
# reason=2 	The user name or password you entered isn't correct. Try entering it again.
# reason=3 	Your session has timed out. To protect your account from unauthorized access, the connection to 
#		your mailbox is closed after a period of inactivity. Please re-enter your user name and password.
# reason=4	Your password has been changed. You can now sign in with your new password.

However the login failure log is on the domain controller