On 2017-10-06 12:51:41 (+0300), Otto J. Makela wrote:
Are you keeping an eye out for (mostly Chinese) botnets doing slow IMAP scans, using scraped email addresses and apparently going through whole dictionaries?
I have most Chinese address space that I know about firewalled. I have no users in China and any of my users travelling to China are smart enough to tunnel their way out.
Having said that: slow IMAP scans are a global phenomenon. For different values of slow. One particular network (in Poland) managed about 600K login attempts before I got bored of them in my logs and
firewalled them. Philip -- Philip Paeps Senior Reality Engineer Ministry of Information _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
