On Mon, 8 Apr 2019 07:51:47 -0700, Michael Peddemors <[email protected]>
wrote:

>This has gone on now for more than a month, and they aren't even trying 
>to hide..
>
>50 more IP(s) and domains overnight..

Each of those netblock contributes several IPs conducting the 
"EHLO server. com" AUTH LOGIN attacks, now in its second week.  I haven't
bothered to gather competetive numbers for the AWS netblocks, but they appear
to be as prolific.

mdr
-- 
    The Duckage Is Feep.
       -- Vaul Pixie


_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to