Maybe I'm just now more observant, but I've seen a huge increase in
bunches of systems trying to brute force an SASL login.
Here is a list of IPs that have tried in just the last hour:
2.47.196.162
5.172.14.125
5.89.106.141
5.94.25.239
14.194.116.93
14.33.96.3
14.49.199.104
24.126.24.151
35.130.133.206
37.119.1.41
37.134.140.203
39.82.195.83
41.75.211.6
41.79.137.102
43.255.221.44
45.148.10.50
45.4.143.10
58.229.51.205
61.144.82.162
61.51.81.78
70.89.116.5
71.227.94.199
73.163.34.222
74.219.127.52
76.176.252.225
79.110.62.34
80.64.30.52
80.94.95.233
81.16.170.117
87.120.84.58
94.141.120.39
94.204.68.44
103.220.82.162
109.116.82.131
109.67.154.24
111.70.23.223
112.27.38.203
112.30.211.165
115.143.8.92
115.187.61.70
118.220.149.30
121.135.188.125
121.139.41.95
121.162.160.21
121.186.155.211
121.202.152.35
121.229.205.214
129.146.148.173
134.215.35.210
175.117.251.128
177.159.150.111
178.178.194.135
178.215.236.128
179.42.124.80
180.148.213.87
182.42.113.10
187.76.174.254
194.169.175.47
201.63.15.105
210.56.31.135
211.35.237.38
216.194.174.27
218.108.131.158
218.149.235.152
218.203.173.194
218.25.233.22
218.9.73.24
220.124.196.108
220.179.87.204
220.246.42.79
221.152.89.46
221.195.208.171
221.220.108.99
222.116.11.71
223.197.164.188
I wrote a script to check my mail log and block the IPs.
What do you all do?
Geoff
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
