It appears that Michael Peddemors via mailop <[email protected]> said: >Once again, a sampling of IPs would help confirm this.. > >Also, are they using full email address or user name only for the >authentication attack.
It doesn't log the usernames. I suppose I could do that. >How many from each IP? 32? or just one or two? Just one or two. >So many bots, and so many open proxies, and still a huge number of >compromises CPE equipment, IoT devices.. No kidding. >Need more information.. I assume that you have country authentication >controls, given the size of your server.. are they all US based? No, they're all over the world. >Give a couple of examples, including the EHLO that they are sending.. >can can give more informed information.. It's not logging the EHLO or AUTH but that's not too hard R's, John _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
