Re: [mailop] Gangs scanning mailboxes for quick cash

2021-09-08 Thread Sam Tuke via mailop
On 07/09/2021 20:05, Mike Hammett via mailop wrote: > Fail2Ban to the rescue!  ;-) Yes we noticed this too - over the last two months, one new single-mailbox server of ours experienced 38k SMTP connection attempts by attackers, 46k over IMAP. The attacks were clearly coordinated among different

Re: [mailop] Gangs scanning mailboxes for quick cash

2021-09-08 Thread Pierre-Yves Dubreucq via mailop
Hi, If you'll look at Fail2ban, you can look to Crowdsec too ( https://crowdsec.net/) To resume, Crowdsec is like a collaborative Fail2ban Bye Le mer. 8 sept. 2021 à 02:18, Jay Hennigan via mailop a écrit : > On 9/7/21 11:05, Mike Hammett via mailop wrote: > > Fail2Ban to the rescue! ;-) > >

Re: [mailop] Gangs scanning mailboxes for quick cash

2021-09-07 Thread Jay Hennigan via mailop
On 9/7/21 11:05, Mike Hammett via mailop wrote: Fail2Ban to the rescue!  ;-) In some cases. In far too many others, the mailbox user ends up getting spearphished and responds to an official-looking spam email asking to verify credentials, warning of mailbox errors, over quota, etc. Bad guys

Re: [mailop] Gangs scanning mailboxes for quick cash

2021-09-07 Thread Mike Hammett via mailop
Fail2Ban to the rescue! ;-) - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Simon Lyall via mailop" To: mailop@mailop.org Sent: Friday, September 3, 2021 8:41:27 PM Subject: [mailop] Gang

[mailop] Gangs scanning mailboxes for quick cash

2021-09-03 Thread Simon Lyall via mailop
So this is what those IMAP logins attempts are for, gangs are looking for gift cards and rewards they can turn into cash. "this criminal group averages between five and ten million email authentication attempts daily, and comes away with anywhere from 50,000 to 100,000 of working inbox