On 9 Feb 2018, at 18:49 (-0500), Carl Byington wrote: > On Fri, 2018-02-09 at 14:56 -0700, Dave Warren via mailop wrote: >> For those seeing this, is it hitting the same account more than once, >> or just once per account? > > 3 or 4 AUTH attempts per second over port 25 for the same account. 50K+ > attempts over 8 hours. All with valid authentication, but no attempt to > send mail. > > ehlo > starttls > ehlo > auth > quit
To me that this smells of mis-using SMTP as an authentication backend. Badly. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Currently Seeking Steady Work: https://linkedin.com/in/billcole _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
