Last backscatter received at 1/12/25 23:43
On 1/13/25 02:36, Marc Ballarin wrote:
Am Sa., 11. Jan. 2025 um 06:01 Uhr schrieb Michael Peddemors via mailop
<[email protected] <mailto:[email protected]>>:
Your systems are being abused right now by a well known attacker..
Sending email replay attacks, and your systems also generate back
scatter..
First of all.. (And this goes to all email operators) only allow
domains
in the MAIL FROM, that are actually served by your servers.
They actually use "proper" forwarding setups, but with fraudulent
accounts. Unfortunately, they have gotten a bit more patient and
let the accounts age longer. We have since re-tuned detection.
Were there any issues after January 10th?
Regards,
Marc
--
Marc Ballarin
Senior Anti-Abuse Software Engineer
Abuse Management
IONOS SE | Hinterm Hauptbahnhof 1 | 76137 Karlsruhe | Deutschland
E-Mail: [email protected] <mailto:[email protected]> | Web:
www.ionos.de <http://www.ionos.de>
Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 24498
Vorstand: Hüseyin Dogan, Arthur Mai, Dr. Markus Noga, Dr. Jens-Christian
Reich, Britta Schmidt, Achim Weiß
Aufsichtsratsvorsitzender: Sven Fritz
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
