[chirp_users] Malicious use of chirp_users email addresses

Tim Lavoie
Thu Oct 26 12:30:15 PDT 2023


Hello all, long-time lurker here.

I have noticed that the list-specific email address that I use here, has
been used in attempted logins to my email server.

>From the last couple days, these login attempts have been showing up in
my dovecot-related logs, from the following IPs:

    103.181.14.250
    103.251.143.14
    111.70.14.8
    121.138.183.176
    122.151.32.167
    122.169.42.241
    123.157.4.248
    14.85.88.26
    157.208.36.100
    180.130.175.136
    182.70.242.47
    182.75.197.174
    183.213.25.118
    183.62.20.2
    190.93.189.227
    196.191.212.238
    222.110.220.110
    27.72.41.155
    31.173.28.23
    50.58.168.150
    60.221.224.220
    61.153.208.38
    80.21.208.94
    84.235.46.149
    91.73.247.158

There is little chance of harm done on this system, but if they have
mine, they're likely trying the same on other members' hosts as well.

  Cheers,
  Tim
  



More information about the chirp_users mailing list