[chirp_users] Malicious use of chirp_users email addresses
Tim Lavoie
Thu Oct 26 12:30:15 PDT 2023
Hello all, long-time lurker here.
I have noticed that the list-specific email address that I use here, has
been used in attempted logins to my email server.
>From the last couple days, these login attempts have been showing up in
my dovecot-related logs, from the following IPs:
103.181.14.250
103.251.143.14
111.70.14.8
121.138.183.176
122.151.32.167
122.169.42.241
123.157.4.248
14.85.88.26
157.208.36.100
180.130.175.136
182.70.242.47
182.75.197.174
183.213.25.118
183.62.20.2
190.93.189.227
196.191.212.238
222.110.220.110
27.72.41.155
31.173.28.23
50.58.168.150
60.221.224.220
61.153.208.38
80.21.208.94
84.235.46.149
91.73.247.158
There is little chance of harm done on this system, but if they have
mine, they're likely trying the same on other members' hosts as well.
Cheers,
Tim
More information about the chirp_users
mailing list