Either its been taken off line or I’ve blocked all its IPs. No more new additions for over 24 hours: Status for the jail: dovecot-disconnect |- filter | |- File list: /var/log/mail.log | |- Currently failed: 0 | `- Total failed: 718 `- action |- Currently banned: 699 | `- IP list: 50.97.183.121 45.55.11.188 […]
Its still going: Jun 12 18:41:25 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<colin@some.domain.here>, method=PLAIN, rip=36.7.79.21, Jun 12 18:42:01 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=<colin>, method=PLAIN, rip=113.240.237.10, Jun 12 19:11:58 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<drtone@some.domain.here>, method=PLAIN, rip=218.201.83.148, Jun […]
Going through the spam comments on one of the sites I found the following: Yes that’s right… 3 comments on the SAME post from the SAME IP address… how could that not be spam?