Proposal Exim signature: SMTP error from remote mail server after RCPT TO ... User doesn't exist

Create issue
Issue #119 new
Sebastiano Pilla created an issue

(I’m currently running version 2.4.0 but the pulldown menu has 2.2 as the most recent option).

I’m getting several thousands hits per day to my Exim SMTP servers with random usernames and passwords, this is at least a user enumeration attempt and at worst a brute-force attack.

The log entries all look like the following:

2019-07-12 20:51:49 H=([185.222.211.2]) [185.222.211.243]:64692 I=[127.1.0.1]:25 F=elukig4m7707j@makeuprevolution.cz rejected RCPT j0rej5xwjn3j@thecloudhostinghandbook.com: 127.0.0.1 [127.0.0.1] : SMTP error from remote mail server after RCPT TO:j0rej5xwjn3j@thecloudhostinghandbook.com: 550 5.1.1 j0rej5xwjn3j@thecloudhostinghandbook.com User doesn't exist: j0rej5xwjn3j@thecloudhostinghandbook.com

Comments (1)

  1. Log in to comment