mail server attack
Posted: Sat Apr 12, 2025 9:23 am
Checking the logs of my exim i see many lines like below from different ipadress and and fake emailadress with the registered domains on my server. FAIL2ban is blocking the different IP but the list of blocks is very long. Any suggestions?
2025-04-12 09:19:01 H=adsl-84-226-219-137.adslplus.ch [84.226.219.137] F=<[email protected]> rejected RCPT <[email protected]>: Too many recipients, limit is 15 recipients
2025-04-12 09:19:01 H=adsl-84-226-219-137.adslplus.ch [84.226.219.137] F=<[email protected]> rejected RCPT <[email protected]>: Too many recipients, limit is 15 recipients