Jan Wildeboer 😷

As a FYI. These are the IP addresses that tried to log in to my mail server in the past week.

All of them came once, tried one login, failed and disappeared again. This is why you should insist on secure passwords for your mail accounts. No compromise. (And yes, they all made encrypted TLS connections, as my mail server won't accept logins without it)

May 10, 2023 at 9:04amWeb
Show threadJiří Eischmann May 10, 2023
@jwildeboer do you you Fail2ban to (temporarily) ban them?
Show threadclockw0rkMay 10, 2023
@jwildeboer so u basically had a ddos attack on your mail server?
Show threadSteveMay 10, 2023
@jwildeboer oh dear
Show threadPeter Toft JølvingMay 10, 2023

@jwildeboer
That was the first surprise as I started self-hosting services, and I'm still kinda amazed by the amount of bots trying their luck.
Even my private server with nothing but my Mastodon-instance running receives somewhere around one attempt per second. 🤯

I thought about setting up honeypots to waste their time but that's a bit to far outside my area of expertise.