SMTP.AA.NET.UK - blocking of senders on Spamhaus block lists
MINOR Open Email
STATUS
Open
CREATED
Feb 04, 12:36 PM (23¼ hours ago)
AFFECTING
Email
STARTED
Feb 03, 09:00 AM (2 days ago)
REFERENCE
42744 / AA42744
MASTODON
INFORMATION
  • INITIAL
    2 days ago by Andrew

    Over the past week we have seen a huge number of 'bots' trying to guess customer email credentials in order to try to send email through our outbound email servers: smtp.aa.net.uk.

    The attempts were being blocked due to wrong passwords being used, but this caused significant load on our severs due to all the database lookups involved. To address this, we are blocking IP addresses that are listed on the Spamhaus 'Exploits Blocklist (XBL)' and the Spamhaus 'Combined Spam Sources (CSS)' lists. -These are typically IP address known to have hijacked in some way or known spam senders.

    This has reduced the load on the email servers significantly, however we are are still blocking around 1.5 million unique IP addresses each day.

    We have had a small number of legitimate customers affected by this as their IP address is on these blocklists. (IPs can be looked up on https://check.spamhaus.org). In these cases, please do contact support and we can discuss workarounds.

  • NEXT UPDATE...

    Due in 6 days