internet & fixe mon mail Orange Voir tous les sujets internet & fixe

[#1]

Hello. I just found your email credentials in the internet, actually this is just some of them, and I think that ORANGE.FR need to know about his security problem.

I don't know the orange fr email, so I had to use this community form.

I hope it helps, I suspect that the email smtp servers are being used for phishing.

smtp.orange.fr:******@orange****
smtp.orange.fr:******@orange****
smtp.orange.fr:******@orange****
smtp.orange.fr:******@orange****
smtp.orange.fr:******@orange****

[ÉDIT : merci de ne pas afficher de coordonnées personnelles en public]

[#2]

Hi   filipe2 

I don't think you'r right.

What do you mean with "I just found your email credentials in the internet"

The internet is only a network, where could you fin such information in the net.

Maybe you found that on webservers, which ones ?

Orange smtp servers are only accessible over port 465 with SSL ore over port 25 from manages from lines by Orange ISP.

I don't see your point saying " smtp servers are being used for phishing ", as all SMTP servers are used forphishing, all over the weorld.

More than 90% of mail activity is junk  spam, phishing and anything worse .

Can you please explain senmanttis of the exposed data

I suppose it contains

server : mail : user : port

Please avoid publishing private data on a public forum.

Regards

PhilDur

[#3]

As I said some people get that credentials and are using that as phishing.

1. The orange smtp servers allow that guys to use any email and name as sender which is very insecure.

2. Orange smtp server are subject of brute force attacks and have no security protection against it.

3. I posted the user credentials as prof, Orange must notify the users, so they change their passwords and reinforce the mail servers security.

[#4]

Hi @filipe2 ,

@PhilDur ,

smtp.orange.fr is the outgoing server used by Orange customers to send mails out. By itself it does not represent any customer's address in particular. The mails sent through this server can come from any Orange customer's address that are not visible at the server's level. This server name is public and is not any confidential information. Therefore, publishing this information does not represents any breach in security. It is similar to smtp.gmail.com at Gmail.
You can compare it to the public mail box at the Post Office where people drop their paper mail ready to be sent out to their destination. Similarly, it allows anyone to drop any paper mail in there, even blackmail, and it is not the Post Office responsibility to filter what is dropped in there.

Hope this helps you understanding what it is.

[#5]

We can send emails but don't receive any emails so where are they going the last email was on the 24th 3rd month 

[#6]

Hello

Change your password

Check your preferences, your mail is probably forwarded to another mail box.

Try sending a mail to youself.

If your mail is forwarded, then you have been pawnd !

Regards

PhilDur