Allow RP to report malicious users and domains

davismtl commented 5 years ago

We currently have an IP block list. We'd like to explore expanding that to include:

blocking specific accounts/emails
block modifiers of an email if it was blocked (alex@gmail.com blocked would also block alex+123@gmail.com)
blocking specific email domains (and their wildcard subdomains)

RP would like to be able to report these to us, even if it's just by email at first.

Context: AMO is experiencing bots creating a lot of accounts on their sites to submit malicious add-ons. We need to help slow that down as they resolve the underlying issues.

┆Issue is synchronized with this Jira Task ┆Issue Number: FXA-101

clouserw commented 5 years ago

I think this is now being reported to the IPrep system (maybe that's not the right name?) and then we'll get notified from there. @jvehent is that correct?

data-sync-user commented 3 years ago

➤ Wil Clouser commented:

Yes, this should flow through iprepd

mozilla / fxa

Allow RP to report malicious users and domains #1246