I'm seeing massive numbers of subscription lists to various lists we
host (including multiple requests to the same list).

These are submitted via a distributed network of hosts, presumably
botnet victims / open proxies.

The requests are from
foo+[0-9]{9}@gmail.com

e.g.,

foo+55216394@

where foo is one of several dropboxes.

Obviously, even after being banned, they're still getting a 200 response
code, so they keep spamming away, but what's their goal here? Trying to
get access to a list so that they can get archives / memberlists (or
post to them)? Or just trying to create a nuissance? If the former, why
do they submit so many requests for each list?

If anyone has seen similar behavior and has more info, please feel free
to share on or off list.

w

------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to