On Wed, Nov 20, 2002 at 09:40:50AM -0800, Joe St Sauver wrote:
> In addition to thousands of open relays, which are bad enough in
> their own right, there are also thousands of open proxy servers
> which a growing number of spammers have been using to launch spam
> runs lately. I suspect that's w
> >2) uses an attack algorithm to distribute the load so you only see
> >any given source IP every other day
> Yep. My list of "attacking IP's" was several thousand deep before I gave up.
Back when I used to analyze dialup spammers (well over a year ago) I felt that
a large part of the spam pro
On 11/20/2002 at 12:40 PM, <[EMAIL PROTECTED]> wrote:
> In addition to thousands of open relays, which are bad enough in
> their own right, there are also thousands of open proxy servers
> which a growing number of spammers have been using to launch spam
> runs lately. I suspect that's what you
--On Wednesday, November 20, 2002 9:40 AM -0800 Joe St Sauver <[EMAIL PROTECTED]> wrote:
[I will also say that it would really be great if mail-abuse.org would
add an open proxy listing project to complement their RSS, DUL, and
other initiatives.]
They go on the RBL - largely due to the exist
Hi,
#Here is the kicker. I check where these are coming from, they
#are from all over the place. I check for IP address spoofing...
#not happening. No IP options or TCP options.
#
#This came from like about 300 different networks, and yes
#I don't accept source routing (IP Options).
In addition
> It *still* does some wonky stuff with secondaries, so I might have to
> buy (grumble) their services as secondary MX spooling.
We have started distribiting the list of valid addresses to secondary MX
servers to reduce the store and forward load of dictionary attacks on
those servers. Using a fa
Behalf Of
chuck goolsbee
Sent: Wednesday, November 20, 2002 4:16 AM
To: [EMAIL PROTECTED]
Subject: Re: Weird distributed spam attack
> > Unless, I missed the posts about this,.. I just
>> (and still am experiencing) a distributed spam
>> attack.
>
>We get these almost
> Unless, I missed the posts about this,.. I just
(and still am experiencing) a distributed spam
attack.
We get these almost continually
Yep... same here.
it is incredibly depressing to look at the logs. Backup-only MX here
see upwards of 10K messages on bad days, mostly attacks o
[EMAIL PROTECTED] wrote:
>
> Unless, I missed the posts about this,.. I just
> (and still am experiencing) a distributed spam
> attack.
We get these almost continually it is incredibly depressing to look
at the logs. Backup-only MX here see upwards of 10K messages on bad
days, mostly attac
