Slightly OT: Strange but persistent dictionary attacks

[Alex Neuman]

The following is an excerpt from "logwatch", showing a bunch of "unknown
user" errors on one of my domains, "linux.com.pa" - the thing is, I'd like
to know if anybody else has seen anything similar. The words used for the
user@ portion of the addresses seem to be polish or slavic-sounding
languages, with a few english words here and there. For example:

  Alma at linux.com.pa
      from mc12-s11.bay6.hotmail.com [65.54.165.210]    1 time(s).

    Angus at linux.com.pa
      from silenus.impulse.net.au [210.9.195.23]    1 time(s).

    Barak at linux.com.pa
      from smtp-out7.blueyonder.co.uk [195.188.213.10]    1 time(s).

    Bieniewski at linux.com.pa
      from smtp-out7.blueyonder.co.uk [195.188.213.10]    1 time(s).

    Boncies at linux.com.pa
      from smtpout.mac.com [17.250.248.85]    1 time(s).

    Cygon at linux.com.pa
      from air207.startdedicated.com [69.64.33.141]    1 time(s).

    Danczyk at linux.com.pa
      from smtpin32-nat.myhosting.com [168.144.250.153]    1 time(s).

    Eydryczewicz at linux.com.pa
      from adamo50.supereva.it [195.110.126.50]    1 time(s).

    Gadsden at linux.com.pa
      from wsip-68-15-40-43.ri.ri.cox.net [68.15.40.43]    1 time(s).

    Gawin at linux.com.pa
      from smtp.simondsind.com [208.220.168.5]    1 time(s).

    Hajnor at linux.com.pa
      from smtp.terra.es [213.4.129.129]    1 time(s).

    Kaplon at linux.com.pa
      from probity.mcc.ac.uk [130.88.200.94]    1 time(s).

    Kluczynski at linux.com.pa
      from pollux.acbl.net [65.203.89.251]    1 time(s).

    Krzys at linux.com.pa
      from smtp-out7.blueyonder.co.uk [195.188.213.10]    1 time(s).

    Lutsky at linux.com.pa
      from hewey.iland.net [205.242.230.200]    1 time(s).

    Majser at linux.com.pa
      from a110.sina.com.tw [210.200.138.110]    1 time(s).

    Moltzahn at linux.com.pa
      from lon-mail-6.gradwell.net [193.111.201.132]    1 time(s).

    Obozowa at linux.com.pa
      from smtp-out8.blueyonder.co.uk [195.188.213.11]    1 time(s).

    Olesniewicz at linux.com.pa
      from [203.177.11.34]    1 time(s).

    Ossowicki at linux.com.pa
      from mail3.au.dk [130.225.9.143]    1 time(s).

    Panlein at linux.com.pa
      from [62.159.229.132]    1 time(s).

    Paresky at linux.com.pa
      from smtp.terra.es [213.4.129.129]    1 time(s).

    Pietresek at linux.com.pa
      from mailgot3.it.volvo.com [192.138.116.136]    1 time(s).

    Pylypciw at linux.com.pa
      from defang5.net.ohio-state.edu [128.146.216.85]    1 time(s).

    Rypel at linux.com.pa
      from luminy.univ-mrs.fr [139.124.1.7]    1 time(s).

    Samojedna at linux.com.pa
      from maui.net [207.175.210.62]    1 time(s).

    Sapieha at linux.com.pa
      from smtp-out8.blueyonder.co.uk [195.188.213.11]    1 time(s).

    Somalia at linux.com.pa
      from smtp03.ya.com [62.151.11.197]    1 time(s).

    Stevens at linux.com.pa
      from fdyinet2.fin.moc.com [65.219.124.65]    1 time(s).

    Talaska at linux.com.pa
      from Medialt-gw-134.utk.ru [81.91.61.134]    1 time(s).

    Umecki at linux.com.pa
      from line134-16.adsl.actcom.co.il [192.115.134.16]    1 time(s).

    Wesierski at linux.com.pa
      from smtp-out8.blueyonder.co.uk [195.188.213.11]    1 time(s).

    Zeskowski at linux.com.pa
      from esmtp2.globalvalue.it [151.92.2.239]    1 time(s).

    Zolkiewski at linux.com.pa
      from smtp.simonds.cc [208.220.168.5]    1 time(s).

    dwindles at linux.com.pa
      from omr-m02.mx.aol.com [64.12.138.2]    1 time(s).

    hunching at linux.com.pa
      from [203.148.250.245]    1 time(s).

    jacks at linux.com.pa
      from mail-in9.tiscali.be [62.235.13.181]    1 time(s).

    laue at linux.com.pa
      from smtp1.wanadoo.fr [193.252.22.30]    1 time(s).

    masturbates at linux.com.pa
      from rcpt-expgw.biglobe.ne.jp [202.225.89.178]    1 time(s).

    mocked at linux.com.pa
      from mundahla.mailrover.net [216.126.204.155]    1 time(s).

    psychopaths at linux.com.pa
      from smtpout-3104.bay.webtv.net [209.240.204.195]    1 time(s).

    skullcap at linux.com.pa
      from omr-m06.mx.aol.com [64.12.138.18]    1 time(s).

    slogan at linux.com.pa
      from omr-m07.mx.aol.com [64.12.138.19]    1 time(s).

    smarzewski at linux.com.pa
      from mail.manpowernc.com [207.59.20.252]    1 time(s).

    stipple at linux.com.pa
      from nnn.excitenetwork.com [208.45.133.202]    1 time(s).

    vanning at linux.com.pa
      from trinity.st3.spray.net [212.78.194.172]    1 time(s).

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html