Slightly OT: Strange but persistent dictionary attacks

[Mike Zanker]

On 18 July 2004 20:43 -0500 Alex Neuman <alex at NKPANAMA.COM> wrote:

> The following is an excerpt from "logwatch", showing a bunch of
> "unknown user" errors on one of my domains, "linux.com.pa" - the
> thing is, I'd like to know if anybody else has seen anything similar.

Yes, lots of people are seeing this at the moment. Are you sure that
they are not NDRs? (See if the envelope from is <>).

Some new spamming software seems to pick random words @domain and use
it as the envelope from address, causing lots of NDRs to unknown
addresses.

Mike.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html