Slightly OT: Strange but persistent dictionary attacks

[Alex Neuman]

I'll have a look. Thanks!

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Mike Zanker
Sent: Monday, July 19, 2004 12:41 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Slightly OT: Strange but persistent dictionary attacks

On 18 July 2004 20:43 -0500 Alex Neuman <alex at NKPANAMA.COM> wrote:

> The following is an excerpt from "logwatch", showing a bunch of
> "unknown user" errors on one of my domains, "linux.com.pa" - the
> thing is, I'd like to know if anybody else has seen anything similar.

Yes, lots of people are seeing this at the moment. Are you sure that
they are not NDRs? (See if the envelope from is <>).

Some new spamming software seems to pick random words @domain and use
it as the envelope from address, causing lots of NDRs to unknown
addresses.

Mike.

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html