Hey,
my initial check was
Aug 18 09:50:53 2020 (7596) berlin: pending lywlo...@gmail.com 202.211.87.136
The IP comes from Japan with the same user agent.
These were the next requests on my host:
Aug 18 10:36:56 2020 (14780) kamikaze: pending fislisrb...@outlook.com
182.30.40.234
Aug 18 12:33:57 2020 (32629) kamikaze: pending mmc49...@eoopy.com 45.73.162.51
Aug 18 12:33:58 2020 (32634) kamikaze: pending mmc49...@eoopy.com 216.155.42.95
Aug 18 12:33:59 2020 (32635) kamikaze: pending mmc49...@eoopy.com 45.73.166.236
Aug 18 12:42:51 2020 (1734) kamikaze: pending mmc49...@eoopy.com 155.254.54.66
Aug 18 12:43:00 2020 (1748) berlin: pending mmc49...@eoopy.com 67.207.184.189
Aug 18 12:43:20 2020 (1749) berlin: pending mmc49...@eoopy.com 67.219.20.59
Aug 18 12:48:09 2020 (2497) kamikaze: pending mmc49...@eoopy.com 204.52.99.88
Aug 18 12:48:13 2020 (2505) kamikaze: pending mmc49...@eoopy.com 66.78.4.230
Aug 18 12:48:23 2020 (2513) kamikaze: pending mmc49...@eoopy.com 67.227.40.39
Aug 18 12:48:34 2020 (2517) science: pending mmc49...@eoopy.com 173.46.93.106
I looked up the user agent and it seems there is a javascript library Axios
that can do HTTP requests und may be used with nodejs or from a browser.
I am quite impressed by the many different IP addresses that are used and I
wonder if something like this could be catched with XBL.
Probably next time I will consider monitoring the number of pending
subscription requests by the mailman log file and take down the mailman web
interface until I could figure out what else to do.
Cheers
nosy
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
