Alphabet spam...they take a ton of combinations, and go in
alphabetical order.
I've seen systems with improperly configured swap space literally
come to a crawl, because the mailserver winds up chewing up so much
memory while trying to process this crap.
On Thu, 7 Dec 2000 08:43:13 -0600 (CST), Bill Carlson wrote:
>Hey all,
>
>I've been seeing the following about 4 or 5 times a week, any idea what
>they are trying to accomplish?
>
>---
>Dec 7 07:30:32 backup sendmail[8699]: HAA08699: <[EMAIL PROTECTED]>... User
>unknown
>Dec 7 07:30:33 backup sendmail[8699]: HAA08699: <[EMAIL PROTECTED]>...
>User unknown
>
><snipped another 30 lines of this type stuff>
>
>Dec 7 07:30:34 backup sendmail[8699]: HAA08699: <[EMAIL PROTECTED]>... User
>unknown
>Dec 7 07:30:34 backup sendmail[8699]: HAA08699:
>from=<[EMAIL PROTECTED]>, size=0, class=0, pri=0, nrcpt
>s=0, proto=SMTP, relay=3Cust77.tnt4.krk1.da.uu.net [63.27.2.77]
>---
>
>I had thought they were trying to find addresses on the machine via brute
>force, but I haven't seen any increase in SPAM. What are they trying to
>do?
>
>I usually block the IP, but the same thing will show up from another IP.
>They due tend to come from uu.net, bellsouth.net and uswest.net.
>
>Later,
>
>Bill Carlson
>--
>Systems Programmer [EMAIL PROTECTED] | Opinions are mine,
>Virtual Hospital http://www.vh.org/ | not my employer's.
>University of Iowa Hospitals and Clinics |
>
>
>
>_______________________________________________
>Redhat-list mailing list
>[EMAIL PROTECTED]
>https://listman.redhat.com/mailman/listinfo/redhat-list
>
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
