Re: Let's try to be productive...

On January 5, 2014 at 20:13 [email protected] (Steve Atkins) wrote:
 > >=20
 > > 5. What about email dictionary attacks and similar?
 >=20
 > (5) I consider to be a net-positive rather than a problem. It=92s
 > miscreants providing you, at no cost, with a list of their compromised
 > or spamming machines.

Except when we're being hit from high-profile servers which one is
loathe to block such as right this minute I'm getting dozens of SMTP
connections per minute (not too bad) from outlook.com mail servers
which is a microsoft service. I can't just block *.outlook.com, it
would block too much ham.

I'll get these attacks from AOL, google, whatever and these are their
mail servers not end-user hosts.

My best guess is these are many compromised hosts on their hosting
services being used to send spam through their email servers, or maybe
bots with accts on their services or who knows, direct compromises of
their mail servers?

I suppose we could work harder to follow the received chains and we do
use some methods. And of course trying to contact the admins but let's
just say they're not always very responsive and such attacks can go on
for days before they suddenly stop, and then sometimes start right
back up again in a few hours.

But it's problematic.

It's war out there.

--=20
        -Barry Shein

The World              | [email protected]           | http://www.TheWorld.c=
om
Purveyors to the Trade | Voice: 800-THE-WRLD        | Dial-Up: US, PR, Cana=
da
Software Tool & Die    | Public Access Internet     | SINCE 1989     *oo*
-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=3Dlists.gurus.org