Re: tons of registrations (usernames *[email protected])

Guys, Martin,

Am 19.05.10 09:20, schrieb Martin Sebald:

> starting 1 1/2 days ago we got tons of in-band registrations with usernames
> like [email protected] plus some registrations like
> [email protected]. Registrations come from very different IPs
> from all over the planet. About 250 registrations so far. All these
> accounts have username = password and are online right away. I allowed
> myself to monitor some of the accounts and noticed that they send empty
> messages to each other.

I have seen this registrations on jabber.ccc.de, too. These are about
250 accounts using something like unixtime($registration_date)LOP@ as jid.

I haven't checked the source of the connections until now, but Martin
told me they are connected not only from a single network. And, even
more severe, they reregister if you delete those accounts.

> What is going on? Spam attack or botnet? Is someone else experiencing these
> problems?
> 
> I'm finally really thinking about turning off the (besides to that) great
> feature in-band registration...

Peter
_______________________________________________
JAdmin mailing list
FAQ: http://www.jabber.org/discussion-lists/jadmin-faq
Forum: http://www.jabberforum.org/forumdisplay.php?f=19
Info: http://mail.jabber.org/mailman/listinfo/jadmin
Unsubscribe: [email protected]
_______________________________________________