[Mailman-Users] Distributed mass subscribe attack?

[Barry S. Finkel]

On 8/8/2017 12:22 PM, David Gibbs wrote:
> Folks:
> 
> Anyone else noticing a distributed mass subscribe attack going on their 
> lists?
> 
> I've noticed a massive number of attempts a small subset of email 
> addresses, with modifiers (address+modifier at example.com), going on.
> 
> It appears the address is valid ... so it appears to be some kind of hit 
> job to flood someone's inbox.
> 
> Luckily the address's are trivial to block using 'ban_list'.
> 
> The hosts they are using appear to be from all over the place, although 
> they do seem to be favoring hosts serviced by virtua.com.br.
> 
> david
> 
> 


I would report this to  mail-abuse at cert.br .

--Barry Finkel