[Mailman-Users] list subscription spammers

Will Yardley mailman at veggiechinese.net
Tue Aug 25 19:12:10 CEST 2015


I'm seeing massive numbers of subscription lists to various lists we
host (including multiple requests to the same list).

These are submitted via a distributed network of hosts, presumably
botnet victims / open proxies.

The requests are from
foo+[0-9]{9}@gmail.com

e.g.,

foo+55216394@

where foo is one of several dropboxes.

Obviously, even after being banned, they're still getting a 200 response
code, so they keep spamming away, but what's their goal here? Trying to
get access to a list so that they can get archives / memberlists (or
post to them)? Or just trying to create a nuissance? If the former, why
do they submit so many requests for each list?

If anyone has seen similar behavior and has more info, please feel free
to share on or off list.

w



More information about the Mailman-Users mailing list