[Mailman-Users] Robotic subscription attacks

[Jim Popovitch]

On Tue, Apr 12, 2016 at 8:47 PM, Mark Sapiro <mark at msapiro.net> wrote:
> There have been discussions of these robotic subscribes on this list in
> the past. Up until a couple of days ago, the ban_list or GLOBAL_BAN_LIST
> regexp '^.*\+\d{4,}@' i.e., any email address whose local part ends with
> '+' followed by 4 or more digits) has been effective at blocking
> virtually all of them I've seen.
>
> Now there is a new pattern. So far all the new ones I've seen match
> '^[a-z]{4,}\.?[a-z]{4,}\+[a-z]{4,}@gmail\.com$'. Some examples are
>
> dramaalertbiz+<letters>@gmail.com
> kemo.mart+<letters>@gmail.com
> kezukaya+<letters>@gmail.com
> killerkeemstar+<letters>@gmail.com
> leafylagann+<letters>@gmail.com
> newdramaalert+<letters>@gmail.com
> ooktap.yaylea+<letters>@gmail.com
> ubercoffeetime+<letters>@gmail.com
>

LOL, Youtube childishness is leaking into the real world.

-Jim P.