I discussed this briefly with our Abuse Prevention team, but I’d love it if I 
could get some more info. Is Mailchimp signup email included in the spike you 
are seeing? If so would you mind sending me some examples so that I can share 
those with the Abuse Prevention team to make sure nothing is slipping through 
the cracks on our end?


Thanks,
Matt Gilbert
--
Deliverability Engineer | Mailchimp
delivery.mailchimp.com


> On Nov 25, 2019, at 1:07 PM, rps462 via mailop <[email protected]> wrote:
> 
> We've seen a big spike in list bombing in the last few weeks. Individual 
> mailboxes receiving 10k+ "confirm your subscription" emails, all from 
> legitimate ESPs. So we heavily rate limited them  thinking/hoping that ESPs 
> would see their queues build up, prompting them to look and see what wasn't 
> getting delivered, perhaps even detect the abuse and stop it!! (I know, I'm 
> dreaming.) 
> 
> List bombing isn't anything new. I figured most would have had something in 
> place to detect this by now. Perhaps a new technique is being used by the 
> abuser? These attacks are spread across hundreds of ESPs, but each individual 
> one is sending anywhere from 30 to 150 unique confirmation messages per hour 
> .. to the SAME rcpt. That should be pretty detectable.
> 
> Anyway, if you're an ESP and you find yourself being heavily rate limited by 
> one or more US/CA/EU ISPs then you might want to check for some list bombing 
> abuse.
> 
> Thanks,
> -R. Smith
> _______________________________________________
> mailop mailing list
> [email protected]
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to