On Tue, 2006-01-31 at 09:54, David F. Skoll wrote:

> > It would seem that they would see high levels of traffic coming from bots 
> > that they could throttle/reject.
> 
> I wouldn't be surprised if more sophisticated bots use zombie networks to
> log on to Hotmail and send mail via their Web interface.  I think it would
> be pretty hard to notice an anomaly against all their regular traffic.

They may be learning to distribute the load across a large number
of hosts to keep it low enough to stay undetected.  I've noticed
something similar with ssh dictionary attacks for a while.  Any
newly exposed address is hit fairly quickly but only gets a few
attempts per hour.

-- 
  Les Mikesell
   [EMAIL PROTECTED]


_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to