My running blacklist (24 hour expiry) from my greytraps bloated
from a usual total of about 6000 hosts to over 20,000 during the worst
of it.
Net result being most of them hit the wall, unless they
came via a previously whitelisted mailhost - and then you go
at them other ways.
On 11/23/05, knitti [EMAIL PROTECTED] wrote:
@bka.de (bka is the german variant of fbi, but they only use @bka.bund.de
afaik)
sorry, the worm uses the capital version: BKA.de
--knitti
On 11/23/05, Peter N. M. Hansteen [EMAIL PROTECTED] wrote:
i will send you my raw data off list, however, if you want to, you can
also grep
for these:
@bka.de (bka is the german variant of fbi, but they only use @bka.bund.de afaik)
[EMAIL PROTECTED] (this adress _might_ also have legitimate
my results:
host: a small web server with 9 active domains
two deliverable mail adressed have been targeted
first hit: Nov 22 08:50:22
last hit (so far): Nov 23 17:35:33
total hits: 35 (some unclear omitted)
total hits on deliverable adresses: 24
too many different origin adresses to list (for
4 matches
Mail list logo
