On Tuesday, May 21, 2002, at 08:38  AM, Paul List Hess wrote:

> I've been noticing massive increases in the amount of address harvesting 
> going on this month, coming from various unrelated IP addresses.  Have 
> any of you seen similar occurrences on your servers?

I have seen an increase in address harvesting in the last month or two.

And I believe I have seen a change in the type of harvesting: My 
impression is that fewer accounts are being included in each try, tries 
are spread over a longer time and that they are using often relays and/or 
alternative IP addresses. They could all be separate attacks, but the 
names being tested seem to follow a pattern that subjectively indicate 
that only a few attacks are happening. I got the impression that a new 
type of harvesting that attempts to keep below the automatic detectors is 
starting to happen.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to