[Mimedefang] Spammers who won't take no for an answer

David F. Skoll dfs at roaringpenguin.com
Mon Oct 20 20:26:37 EDT 2003


Is anyone seeing a new trend (maybe a new ratware package?)  I'm seeing
spammers repeatedly retry the same message, even after a 5xx failure code.

Examples: (log in as demo/demo and scroll down to "History")

http://www.roaringpenguin.com/canit/showincident.php?id=6882
http://www.roaringpenguin.com/canit/showincident.php?id=6853

This one is extreme: 105 attempts:
http://www.roaringpenguin.com/canit/showincident.php?id=6846

and another one from Japan:
http://www.roaringpenguin.com/canit/showincident.php?id=6511

Why would ratware do this?  Does it think the filter will give up
and cry "uncle"? :-)

I see it mostly from dial-up machines, which makes me think
we have a new ratware package out there.

--
David.



More information about the MIMEDefang mailing list