[Operators] Rosters flood

Виктор Попов support at linuxforum.kz
Tue Sep 7 09:19:44 CST 2010


Hi!
Block means the whole network firewall IP registration. This is a spam bot.



2010/9/7 Evgeniy Khramtsov <xramtsov at gmail.com>:
> Recently our SPAM filter on jabber.ru detected massive flood targeted users
> rosters. Sample spam jids:
>
> 40tman_rullezz_1z2m6g at gornyak.net
> 40tman_rullezz_ezz00545se at highsecure.ru
> 40tman_rullezz_zum6y31 at jabber.zs1.wroc.pl
> 40tman_rullezz_m8mlc9 at deshalbfrei.org
> 40tman_rullezz_am5oi at jabber.ozerki.net
> 40tman_rullezz_on5b7o3 at codingteam.net
> 40tman_rullezz_fi0p6 at gornyak.net
> 40tman_rullezz_csb26vy_ at jabba.mgw.pl
> 40tman_rullezz_5wracfj at jabbers.org.ru
> 40tman_rullezz_59tv8wpfn at jabber.zs1.wroc.pl
> 40tman_rullezz_iiy13 at dominion.dn.ua
> ...
>
> A complete list of JIDs: http://kuku.jabber.ru/~xram/40tman.log
> Sorted by servers: http://kuku.jabber.ru/~xram/40tman-servers.log
>
> Any idea how to fight against this?
>
> --
> Regards,
> Evgeniy Khramtsov, ProcessOne.
> xmpp:xram at jabber.ru.
>
>


More information about the Operators mailing list