[Operators] XMPP spammer from 188.8.131.52
ij at bangpath.net
Mon Aug 6 17:29:02 UTC 2018
Today (while I was on the back home) there were about 400 accounts created on jabber.windfluechter.net from IP 184.108.40.206.
As soon as I was home I discovered this and immediatedly blocked that IP address.
All created accounts have in common that they shared the following contacts in their rosters:
test at kidala.info
xmppspam at securetalks.biz
xmppspam at wallstreetjabber.biz
Strangely enough test at kidala.info is only a contact for one freshly created spam account that was registered at 16:27 while the other 400 accounts were created starting at 18:11.
Sorry, if someone got spammed by one of those accounts. There already deleted.
Ciao... // http://blog.windfluechter.net
Ingo \X/ XMPP: ij at jabber.windfluechter.net
gpg pubkey: http://www.juergensmann.de/ij_public_key.asc
More information about the Operators