[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

backscatter joe-job attack

From: Bob Proulx
Subject: backscatter joe-job attack
Date: Mon, 4 Jan 2021 00:50:53 -0700

FYI: I routed a nonexisting address to /dev/nullon on debbugs tonight
to mitigate a backscatter joe-job style attack to it.  Some dozens of exit nodes are connecting and dumping what looks like
backscatter to an 11 digit number address.  WAT?  I have no idea.  But
it is consuming so many parallel TCP SMTP connections that valid
connections are receiving "421 Too many concurrent SMTP connections; pleas\
e try again later." status returns which is delaying legitimate

I am hoping that things eventually drain and stop.  That's all I know.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]