Subj : Mailers and telnet spammers
To   : Nick Andre
From : mark lewis
Date : Mon Nov 21 2016 07:54 pm


20 Nov 16 20:33, you wrote to Matt Munson:

MM>> Are bots smart enough to press escape twice to enter the system?

NA> Could've sworn I've seen one or two...

all the ones i've see hitting my frontdoor nodes are timing out on the mailer
side and falling through to the user side... in other words, there is no mailer
traffic or humans within the timeout period... none have "hit escape twice"...
the only ones that do that are humans that are actually there and reading their
terminals... that's out of an average 7000+ over 30 days of MIRAI and vairants
being blocked... 100% of those have been blocked because of the text they send
raw without care of any prompts being fed to them...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
wrong...
... One more *%^%$^@! vegan recipe and I get violent.
---
* Origin:  (1:3634/12.73)