Subj : Mailers and telnet spammers
To   : Nick Andre
From : mark lewis
Date : Mon Nov 21 2016 07:54 pm


20 Nov 16 20:33, you wrote to Matt Munson:

 MM>> Are bots smart enough to press escape twice to enter the system?

 NA> Could've sworn I've seen one or two...

all the ones i've see hitting my frontdoor nodes are timing out on the mailer 
side and falling through to the user side... in other words, there is no mailer 
traffic or humans within the timeout period... none have "hit escape twice"... 
the only ones that do that are humans that are actually there and reading their 
terminals... that's out of an average 7000+ over 30 days of MIRAI and vairants 
being blocked... 100% of those have been blocked because of the text they send 
raw without care of any prompts being fed to them...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it 
wrong...
.... One more *%^%$^@! vegan recipe and I get violent.
---
 * Origin:  (1:3634/12.73)

.