[SAC] another ongoing spam storm

Sandro Santilli strk at keybit.net
Wed May 4 11:24:21 PDT 2016


And (ossim and geos under attack):

  +('gmail5'),
  +('chromeeight'),
  +('karmmsee855'),

--strk;

On Wed, May 04, 2016 at 05:54:06PM +0200, Sandro Santilli wrote:
> And (mapbender and proj4js under attack):
> 
> +('ajayrudelee'),
> +('anisingh3'),
> +('ayank'),
> +('c1528071'),
> +('chromeseven'),
> +('cohnema'),
> +('daber123'),
> +('dinesh02'),
> +('forprabhat3'),
> +('gmail4'),
> +('james45124'),
> +('monusharma'),
> +('mozillatwo'),
> +('polakson25'),
> +('rampyariseo91'),
> +('ranatunga'),
> +('ravissss'),
> +('samarraj2'),
> +('saurav110'),
> +('twchelpline'),
> +('user05'),
> +('vicky'),
> +('websupport'),
> +('willium'),
> 
> --strk;
> 
> On Wed, May 04, 2016 at 04:19:06PM +0200, Sandro Santilli wrote:
> > And:
> > 
> >   +('falaana2016'),
> > 
> > --strk;
> > 
> > On Wed, May 04, 2016 at 12:39:11PM +0200, Sandro Santilli wrote:
> > > And:
> > > 
> > >   +('prachi123'),
> > >   +('lardenspams'),
> > >   +('gmail2'),
> > >   +('karmmsee855'),
> > >   +('rampa013'),
> > >   +('gocirero'),
> > >   +('rahul456'),
> > >   +('jejus'),
> > > 
> > > --strk;
> > > 
> > > On Wed, May 04, 2016 at 11:56:05AM +0200, Sandro Santilli wrote:
> > > > And:
> > > > 
> > > >   +('fasfafaraa'),
> > > >   +('kirti44'),
> > > >   +('lolapola'),
> > > >   +('microprocessor'),
> > > >   +('microprocessor '),
> > > >   +('mozillaseven'),
> > > >   +('mozillathree'),
> > > >   +('nattu'),
> > > > 
> > > > --strk;
> > > > 
> > > > On Wed, May 04, 2016 at 11:51:32AM +0200, Sandro Santilli wrote:
> > > > > And: 
> > > > > 
> > > > >   +('NewtonKing'),
> > > > > 
> > > > > --strk;
> > > > > 
> > > > > On Wed, May 04, 2016 at 10:46:29AM +0200, Sandro Santilli wrote:
> > > > > > On Tue, May 03, 2016 at 11:02:45PM +0200, Martin Spott wrote:
> > > > > > > On Tue, May 03, 2016 at 08:04:24PM +0200, Sandro Santilli wrote:
> > > > > > > > And:
> > > > > > > 
> > > > > > > These have been removed from OSGeo LDAP.
> > > > > > > I'll try to come up with a more convenient command line solution this
> > > > > > > weekend, until then I'll be at your service as time permits.
> > > > > > 
> > > > > > Today I found these other accounts:
> > > > > > 
> > > > > >   +('dahiyankur'),
> > > > > >   +('8009875476'),
> > > > > >   +('anshu166'),
> > > > > >   +('bolandoe'),
> > > > > >   +('dahiyankur'),
> > > > > >   +('kumar1212'),
> > > > > >   +('mackhill88'),
> > > > > >   +('nehajay'),
> > > > > >   +('rajababa'),
> > > > > >   +('shadabmallick'),
> > > > > >   +('turbotax'),
> > > > > >   +('wilson91'),
> > > > > > 
> > > > > > I've put your IRC-mentioned commandline on the wiki:
> > > > > > https://wiki.osgeo.org/wiki/SAC:LDAP#Editing_the_LDAP_database
> > > > > > but it isnt clear to me if a password is always needed or only
> > > > > > from some machines or with some privileges (see the initial paragraph
> > > > > > on the wiki).


More information about the Sac mailing list