Re: [exim] harvesting email addresses from an exim server?

Top Page
Delete this message
Reply to this message
Author: Tony Finch
Date:  
To: Chad Leigh -- Shire.Net LLC
CC: Exim User's Mailing List
Subject: Re: [exim] harvesting email addresses from an exim server?
On Wed, 29 Sep 2004, Chad Leigh -- Shire.Net LLC wrote:
>
> Can spammers somehow query an exim server to try and determine email addresses
> (besides a brute force of trying to send to a random list)?


No.

> (At least) one of the accounts served by this server has started receiving
> spam. But the account was used only internally and never in public for
> spammers to harvest,


Spammers guess addresses. The most common local parts in invalid addresses
seen by my servers are as follows. The ones with the highest counts are
clearly the spammers' favourites.

6 exim
6 master
6 newsletter
7 Mailer-Daemon
7 tiger
7 www
8 apache
12 httpd
14 mail
14 nobody
16 admin
16 info
20 anonymous
21 webmaster
22 postmaster
24 MAILER-DAEMON
26 sales
27 root
30 noreply
49 listmanager
58 mary
64 andrew
65 maria
66 steve
67 anna
67 matt
68 brian
68 george
68 julie
69 adam
69 debby
69 james
69 robert
69 sandra
70 alex
70 claudia
70 david
70 joe
70 leo
70 michael
70 smith
71 brenda
71 linda
71 ted
72 brent
72 fred
73 alice
73 jimmy
74 dave
75 jack
75 peter
75 ray
75 sam
76 jane
76 jerry
76 kevin
76 serg
77 jose
77 stan
77 tom
78 dan
79 mike
80 helen
80 jim
83 bill
94 john
95 bob

Tony.
--
f.a.n.finch <dot@???> http://dotat.at/
BERWICK ON TWEED TO WHITBY: SOUTHEAST 3 OR 4, INCREASING 5 OR 6 FOR A TIME.
FAIR THEN RAIN FOR A TIME VISIBILITY: GOOD BECOMING MODERATE FOR A TIME.
SLIGHT BECOMING MODERATE.