[CESG] DoS or other hacking attempts on MOIMS mailing list?
Brian Oliver (CCSDS Support)
techsupport at mailman.ccsds.org
Thu Aug 6 13:53:32 EDT 2026
##- Please type your reply above this line -##
You are registered as a CC on this request (19418). Reply to this email to add a comment to the request.
----------------------------------------------
Brian Oliver, Aug 6, 2026, 1:53 PM EDT
Mehran,
I have changed the moderator to myself and will run the list for a week.
I want to see if this still continues to have any issues.
Keep you posted.
Thanks,
Brian
----------------------------------------------
Mehran Sarkarati, Aug 6, 2026, 9:09 AM EDT
Hi Brian,
Many thanks for looking into this and for your prompt answer.
I had over 400 notifications yesterday and it is flooding my inbox.
There must be somewhere a problem.
Regards
Mehran
**From:** CESG <cesg-bounces at mailman.ccsds.org> on behalf of Brian Oliver (CCSDS Support) via CESG <cesg at mailman.ccsds.org>
**Date:** Thursday, 6. August 2026 at 15:08
**To: **
**Cc:** Costin.Radulescu at jpl.nasa.gov <costin.radulescu at jpl.nasa.gov>; olivier.Churlaud at cnes.fr <olivier.churlaud at cnes.fr>; CCSDS CESG -- <cesg at mailman.ccsds.org>
**Subject:** [CESG] DoS or other hacking attempts on MOIMS mailing list?
This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo at esa.int).
----------------------------------------------
Mehran Sarkarati, Aug 6, 2026, 9:08 AM EDT
Hi Brian,
Many thanks for looking into this and for your prompt answer.
I had over 400 notifications yesterday and it is flooding my inbox.
There must be somewhere a problem.
Regards
Mehran

**From:** Brian Oliver (CCSDS Support) <techsupport at mailman.ccsds.org>
**Date:** Thursday, 6. August 2026 at 15:06
**To:** Mehran Sarkarati <Mehran.Sarkarati at esa.int>
**Subject:** [ASRC Federal] Re: DoS or other hacking attempts on MOIMS mailing list?
This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo at esa.int).
----------------------------------------------
Brian Oliver, Aug 6, 2026, 9:06 AM EDT
Mehran,
I only found 14 subscription requests in the MOIMS mailing list moderation queue, and some of them had been sitting there for more than a year.
I've gone ahead and cleared out the queue. It's possible that the daily notifications you're receiving are simply the Mailman reminders that there are pending requests awaiting moderation.
We also have a commercial spam filter in place that does an excellent job of blocking email spam. However, subscription requests to the mailing list are submitted through the Mailman web form, so they aren't considered spam-related activity and therefore aren't filtered by the spam protection.
Let's keep an eye on things over the next several days. If you continue to receive a significant number of illegitimate subscription requests, we can look at making more substantial changes to the MOIMS mailing list configuration.
Thanks,
Brian
----------------------------------------------
Mehran Sarkarati, Aug 6, 2026, 8:57 AM EDT
Dear CCSDS Tech Support team,
I have received over 400 subscription requests from strange looking gmail accounts to MOIMS mailing list.
Is this only MOIMS or are other mailing lists also impacted?
Could you please implement any measures to avoid the large spam?
I have not checked any of the requests as I largely doubt any of them being genuine subscription requests.
Regards
Mehran
This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo at esa.int).
--------------------------------
This email is a service from ASRC Federal.
[R2037R-7WRMV]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/cesg/attachments/20260806/3144c7f5/attachment.htm>
More information about the CESG
mailing list