Anyone from instagram reading?

Mike Hammett nanog at
Thu Dec 3 13:51:14 UTC 2020


Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 

----- Original Message -----

From: bzs at 
To: nanog at 
Cc: bzs at, abuse at 
Sent: Wednesday, December 2, 2020 1:03:13 PM 
Subject: Anyone from instagram reading? 

Instagram is enabling an harassment attack. 

They are sending out "change in terms of use" statements, you've 
probably received it. 

Apparently they will send them to unconfirmed accounts, en masse. 

So for example you own and all email for * 
goes to you. 

And there are no legitimate email accounts for that domain so can't 
possibly be confirmed accounts. 

So you are receiving a firehose of "terms of use" emails to 
randomstring at apparently being generated by a script, 
random+domain at domain like (from the actual emails tho not 

qiuncjhuxeexample at 
mazhjkmthexample at 

and so on and so on, each one different. 

SOLUTION: Stop sending your terms of use update messages to 
unconfirmed accounts. It's a trivially abused harassment vector as 
we're seeing. 

-Barry Shein 

Software Tool & Die | bzs at | 
Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD 
The World: Since 1989 | A Public Information Utility | *oo* 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the NANOG mailing list