Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Is anyone seeing this?
  FAQ FAQ  Forum Search   Register Register  Login Login

Is anyone seeing this?

 Post Reply Post Reply
Author
IKILLSPAM1 View Drop Down
Groupie
Groupie


Joined: 02 May 2007
Location: United States
Status: Offline
Points: 70
Post Options Post Options   Thanks (0) Thanks(0)   Quote IKILLSPAM1 Quote  Post ReplyReply Direct Link To This Post Topic: Is anyone seeing this?
    Posted: 29 May 2007 at 10:07am

All day today I have been getting slammed. Its every few seconds and from random IP addresses.

I pasted below what it says in the logs, replacing the actual domain name but leaving the format as is. Appears to be a virus but the emails arent getting through because theres an empty mail from and the email address is invalid anyways. Was just curious to see if this was just local or a bigger problem. Thanks

 EMail from  to rimlocaldomainkol@localdomain.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 29 May 2007 at 10:32pm
We're not aware of that pattern, however virus attacks and spam waves often do originate from several different IPs, which are usually exploited computers or simply members of the spammer's network of users (yes... spammers do create network of users who each receive a small bonus for each batch of emails they help to send...)
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
IKILLSPAM1 View Drop Down
Groupie
Groupie


Joined: 02 May 2007
Location: United States
Status: Offline
Points: 70
Post Options Post Options   Thanks (0) Thanks(0)   Quote IKILLSPAM1 Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 9:00am
Cool, thanks for the reply. I didnt know if anyone would recognize the pattern of the Email address. I wont worry about it as its getting blocked anyways.
Back to Top
WebGuyz View Drop Down
Senior Member
Senior Member


Joined: 09 May 2005
Location: United States
Status: Offline
Points: 348
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebGuyz Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 10:04am
Looks like its coming from a postmaster account and thats why there is a space between the 'from  to'. Maybe your being Joe Job'ed and these are bounces.
http://www.webguyz.net
Back to Top
sgeorge View Drop Down
Senior Member
Senior Member


Joined: 23 August 2005
Status: Offline
Points: 178
Post Options Post Options   Thanks (0) Thanks(0)   Quote sgeorge Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 10:25am
Grrr, I hate Joe Jobbers, especially when they try to use my addresses.    Another reason why setting up a SPF record is so handy.

Stephen
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.300 seconds.