Print Page | Close Window

Is anyone seeing this?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6086
Printed Date: 01 December 2025 at 4:10am


Topic: Is anyone seeing this?
Posted By: IKILLSPAM1
Subject: Is anyone seeing this?
Date Posted: 29 May 2007 at 10:07am

All day today I have been getting slammed. Its every few seconds and from random IP addresses.

I pasted below what it says in the logs, replacing the actual domain name but leaving the format as is. Appears to be a virus but the emails arent getting through because theres an empty mail from and the email address is invalid anyways. Was just curious to see if this was just local or a bigger problem. Thanks

 EMail from  to mailto:rimlocaldomainkol@localdomain.com - rimlocaldomainkol@localdomain.com




Replies:
Posted By: LogSat
Date Posted: 29 May 2007 at 10:32pm
We're not aware of that pattern, however virus attacks and spam waves often do originate from several different IPs, which are usually exploited computers or simply members of the spammer's network of users (yes... spammers do create network of users who each receive a small bonus for each batch of emails they help to send...)

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: IKILLSPAM1
Date Posted: 30 May 2007 at 9:00am
Cool, thanks for the reply. I didnt know if anyone would recognize the pattern of the Email address. I wont worry about it as its getting blocked anyways.


Posted By: WebGuyz
Date Posted: 30 May 2007 at 10:04am
Looks like its coming from a postmaster account and thats why there is a space between the 'from  to'. Maybe your being Joe Job'ed and these are bounces.

-------------
http://www.webguyz.net


Posted By: sgeorge
Date Posted: 30 May 2007 at 10:25am
Grrr, I hate Joe Jobbers, especially when they try to use my addresses.    Another reason why setting up a SPF record is so handy.

Stephen



Print Page | Close Window