Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed: Is anyone seeing this?
  FAQ FAQ  Forum Search   Register Register  Login Login

Is anyone seeing this?

 Post Reply Post Reply
Author
IKILLSPAM1 View Drop Down
Groupie
Groupie


Joined: 02 May 2007
Location: United States
Online Status: Offline
Posts: 70
Post Options Post Options   Quote IKILLSPAM1 Quote  Post ReplyReply Direct Link To This Post Topic: Is anyone seeing this?
    Posted: 29 May 2007 at 10:07am

All day today I have been getting slammed. Its every few seconds and from random IP addresses.

I pasted below what it says in the logs, replacing the actual domain name but leaving the format as is. Appears to be a virus but the emails arent getting through because theres an empty mail from and the email address is invalid anyways. Was just curious to see if this was just local or a bigger problem. Thanks

 EMail from  to rimlocaldomainkol@localdomain.com

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Online Status: Offline
Posts: 3659
Post Options Post Options   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 29 May 2007 at 10:32pm
We're not aware of that pattern, however virus attacks and spam waves often do originate from several different IPs, which are usually exploited computers or simply members of the spammer's network of users (yes... spammers do create network of users who each receive a small bonus for each batch of emails they help to send...)
Roberto Franceschetti
LogSat Software
Spam Filter ISP
Back to Top
IKILLSPAM1 View Drop Down
Groupie
Groupie


Joined: 02 May 2007
Location: United States
Online Status: Offline
Posts: 70
Post Options Post Options   Quote IKILLSPAM1 Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 9:00am
Cool, thanks for the reply. I didnt know if anyone would recognize the pattern of the Email address. I wont worry about it as its getting blocked anyways.
Back to Top
WebGuyz View Drop Down
Senior Member
Senior Member


Joined: 09 May 2005
Location: United States
Online Status: Offline
Posts: 331
Post Options Post Options   Quote WebGuyz Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 10:04am
Looks like its coming from a postmaster account and thats why there is a space between the 'from  to'. Maybe your being Joe Job'ed and these are bounces.
http://www.webguyz.net
Back to Top
sgeorge View Drop Down
Senior Member
Senior Member


Joined: 23 August 2005
Online Status: Offline
Posts: 178
Post Options Post Options   Quote sgeorge Quote  Post ReplyReply Direct Link To This Post Posted: 30 May 2007 at 10:25am
Grrr, I hate Joe Jobbers, especially when they try to use my addresses.    Another reason why setting up a SPF record is so handy.

Stephen
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.016 seconds.

Spam Filter ISP - Copyright © 2002-2010 LogSat Software LLC - PO BOX 916340 Longwood, FL 32791 USA

 Sales: sales@LogSat.com - Support: support@LogSat.com - Tel. (sales only): +1 407-650-3008