Spam Wave ??

cyberneticos

Verified User
Joined
Aug 21, 2005
Messages
705
Location
Spain
Any one getting bombard with spam right now ?? All of our servers are receveing tons of spam,. all of the sudden, from different ips, ips keep chaging every 10 seconds.

2009-05-26 19:31:44 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:44 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:44 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:44 Connection from [189.30.223.210] refused: too many connections
2009-05-26 19:31:44 Connection from [189.30.223.210] refused: too many connections
2009-05-26 19:31:44 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:45 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:45 Connection from [189.30.223.210] refused: too many connections
2009-05-26 19:31:45 Connection from [189.30.223.210] refused: too many connections
2009-05-26 19:31:45 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:45 Connection from [190.176.230.139] refused: too many connections
2009-05-26 19:31:45 Connection from [85.158.146.96] refused: too many connections
2009-05-26 19:31:45 H=189-85-178-94.pool.ukrtel.net (home-75adfe5262) [94.178.85.189] F=<[email protected]> rejected RCPT <[email protected]>: Email blocked by CBL - to unblock see http://www.example.com/
2009-05-26 19:31:45 H=189-85-178-94.pool.ukrtel.net (home-75adfe5262) [94.178.85.189] incomplete transaction (connection lost) from <[email protected]>
2009-05-26 19:31:45 unexpected disconnection while reading SMTP command from 189-85-178-94.pool.ukrtel.net (home-75adfe5262) [94.178.85.189]
2009-05-26 19:31:45 H=(226-134.static.vega-ua.net) [213.227.226.134] F=<[email protected]> rejected RCPT <[email protected]>: Email blocked by CBL - to unblock see http://www.example.com/
2009-05-26 19:31:45 H=(226-134.static.vega-ua.net) [213.227.226.134] incomplete transaction (connection lost) from <[email protected]>
2009-05-26 19:31:45 unexpected disconnection while reading SMTP command from (226-134.static.vega-ua.net) [213.227.226.134] (error: Connection reset by peer)
2009-05-26 19:31:46 Connection from [78.113.17.214] refused: too many connections
2009-05-26 19:31:46 Connection from [190.28.159.180] refused: too many connections
2009-05-26 19:31:46 Connection from [201.9.243.109] refused: too many connections


Anyone ?
 
Not me. Your server may have been added to some spammer's open relay list by error, it happens.
 
Okee :)

Thanks Tillo. Most are getting rejected by CBL. But they are coming in like 20-30 per second,. insane.

Happening to 6 shared servers.
 
If those server are in the same subnet, they probably got in one of those annoying lists all together... if not it may be a targeted DDoS.
In both cases you may want to put in place some netfilter rules to limit the connection rate.
 
certainly are from all of the world. And it's happening to all of my shared servers.

Looking into some filtering rules. Thanks !
 
I have also noticed a slight increase in spam on my server hosted in Dallas, Texas.

Could this have anything to do with the recent spread of the Conficker virus/worm??
 
Are you hosting on DirectAdmin? If so, make sure your hosting company uses the SpamBlocker technology and SpamAssassin technology built into DirectAdmin. If not, then you're on the wrong forum.

According to Symantec, quoted by Computer World, spam now makes up 90% of all email. Most of us, using SpamBlocker and SpamAssassin (and some of using Spam Filters, as enabled in DirectAdmin as well) are getting significantly less.

Jeff
 
This month has seen only a slight increase in spam according to spamcop;
http://www.spamcop.net/spamgraph.shtml?spammonth

It's quite sad to see that during November last year spam appeared to be at an all time low of around 10 messages per second but since then it's increased massively and now stands at around 40 messages/sec. When on earth will it end.
 
Spamblocker is doing a really good job at stoping most of them.

I'ts just freaky to see how many spams per second coming. really freak.

SPAM

Stupid People Asking for Money
 
It's quite sad to see that during November last year spam appeared to be at an all time low of around 10 messages per second but since then it's increased massively and now stands at around 40 messages/sec. When on earth will it end.

Spam was abnormally low last Nov because a major spam house was unplugged. It took the spammers a couple of weeks to find new connections.

http://news.cnet.com/security/?keyword=McColo
 
Why don't down go on without ? Or have to you on the side slope ?

Get a can black of this I hope to also now.

:D:D:D
 
Joe,

Anyone besides you I'd probably question, but you I tend to believe :).

That good, eh? Any reported false positives?

Can you write about how the product specifically works? There's not much detail on their website.

Jeff
 
Easy to configure and manage, Email Protection Services require no software or hardware integration.
I guess they just act as an MTA proxy. I wonder if they at least synchronize the list of deliverable addresses or if they contribute at the bounce pollution :p
Hopefully hostpc.com will confirm or correct me :)

They also seem to be working on some sort of software or hardware solution, IMHO that's more interesting.
 
My guess is that that's exactly what they do.

We're currently working on a DirectAdmin specific method for synchronizing lists of deliverable addresses; we want it so we can have a backup MX server in a different data center. I don't know if we'll want to create a third-party anti-spam solution; my experience with SpamBlocker has shown me it's a full-time job. Perhaps we'll license it to an anti-spam solution provider.

Jeff
 
Back
Top