major spam uptick

[surrou))]

hell..o:

is there any explanation for the MAJOR increase in malicious spam that everyone at my domain email is getting hit with? i've tried resetting some of the spam config to reduce it and am just about to log in all the blacklist addys, but - as a design firm - we need to get attachments, just not this unbelievable pile of noxious worms.

our site is not easily hit on. has there been a security breach with email lists at direct admin?

thx
a

 

[nobaloney]

DA doesn't sponsor any email lists.

Only these forums. It's unlikely the forum was breached, but of course it's possible.

The DA Announcement list runs on one of my servers, but the address I use on that list hasn't seen any spam at all.

Jeff

 

[surrou))]

thnx for your response jeff - i'll try a few more changes to slow this barrage.

happy horrordays!

cheers,
a

 

[mike_p]

One of the domains on my server suddenly started receiving a large increase in worm emails.
After careful examination of the logs, I realised that the entire increase was emanating from a single IP address. So I decided to investigate further. I tracked the culprit down, since, fortunately, it was from a large company with their own block of IP addresses. I telephoned them, spoke to the IT manager, who, at first, denied there could be any problem. Once I convinced him he had a problem he got very worried. Eventually it was tracked down to a senior partner who had an infected laptop.

Six times every hour the worm on the laptop was sending itself out to a mangled cross between all the entries in the guys address book (ie user_from_domain_A@domain_B) For my client domain, it was sending to about 100 addresses. With a catch-all, that's a lot of rubbish!

The company involved was a very large and prestigious legal practice in London. Very embarrassing for them since all their clients will have been subjected to the same barrage as my client.

 

[surrou))]

mike - you're the best. thanks for that info. we did a bit of the same sleuthing and tracked it to a client in boston who's sharing a network with a major university. they're now on the job and should have it cleared up soon.

much appreciated! have a nice xmas.

cheers,
anne