Hello *, since some days my servers are hit by 50.000-80.000 Spams a day and for some minutes they have spamed today 18 accounts out of 98.000 with MORE then 100.000 spams.
All spams coming from the same network:
xxx.root.static.coolserver.info
xxx.root.static.starsweet.info
where xxx change every time and the servers IP too (they resolv)
In the body of the messages I found those domains:
advocatebuying.info aidpurchase.info encouragebuying.info
ensurepurchase.info guidebuying.info motivatebuying.info
providebuying.info purchaseadvocate.info purchaseaid.info
purchaseassist.info purchasecoach.info purchaseguide.info
purchasesimplify.info purchasesupport.info simplifybuying.info
supportbuying.info techsweet.info topsweet.info
tradesweet.info travelsweet.info videosweet.info
visionsweet.info volunteerbuying.info websweet.info
yousweet.info
maybe there are some more, but these are those which I was able to grep.
However, I have tried to train Spamassassin but it give only a score of
2-4.
Does someone know more about this crap?
Thanks, Greetings and nice Day/Evening
Michelle Konzack
--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
itsystems@tdnet France itsystems@tdnet
Owner Michelle Konzack Owner Michelle Konzack
Apt. 917 (homeoffice) Gewerbe Strasse 3
50, rue de Soultz 77694 Kehl/Germany
67100 Strasbourg/France Tel office: +49-176-86004575
Tel mobil: +33-6-61925193 Tel mobil: +49-177-9351947
<http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/>
<http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/>
Jabber linux4miche...@jabber.ccc.de
Linux-User #280138 with the Linux Counter, http://counter.li.org/
signature.pgp
Description: Digital signature
