House of Fusion
Search over 2,500 ColdFusion resources here
  
Home of the ColdFusion Community

Mailing Lists
Home /  Groups /  ColdFusion Community (CF-Community)

The tide is high

  << Previous Post |  RSS |  Tree View |  Sort Latest First |  Subscribe to this Group Next >> 

The tide is high

I'm being deluged with spam at the moment. The lists have blocked over 100 in Michael Dinowitz 08/19/2003 11:09 AM
And a chunk of the spam is virus spam that's being sent through nasa.gov. Anyone Michael Dinowitz 08/19/2003 11:13 AM
I've gotten some reports from customers that they are getting the same Dan Phillips \(CFXHosting.com\) 08/19/2003 11:14 AM
And the virus posters as well. I'm getting a lot of government 'true' senders, Michael Dinowitz 08/19/2003 11:22 AM
where is it aganist the law to tell people who is spamming you?? William Wheatley 08/19/2003 11:32 AM
According to the SANS and other lists that I participate in, there is a huge Doug White 08/19/2003 11:40 AM
Check out the thread titles "we're in trouble". my spam page, which posts the Michael Dinowitz 08/19/2003 11:40 AM
Consider yourself (somewhat) lucky... I'm currently dealing with a bug Jim Davis 08/19/2003 11:44 AM
Hmm.  They probably used a metric antivirus on an english virus.  Ben Doom 08/19/2003 11:47 AM
Is that an email client bug perhaps? Sounds very similar to one that I know Kevin Graeme 08/19/2003 11:49 AM
oi Doug!! Critz 08/19/2003 11:58 AM
I'm thinking it is on my side, although it coincided with my Host Jim Davis 08/19/2003 12:14 PM
I found one once, but I don't seem to have it bookmarked. I did find this Kevin Graeme 08/19/2003 01:16 PM
Ah ha! Here it is: Kevin Graeme 08/19/2003 01:41 PM
They would have a hard time proving anything because its all fact so don't William Wheatley 08/19/2003 01:44 PM
I'm seeing this as well. My spam folder has 25 emails in the last 2.5 jon hall 08/19/2003 02:09 PM
Apparently it's Sobig.E jon hall 08/19/2003 02:40 PM
Sounds like a Virus that would only send viagra spam Dan Phillips \(CFXHosting.com\) 08/19/2003 02:45 PM
I've gotten a whole lot of bounced messages from people claiming I have a Sandy Clark 08/19/2003 04:20 PM
I'm guessing that someone with you in their contacts is infected.  The Ben Doom 08/19/2003 04:27 PM
We are having the same probs here... Mike Townend 08/19/2003 04:28 PM
In the case in question the person was reporting fact as well. Truth doesn't Michael Dinowitz 08/19/2003 04:40 PM
Arrested?  I could see a lot of trouble, but surly this would be a Ian Skinner 08/19/2003 05:05 PM
No, no. You can't be some guy's wife in prison. It's a Federal law, and you Kevin Graeme 08/19/2003 05:12 PM
Read the story to see how this guy, who was doing something that might fall Michael Dinowitz 08/19/2003 05:21 PM
>Arrested?  I could see a lot of trouble, but surly this would be a Larry C. Lyons 08/19/2003 06:04 PM
> Looks like theres a harvester out there collecting and sending from those Michael Dinowitz 08/19/2003 06:58 PM
I just did a search through my logs for hinet.net and found them as well. Sandy Clark 08/19/2003 08:32 PM
I just started getting stacks of sobig alerts from speakeasy. Tim Heald 08/20/2003 12:18 AM

08/19/2003 11:09 AM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86673 I'm being deluged with spam at the moment. The lists have blocked over 100 in the last 20 minutes or so and my black hole account has done likewise. What the hell is going on? Is it be nice to spammers day today? Michael Dinowitz Finding technical solutions to the problems you didn't know you had yet
08/19/2003 11:13 AM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86675 And a chunk of the spam is virus spam that's being sent through nasa.gov. Anyone here at nasa and can get their machines cleaned? > I'm being deluged with spam at the moment. The lists have blocked over 100 in > the last 20 minutes or so and my black hole account has done likewise. What the > hell is going on? Is it be nice to spammers day today? > > Michael Dinowitz > Finding technical solutions to the problems you didn't know you had yet
08/19/2003 11:14 AM
Author: Dan Phillips \(CFXHosting.com\) Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86676 I've gotten some reports from customers that they are getting the same message every 30 seconds and it seems to be a virus. All of my email accounts are getting Spam just as they normally would. I'm guessing that maybe the spammers are making up for extra time since the Blackout. Dan Phillips www.CFXHosting.com 1-866-239-4678 dphillips@cfxhosting.com Do you want complete ColdFusion Administrator access? RDS? Terminal Server?- CFX-Advanced VPS - http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm I'm being deluged with spam at the moment. The lists have blocked over 100 in the last 20 minutes or so and my black hole account has done likewise. What the hell is going on? Is it be nice to spammers day today? Michael Dinowitz Finding technical solutions to the problems you didn't know you had yet
08/19/2003 11:22 AM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86678 And the virus posters as well. I'm getting a lot of government 'true' senders, as well as others who I'd expect to have some real protection. My tools are showing me exactly who's sending what and I'm bouncing the messages back with warnings about them, but.... Looks like its time to rewrite the tools some more to add in a virus category and special processing for it. Till now, viruses are labeled as spam to be reported. A label of virus to be reported will be more exact. Of course, I can be prosecuted for posting up the sites that spam me and who I block, but that's another thread. :) ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 11:32 AM
Author: William Wheatley Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86680 where is it aganist the law to tell people who is spamming you?? > And the virus posters as well. I'm getting a lot of government 'true' senders, > as well as others who I'd expect to have some real protection. My tools are > showing me exactly who's sending what and I'm bouncing the messages back with > warnings about them, but.... > Looks like its time to rewrite the tools some more to add in a virus category > and special processing for it. Till now, viruses are labeled as spam to be > reported. A label of virus to be reported will be more exact. > Of course, I can be prosecuted for posting up the sites that spam me and who I ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 11:40 AM
Author: Doug White Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86683 According to the SANS and other lists that I participate in, there is a huge increase taking place.   Part of the reason is a ton of open proxy compromised systems ended up getting either taken off-line or fixed due to the Mblaster infection, and the spammers are scouring the entire net looking for vulnerable systems with which to install proxies and spew the spam.  It seems they are finding a number of candidates, and WindowsXP seems to be the most vulnerable system. But in the past 7 days, my spam traps have seen a 50 fold increase in spam spew. Mostly from open proxies in Brazil, China, Korea, and some in Japan. ====================================== Stop spam on your domain, use our gateway! For hosting solutions http://www.clickdoug.com ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772 ====================================== If you are not satisfied with my service, my job isn't done! | I'm being deluged with spam at the moment. The lists have blocked over 100 in | the last 20 minutes or so and my black hole account has done likewise. What the | hell is going on? Is it be nice to spammers day today? | | Michael Dinowitz | Finding technical solutions to the problems you didn't know you had yet | |
08/19/2003 11:40 AM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86684 Check out the thread titles "we're in trouble". my spam page, which posts the domains who have spammed me and who are blocked can cause a damage to the reputation of the companies involved as well as point out to spammers where an open relay may be. This falls under the discussion in that thread. ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 11:44 AM
Author: Jim Davis Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86686 Consider yourself (somewhat) lucky... I'm currently dealing with a bug that retrieves the same messages many, many times... including spam. I've gotten 7,000 messages in the last few hours.  ;^) But it does seem like a particularly heavy day - for viruses and well. I usually get two or three a week, and this morning Norton has already nabbed at least 10. Jim Davis > I'm being deluged with spam at the moment. The lists have blocked over 100 > in > the last 20 minutes or so and my black hole account has done likewise. > What the > hell is going on? Is it be nice to spammers day today? > > Michael Dinowitz > Finding technical solutions to the problems you didn't know you had yet
08/19/2003 11:47 AM
Author: Ben Doom Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86689 Hmm.  They probably used a metric antivirus on an english virus.  Remember, folks, Bugbear requires a 3/8" socket! --  Ben Doom     Programmer & General Lackey     Moonbow Software, Inc : -----Original Message----- : : Sent: Tuesday, August 19, 2003 11:11 AM : To: CF-Community : Subject: Re: The tide is high : : : And a chunk of the spam is virus spam that's being sent through : nasa.gov. Anyone : here at nasa and can get their machines cleaned? : : : > I'm being deluged with spam at the moment. The lists have : blocked over 100 in : > the last 20 minutes or so and my black hole account has done : likewise. What : the : > hell is going on? Is it be nice to spammers day today? : > : > Michael Dinowitz : > Finding technical solutions to the problems you didn't know you had yet : > : > :
08/19/2003 11:49 AM
Author: Kevin Graeme Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86691 Is that an email client bug perhaps? Sounds very similar to one that I know is in Outlook. -Kevin ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 11:58 AM
Author: Critz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86695 oi Doug!! we are getting nailed with this apparently... http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html -- ------------------------------------ Tuesday, August 19, 2003, 11:34:23 AM, you wrote: DW> According to the SANS and other lists that I participate in, there is a huge DW> increase taking place.   Part of the reason is a ton of open proxy compromised DW> systems ended up getting either taken off-line or fixed due to the Mblaster DW> infection, and the spammers are scouring the entire net looking for vulnerable DW> systems with which to install proxies and spew the spam.  It seems they are DW> finding a number of candidates, and WindowsXP seems to be the most vulnerable DW> system. DW> But in the past 7 days, my spam traps have seen a 50 fold increase in spam spew. DW> Mostly from open proxies in Brazil, China, Korea, and some in Japan. DW> ====================================== DW> Stop spam on your domain, use our gateway! DW> For hosting solutions http://www.clickdoug.com DW> ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772 DW> ====================================== DW> If you are not satisfied with my service, my job isn't done! DW> ----- Original Message ----- DW> From: "Michael Dinowitz" <mdinowit@houseoffusion.com> DW> To: "CF-Community" <cf-community@houseoffusion.com> DW> Sent: Tuesday, August 19, 2003 10:07 AM DW> Subject: The tide is high DW> | I'm being deluged with spam at the moment. The lists have blocked over 100 in DW> | the last 20 minutes or so and my black hole account has done likewise. What DW> the DW> | hell is going on? Is it be nice to spammers day today? DW> | DW> | Michael Dinowitz DW> | Finding technical solutions to the problems you didn't know you had yet DW> | DW> | DW>
08/19/2003 12:14 PM
Author: Jim Davis Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86700 I'm thinking it is on my side, although it coincided with my Host switching email servers.  That may just have triggered it tho (I don't see multiple messages on the server). But I do use Outlook... any KB references off the top of your head? Jim Davis ----- Excess quoted text cut - see Original Post for more ----- bug ----- Excess quoted text cut - see Original Post for more ----- well. > > I usually get two or three a week, and this morning Norton has already ----- Excess quoted text cut - see Original Post for more ----- over ----- Excess quoted text cut - see Original Post for more ----- likewise. ----- Excess quoted text cut - see Original Post for more ----- had ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 01:16 PM
Author: Kevin Graeme Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86703 I found one once, but I don't seem to have it bookmarked. I did find this though: http://www.slipstick.com/addins/mail.htm#dupes -Kevin ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 01:41 PM
Author: Kevin Graeme Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86705 Ah ha! Here it is: http://support.microsoft.com/default.aspx?scid=kb;en-us;292249 We too had this problem suddenly show up when we switched email servers. We're using Courier. From what I read in the Courier support forum (and I use the word "support" loosely since it's open source), it appears that Courier isn't as forgiving about MS's errors as some other email servers may be. -Kevin ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 01:44 PM
Author: William Wheatley Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86706 They would have a hard time proving anything because its all fact so don't sweat it > Check out the thread titles "we're in trouble". my spam page, which posts the > domains who have spammed me and who are blocked can cause a damage to the > reputation of the companies involved as well as point out to spammers where an ----- Excess quoted text cut - see Original Post for more ----- tools > > are > > > showing me exactly who's sending what and I'm bouncing the messages back ----- Excess quoted text cut - see Original Post for more ----- to be > > > reported. A label of virus to be reported will be more exact. > > > Of course, I can be prosecuted for posting up the sites that spam me and ----- Excess quoted text cut - see Original Post for more ----- same ----- Excess quoted text cut - see Original Post for more ----- that ----- Excess quoted text cut - see Original Post for more ----- over ----- Excess quoted text cut - see Original Post for more ----- yet ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 02:09 PM
Author: jon hall Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86709 I'm seeing this as well. My spam folder has 25 emails in the last 2.5 hours containing the subjects, Wicked Screensaver, Approved, Details, Your Application, and Thank You! All with the same content, different email addresses, but from the same ip address (156.80.190.78). While typing this I just received two from a different ip. I also got this message today... Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject "Re: Wicked screensaver" has been submitted to the moderator of the ETHICS list: Michael Blakenship <michael1@UGA.EDU>. Apparently some kind of bounce, but seeing as I did a virus scan two days ago and don't use Outlook I'm fairly sure I'm not infected. I'm scanning now to make sure though. Looks like another Klez... -- jon mailto:jonhall@ozline.net Tuesday, August 19, 2003, 11:10:58 AM, you wrote: DPCc> I've gotten some reports from customers that they are getting the same DPCc> message every 30 seconds and it seems to be a virus. All of my email DPCc> accounts are getting Spam just as they normally would. I'm guessing that DPCc> maybe the spammers are making up for extra time since the Blackout. DPCc> Dan Phillips DPCc> www.CFXHosting.com DPCc> 1-866-239-4678 DPCc> dphillips@cfxhosting.com DPCc> Do you want complete ColdFusion Administrator access? RDS? Terminal DPCc> Server?- CFX-Advanced VPS - DPCc> http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm DPCc> -----Original Message----- DPCc DPCc> Sent: Tuesday, August 19, 2003 11:07 AM DPCc> To: CF-Community DPCc> Subject: The tide is high DPCc> I'm being deluged with spam at the moment. The lists have blocked over DPCc> 100 in the last 20 minutes or so and my black hole account has done DPCc> likewise. What the hell is going on? Is it be nice to spammers day DPCc> today? DPCc> Michael Dinowitz DPCc> Finding technical solutions to the problems you didn't know you had yet DPCc>
08/19/2003 02:40 PM
Author: jon hall Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86715 Apparently it's Sobig.E http://news.com.com/2100-1002_3-5065494.html -- jon mailto:jonhall@ozline.net Tuesday, August 19, 2003, 2:07:02 PM, you wrote: jh> I'm seeing this as well. My spam folder has 25 emails in the last 2.5 jh> hours containing the subjects, Wicked Screensaver, Approved, Details, jh> Your Application, and Thank You! All with the same content, different jh> email addresses, but from the same ip address (156.80.190.78). While jh> typing this I just received two from a different ip. jh> I also got this message today... jh> Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject "Re: Wicked jh> screensaver" has been submitted to the moderator of the ETHICS list: Michael jh> Blakenship <michael1@UGA.EDU>. jh> Apparently some kind of bounce, but seeing as I did a virus scan two jh> days ago and don't use Outlook I'm fairly sure I'm not infected. I'm jh> scanning now to make sure though. Looks like another Klez...
08/19/2003 02:45 PM
Author: Dan Phillips \(CFXHosting.com\) Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86716 Sounds like a Virus that would only send viagra spam </cf_rimshot> Dan Phillips www.CFXHosting.com 1-866-239-4678 dphillips@cfxhosting.com Do you want complete ColdFusion Administrator access? RDS? Terminal Server?- CFX-Advanced VPS - http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm Apparently it's Sobig.E http://news.com.com/2100-1002_3-5065494.html -- jon mailto:jonhall@ozline.net Tuesday, August 19, 2003, 2:07:02 PM, you wrote: jh> I'm seeing this as well. My spam folder has 25 emails in the last jh> 2.5 hours containing the subjects, Wicked Screensaver, Approved, jh> Details, Your Application, and Thank You! All with the same content, jh> different email addresses, but from the same ip address jh> (156.80.190.78). While typing this I just received two from a jh> different ip. jh> I also got this message today... jh> Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject jh> "Re: Wicked screensaver" has been submitted to the moderator of the jh> ETHICS list: Michael Blakenship <michael1@UGA.EDU>. jh> Apparently some kind of bounce, but seeing as I did a virus scan two jh> days ago and don't use Outlook I'm fairly sure I'm not infected. I'm jh> scanning now to make sure though. Looks like another Klez...
08/19/2003 04:20 PM
Author: Sandy Clark Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86731 I've gotten a whole lot of bounced messages from people claiming I have a virus. But I don't have the virus. I've checked for the virus both through my anti-virus software and also manually using the info from Symantec.  In addition I have a firewall on my machine that alerts me whenever anything trys to come in or go out and has to be manually authorized. Somehow my name got onto the list and is now making its rounds.  But getting all these bounced messages is driving me crazy (especially since they are from domains where I have no contacts that I know of (yale.edu, deltacollege.edu, etc.).  Its weird. Sandy I'm seeing this as well. My spam folder has 25 emails in the last 2.5 hours containing the subjects, Wicked Screensaver, Approved, Details, Your Application, and Thank You! All with the same content, different email addresses, but from the same ip address (156.80.190.78). While typing this I just received two from a different ip. I also got this message today... Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject "Re: Wicked screensaver" has been submitted to the moderator of the ETHICS list: Michael Blakenship <michael1@UGA.EDU>. Apparently some kind of bounce, but seeing as I did a virus scan two days ago and don't use Outlook I'm fairly sure I'm not infected. I'm scanning now to make sure though. Looks like another Klez... -- jon mailto:jonhall@ozline.net Tuesday, August 19, 2003, 11:10:58 AM, you wrote: DPCc> I've gotten some reports from customers that they are getting the same DPCc> message every 30 seconds and it seems to be a virus. All of my email DPCc> accounts are getting Spam just as they normally would. I'm guessing that DPCc> maybe the spammers are making up for extra time since the Blackout. DPCc> Dan Phillips DPCc> www.CFXHosting.com DPCc> 1-866-239-4678 DPCc> dphillips@cfxhosting.com DPCc> Do you want complete ColdFusion Administrator access? RDS? Terminal DPCc> Server?- CFX-Advanced VPS - DPCc> http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm DPCc> -----Original Message----- DPCc DPCc> Sent: Tuesday, August 19, 2003 11:07 AM DPCc> To: CF-Community DPCc> Subject: The tide is high DPCc> I'm being deluged with spam at the moment. The lists have blocked over DPCc> 100 in the last 20 minutes or so and my black hole account has done DPCc> likewise. What the hell is going on? Is it be nice to spammers day DPCc> today? DPCc> Michael Dinowitz DPCc> Finding technical solutions to the problems you didn't know you had yet DPCc>
08/19/2003 04:27 PM
Author: Ben Doom Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86735 I'm guessing that someone with you in their contacts is infected.  The virus is sending as you instead of them, since that makes it less likely that someone will tell the victim he's infected. --  Ben Doom     Programmer & General Lackey     Moonbow Software, Inc : -----Original Message----- : : Sent: Tuesday, August 19, 2003 4:08 PM : To: CF-Community : Subject: RE: The tide is high : : : I've gotten a whole lot of bounced messages from people claiming I have a : virus. : : But I don't have the virus. I've checked for the virus both through my : anti-virus software and also manually using the info from Symantec.  In : addition I have a firewall on my machine that alerts me whenever anything : trys to come in or go out and has to be manually authorized. : : Somehow my name got onto the list and is now making its rounds. : But getting : all these bounced messages is driving me crazy (especially since they are : from domains where I have no contacts that I know of (yale.edu, : deltacollege.edu, etc.).  Its weird. : : Sandy : : -----Original Message----- : : Sent: Tuesday, August 19, 2003 2:07 PM : To: CF-Community : Subject: Re: The tide is high : : : I'm seeing this as well. My spam folder has 25 emails in the last 2.5 : hours containing the subjects, Wicked Screensaver, Approved, Details, : Your Application, and Thank You! All with the same content, different : email addresses, but from the same ip address (156.80.190.78). While : typing this I just received two from a different ip. : : I also got this message today... : : Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject : "Re: Wicked : screensaver" has been submitted to the moderator of the ETHICS : list: Michael : Blakenship <michael1@UGA.EDU>. : : Apparently some kind of bounce, but seeing as I did a virus scan two : days ago and don't use Outlook I'm fairly sure I'm not infected. I'm : scanning now to make sure though. Looks like another Klez... : : -- :  jon :  mailto:jonhall@ozline.net : : Tuesday, August 19, 2003, 11:10:58 AM, you wrote: : DPCc> I've gotten some reports from customers that they are : getting the same : DPCc> message every 30 seconds and it seems to be a virus. All of my email : DPCc> accounts are getting Spam just as they normally would. I'm guessing : that : DPCc> maybe the spammers are making up for extra time since the Blackout. : : DPCc> Dan Phillips : DPCc> www.CFXHosting.com : DPCc> 1-866-239-4678 : DPCc> dphillips@cfxhosting.com : : DPCc> Do you want complete ColdFusion Administrator access? RDS? Terminal : DPCc> Server?- CFX-Advanced VPS - : DPCc> http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm : : DPCc> -----Original Message----- : DPCc : DPCc> Sent: Tuesday, August 19, 2003 11:07 AM : DPCc> To: CF-Community : DPCc> Subject: The tide is high : : : DPCc> I'm being deluged with spam at the moment. The lists have : blocked over : DPCc> 100 in the last 20 minutes or so and my black hole account has done : DPCc> likewise. What the hell is going on? Is it be nice to spammers day : DPCc> today? : : DPCc> Michael Dinowitz : DPCc> Finding technical solutions to the problems you didn't know you had : yet : : : DPCc> : :
08/19/2003 04:28 PM
Author: Mike Townend Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86736 We are having the same probs here... Receiving bounces which we never sent with "Standard virus subjects" containing pif attachments... We *know* we never sent them as these email address's only ever appear on the front of our site... Looks like theres a harvester out there collecting and sending from those addresses :( I've gotten a whole lot of bounced messages from people claiming I have a virus. But I don't have the virus. I've checked for the virus both through my anti-virus software and also manually using the info from Symantec.  In addition I have a firewall on my machine that alerts me whenever anything trys to come in or go out and has to be manually authorized. Somehow my name got onto the list and is now making its rounds.  But getting all these bounced messages is driving me crazy (especially since they are from domains where I have no contacts that I know of (yale.edu, deltacollege.edu, etc.).  Its weird. Sandy I'm seeing this as well. My spam folder has 25 emails in the last 2.5 hours containing the subjects, Wicked Screensaver, Approved, Details, Your Application, and Thank You! All with the same content, different email addresses, but from the same ip address (156.80.190.78). While typing this I just received two from a different ip. I also got this message today... Your message dated Tue, 19 Aug 2003 12:10:06 --0400 with subject "Re: Wicked screensaver" has been submitted to the moderator of the ETHICS list: Michael Blakenship <michael1@UGA.EDU>. Apparently some kind of bounce, but seeing as I did a virus scan two days ago and don't use Outlook I'm fairly sure I'm not infected. I'm scanning now to make sure though. Looks like another Klez... -- jon mailto:jonhall@ozline.net Tuesday, August 19, 2003, 11:10:58 AM, you wrote: DPCc> I've gotten some reports from customers that they are getting the DPCc> same message every 30 seconds and it seems to be a virus. All of DPCc> my email accounts are getting Spam just as they normally would. DPCc> I'm guessing that DPCc> maybe the spammers are making up for extra time since the DPCc> Blackout. DPCc> Dan Phillips DPCc> www.CFXHosting.com DPCc> 1-866-239-4678 DPCc> dphillips@cfxhosting.com DPCc> Do you want complete ColdFusion Administrator access? RDS? DPCc> Terminal DPCc> Server?- CFX-Advanced VPS - DPCc> http://www.cfxhosting.com/Plans/s_cfxadvancedVPS.cfm DPCc> -----Original Message----- DPCc DPCc> Sent: Tuesday, August 19, 2003 11:07 AM DPCc> To: CF-Community DPCc> Subject: The tide is high DPCc> I'm being deluged with spam at the moment. The lists have blocked over DPCc> 100 in the last 20 minutes or so and my black hole account has done DPCc> likewise. What the hell is going on? Is it be nice to spammers day DPCc> today? DPCc> Michael Dinowitz DPCc> Finding technical solutions to the problems you didn't know you had yet DPCc>
08/19/2003 04:40 PM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86738 In the case in question the person was reporting fact as well. Truth doesn't seem to matter here, just damage to reputation. Go.com can come after me for claiming (truthfully or not) that they pass spam. comcast can have me arrested for claiming that they are one of the biggest spam networks that affect my systems. All true, but that doesn't save me from being some guys wife in prison. ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 05:05 PM
Author: Ian Skinner Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86742 Arrested?  I could see a lot of trouble, but surly this would be a civil case.  They could sue the pants off you and send your finances back to the stone age making sure you never make a penny for yourself again. Doubly bad, since they can do this whether they win or not by just making the cost of Defending yourself too high.  But Jail?  Can someone be jailed for losing a civil case? -------------- Ian Skinner Web Programmer BloodSource Sacramento, CA In the case in question the person was reporting fact as well. Truth doesn't seem to matter here, just damage to reputation. Go.com can come after me for claiming (truthfully or not) that they pass spam. comcast can have me arrested for claiming that they are one of the biggest spam networks that affect my systems. All true, but that doesn't save me from being some guys wife in prison. > They would have a hard time proving anything because its all fact so don't > sweat it > > Check out the thread titles "we're in trouble". my spam page, which posts > the > > domains who have spammed me and who are blocked can cause a damage to the ----- Excess quoted text cut - see Original Post for more ----- 'true' ----- Excess quoted text cut - see Original Post for more ----- email > > > > > accounts are getting Spam just as they normally would. I'm guessing > that > > > > > maybe the spammers are making up for extra time since the Blackout. ----- Excess quoted text cut - see Original Post for more ----- Terminal ----- Excess quoted text cut - see Original Post for more ----- done ----- Excess quoted text cut - see Original Post for more ----- had ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 05:12 PM
Author: Kevin Graeme Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86743 No, no. You can't be some guy's wife in prison. It's a Federal law, and you know that Bush doesn't permit gay marraige. ;-) -Kevin > In the case in question the person was reporting fact as well. Truth doesn't > seem to matter here, just damage to reputation. Go.com can come after me for > claiming (truthfully or not) that they pass spam. comcast can have me arrested > for claiming that they are one of the biggest spam networks that affect my > systems. All true, but that doesn't save me from being some guys wife in prison. > > > They would have a hard time proving anything because its all fact so don't > > sweat it > > > Check out the thread titles "we're in trouble". my spam page, which posts > > the > > > domains who have spammed me and who are blocked can cause a damage to the ----- Excess quoted text cut - see Original Post for more ----- 'true' ----- Excess quoted text cut - see Original Post for more ----- messages ----- Excess quoted text cut - see Original Post for more ----- virus ----- Excess quoted text cut - see Original Post for more ----- spam ----- Excess quoted text cut - see Original Post for more ----- me ----- Excess quoted text cut - see Original Post for more ----- the ----- Excess quoted text cut - see Original Post for more ----- email > > > > > > accounts are getting Spam just as they normally would. I'm guessing ----- Excess quoted text cut - see Original Post for more ----- Blackout. ----- Excess quoted text cut - see Original Post for more ----- Terminal ----- Excess quoted text cut - see Original Post for more ----- blocked ----- Excess quoted text cut - see Original Post for more ----- done > > > > > > likewise. What the hell is going on? Is it be nice to spammers day ----- Excess quoted text cut - see Original Post for more ----- had ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 05:21 PM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86745 Read the story to see how this guy, who was doing something that might fall under civil as well got nailed as federal. http://www.securityfocus.com/columnists/179 ----- Excess quoted text cut - see Original Post for more -----
08/19/2003 06:04 PM
Author: Larry C. Lyons Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86747 >Arrested?  I could see a lot of trouble, but surly this would be a civil >case. If someone busted me over a good deed I'd be a bit surly too. >They could sue the pants off you and send your finances back to the >stone age making sure you never make a penny for yourself again. Doubly bad, >since they can do this whether they win or not by just making the cost of >Defending yourself too high.  But Jail?  Can someone be jailed for losing a >civil case? > I did hear that Ashcroft and his friends in the Shrub administration have been wanted to bring back debtors prison. larry -- Larry C. Lyons ======================================================== Life is Complex. It has both real and imaginary parts. ======================================================== Chaos, Panic and Disorder. My work here is done.
08/19/2003 06:58 PM
Author: Michael Dinowitz Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86751 > Looks like theres a harvester out there collecting and sending from those > addresses :( Last night the server was heavily (and I mean heavily) hit by a bot from hinet.net. It failed due to poor programming on the bots side and security on mine, but I'm betting that it was scooping email addresses off of web pages (or at least trying). If others check their logs, they may see the same in the last 24 hours or so.
08/19/2003 08:32 PM
Author: Sandy Clark Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86754 I just did a search through my logs for hinet.net and found them as well. Looks like they got to me from my entry last week in Sean Corfield's blog. > Looks like theres a harvester out there collecting and sending from those > addresses :( Last night the server was heavily (and I mean heavily) hit by a bot from hinet.net. It failed due to poor programming on the bots side and security on mine, but I'm betting that it was scooping email addresses off of web pages (or at least trying). If others check their logs, they may see the same in the last 24 hours or so.
08/20/2003 12:18 AM
Author: Tim Heald Short Link: http://www.houseoffusion.com/groups/cf-community/thread.cfm/threadid:9447#86756 I just started getting stacks of sobig alerts from speakeasy. Looks like we made a list somewhere :) Goodies Tim I just did a search through my logs for hinet.net and found them as well. Looks like they got to me from my entry last week in Sean Corfield's blog. > Looks like theres a harvester out there collecting and sending from those > addresses :( Last night the server was heavily (and I mean heavily) hit by a bot from hinet.net. It failed due to poor programming on the bots side and security on mine, but I'm betting that it was scooping email addresses off of web pages (or at least trying). If others check their logs, they may see the same in the last 24 hours or so.
<< Previous Thread Today's Threads Next Thread >>

Search cf-community

May 26, 2013

<<   <   Today   >   >>
Su Mo Tu We Th Fr Sa
       1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31   

Designer, Developer and mobile workflow conference