Am 16.06.2011 17:37, schrieb Michelle Konzack: > Hello *, > > since some days my servers are hit by 50.000-80.000 Spams a day and for > some minutes they have spamed today 18 accounts out of 98.000 with MORE then > 100.000 spams. > > All spams coming from the same network: > > xxx.root.static.coolserver.info > xxx.root.static.starsweet.info
got none of them on any server so speculate youre special targeted > > where xxx change every time and the servers IP too (they resolv) > > In the body of the messages I found those domains: > > advocatebuying.info aidpurchase.info encouragebuying.info > ensurepurchase.info guidebuying.info motivatebuying.info > providebuying.info purchaseadvocate.info purchaseaid.info > purchaseassist.info purchasecoach.info purchaseguide.info > purchasesimplify.info purchasesupport.info simplifybuying.info > supportbuying.info techsweet.info topsweet.info > tradesweet.info travelsweet.info videosweet.info > visionsweet.info volunteerbuying.info websweet.info > yousweet.info > > maybe there are some more, but these are those which I was able to grep. > However, I have tried to train Spamassassin but it give only a score of > 2-4. > > Does someone know more about this crap? > > Thanks, Greetings and nice Day/Evening > Michelle Konzack > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria