[Mailman-Users] Spam - from where?

Lindsay Haisley fmouse-mailman at fmp.com
Wed Jun 9 00:53:39 CEST 2010


I just checked my mail logs and find a very large number of attempted
deliveries from the list to various users @gamblingplanet.org.  e.g.,

Jun  8 17:27:52 kali courierd: started,id=00000000001B562E.000000004C0E7E65.00004AF9,from=<cyberpluckers-bounces+playwrightcl=gamblingplanet.org at autoharp.org>,module=esmtp,host=gamblingplanet.org,addr=<playwrightCL at gamblingplanet.org>
Jun  8 17:28:52 kali courieresmtp: id=00000000001B562E.000000004C0E7E65.00004AF9,from=<cyberpluckers-bounces+playwrightcl=gamblingplanet.org at autoharp.org>,addr=<playwrightCL at gamblingplanet.org>: Connection timed out
Jun  8 17:28:52 kali courieresmtp: id=00000000001B562E.000000004C0E7E65.00004AF9,from=<cyberpluckers-bounces+playwrightcl=gamblingplanet.org at autoharp.org>,addr=<playwrightCL at gamblingplanet.org>,status: deferred

There are no addresses @gamblingplanet.org on the cyberpluckers list!
Has the list server been hacked?  What could be going on here?  I'm not
seeing any incoming probes which would generate a list DSN or NDR.

-- 
Lindsay Haisley       |  "We are all broken toasters, but we still
FMP Computer Services |      manage to make toast"
512-259-1190          |
http://www.fmp.com    |          - Cheryl Dehut




More information about the Mailman-Users mailing list