Please help with this kind of SPAM !

YALDesign

Member
Dec 10, 2012
9
0
1
cPanel Access Level
Root Administrator
Hi all, I appeal to you because you are the last hope for solving this problem. For a while my clients including myself. receive such emails ex : [email protected] from [email protected]. And so my clients receive hundreds of emails daily [email protected] send to [email protected], but this email user is not created on the server. I worked SpamAssain module but still get hundreds of e-mails of this kind!

Code:
2012-12-09 03:54:42 SMTP connection from [190.80.244.111]:50914 (TCP/IP connection count = 1)
2012-12-09 03:54:42 no IP address found for host 111.244.80.190.m.sta.codetel.net.do (during SMTP connection from [190.80.244.111]:50914)
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 F=<[email protected]> rejected RCPT <[B][email protected]>: No Such User Here"[/B]
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Detected session with all messages failed"
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Increment slow_fail_block Ratelimit - (speedtouch.lan) [190.80.244.111]:50914 because of all messages failed"
2012-12-09 03:54:43 SMTP connection from (speedtouch.lan) [190.80.244.111]:50914 closed by QUIT
2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13444 (TCP/IP connection count = 1)
2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13476 (TCP/IP connection count = 2)

2012-12-10 15:13:29 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15696 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:32 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15726 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:33 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15763 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:59 H=([109.100.51.133]) [109.100.51.133]:24626 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:54 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
This user [email protected] is not on my server ! And like that hundred of [email protected]domain.com
If you need more information from my server tell me and i will paste !
If you are kind and know what to do please help me !
 
Last edited: