The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Please help with this kind of SPAM !

Discussion in 'E-mail Discussions' started by YALDesign, Dec 10, 2012.

  1. YALDesign

    YALDesign Member

    Joined:
    Dec 10, 2012
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi all, I appeal to you because you are the last hope for solving this problem. For a while my clients including myself. receive such emails ex : Office@mydomain.com from office@mydomain.com. And so my clients receive hundreds of emails daily anything@clientdomain.com send to anything@clientdomain.com, but this email user is not created on the server. I worked SpamAssain module but still get hundreds of e-mails of this kind!

    Code:
    2012-12-09 03:54:42 SMTP connection from [190.80.244.111]:50914 (TCP/IP connection count = 1)
    2012-12-09 03:54:42 no IP address found for host 111.244.80.190.m.sta.codetel.net.do (during SMTP connection from [190.80.244.111]:50914)
    2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 F=<arenatx@gmail.com> rejected RCPT <[B]remiro@mydomain.com>: No Such User Here"[/B]
    2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Detected session with all messages failed"
    2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Increment slow_fail_block Ratelimit - (speedtouch.lan) [190.80.244.111]:50914 because of all messages failed"
    2012-12-09 03:54:43 SMTP connection from (speedtouch.lan) [190.80.244.111]:50914 closed by QUIT
    2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13444 (TCP/IP connection count = 1)
    2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13476 (TCP/IP connection count = 2)
    
    2012-12-10 15:13:29 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15696 rejected MAIL <ijsselmeery01@glgmc.org>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
    2012-12-10 15:13:32 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15726 rejected MAIL <fifthtx5@bernina.co.il>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
    2012-12-10 15:13:33 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15763 rejected MAIL <fosteredj@hendrickauto.com>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
    2012-12-10 15:13:59 H=([109.100.51.133]) [109.100.51.133]:24626 F=<laureatedhwj7@iztzg.hr> rejected RCPT <miki@yal.ro>: No Such User Here"
    2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<rotesx533@iztzg.hr> rejected RCPT <administrator@yal.ro>: No Such User Here"
    2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<rotesx533@iztzg.hr> rejected RCPT <ioan@yal.ro>: No Such User Here"
    2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<rotesx533@iztzg.hr> rejected RCPT <gelem@yal.ro>: No Such User Here"
    2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<rotesx533@iztzg.hr> rejected RCPT <user@yal.ro>: No Such User Here"
    2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<rotesx533@iztzg.hr> rejected RCPT <lenovo@yal.ro>: No Such User Here"
    2012-12-10 15:21:54 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<urbanizationp0@uky.edu> rejected RCPT <funmha-biuyi@yal.ro>: No Such User Here"
    This user remiro@domain.com is not on my server ! And like that hundred of anyuser@mydomain.com
    If you need more information from my server tell me and i will paste !
    If you are kind and know what to do please help me !
     
    #1 YALDesign, Dec 10, 2012
    Last edited: Dec 10, 2012
  2. albatroz

    albatroz Well-Known Member

    Joined:
    Mar 6, 2003
    Messages:
    258
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Virtual Orbis / Peru
    cPanel Access Level:
    Root Administrator
    Hello,
    I seems like we are in the same boat, as I have a similar problem.
    In case anybody can help me I am attaching an extract of my exim log file here
     
    #2 albatroz, Dec 10, 2012
    Last edited by a moderator: Dec 10, 2012
  3. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,451
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Link removed. No need to post that much information on these forums.
     
  4. dreas

    dreas Active Member

    Joined:
    Nov 19, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Amsterdam, The Netherlands
    These appear to be "normal" spam connections trying to find valid email users in your domains? What's the exact issue it is causing?
     
  5. YALDesign

    YALDesign Member

    Joined:
    Dec 10, 2012
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Nobody knows the problem i think !
     
  6. dalem

    dalem Well-Known Member
    PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,577
    Likes Received:
    40
    Trophy Points:
    48
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    As Infopro stated its not a SPAM problem it just your SMTP server rejecting email
     
  7. YALDesign

    YALDesign Member

    Joined:
    Dec 10, 2012
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    And what i should do to solve that problem ?
     
  8. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,279
    Likes Received:
    36
    Trophy Points:
    48
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    Nothing. It's doing what you want it to do, which is to reject mail for users that do not exist.

    M
     
Loading...

Share This Page