Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
August 30, 2014, 12:22:27 AM

Pages: [1] 2   Go Down
  Print  
Author Topic: Sudden Huge Increase in Junk Email  (Read 4045 times)
StarDust39
Trekkie
**
Offline Offline

Posts: 14


« on: February 26, 2014, 11:21:25 AM »

Just recently, about the last month or so, I have seen a major increase in the amount of junk email I am receiving to my Lunarpages email account on Outlook. I am getting 75-100 junk emails per day and about 1/3 of them bypass the junk filters and come directly to my Inbox. Before this flood, I received very few junk emails in my Junk email file and almost none to my Inbox. Many of these junk emails have the same format (see attachment - the second attachment shows the large number of junk emails).

Has anyone else seen this kind of increase or have any ideas about what might be causing my problem?

Thanks,
David


* 2014-02-24SpamList.JPG (694.88 KB, 1280x960 - viewed 110 times.)
Logged
StarDust39
Trekkie
**
Offline Offline

Posts: 14


« Reply #1 on: February 26, 2014, 11:24:25 AM »

Attached is the typical format of many of the junk mails mentioned above.


* 2014-02-24SpamType.JPG (968.73 KB, 1632x1224 - viewed 116 times.)
Logged
dwaynnyt
Intergalactic Cowboy
*****
Offline Offline

Posts: 63


« Reply #2 on: March 16, 2014, 08:16:14 AM »

It's not quite clear on the screen shot but are those emails coming from a single domain? You can probably just block it.
Logged
cs491
Newbie
*
Offline Offline

Posts: 3


« Reply #3 on: March 24, 2014, 05:09:54 AM »

Just recently, about the last month or so, I have seen a major increase in the amount of junk email I am receiving to my Lunarpages email account on Outlook. I am getting 75-100 junk emails per day and about 1/3 of them bypass the junk filters and come directly to my Inbox. Before this flood, I received very few junk emails in my Junk email file and almost none to my Inbox. Many of these junk emails have the same format (see attachment - the second attachment shows the large number of junk emails).

Has anyone else seen this kind of increase or have any ideas about what might be causing my problem?

Thanks,
David

You're not alone. The same thing has happened to me. I've been using Lunarpages for at least ten years and never really had a problem with junk mail. All of a sudden, I'm now getting 60 to 100 junk emails a day. Fortunately most of them show up on the "blocked url" database sites, so I made my filters more aggressive in that respect. At the moment, the majority of them come from "eu" and "us" domains with just a few "net" and "com" domains mixed in.. Of course the complete email address changes with every message.

Herb
Logged
jim_h
Spacescooter Operator
*****
Offline Offline

Posts: 37


« Reply #4 on: March 26, 2014, 07:34:42 AM »

I've also had a huge increase over the last week or so and today, it's totally out of control.   If Lunarpages can't do something soon I'll have to close the account and find another ISP.  Really don't want to do that, but it's unmanageable now.
Logged
Pete
Alien Anomaly
Senior Moderator
Professor in Nanotechnology
*****
Offline Offline

Posts: 4249



WWW
« Reply #5 on: March 26, 2014, 10:00:37 AM »

Sorry to hear your having this problem. The thing is no matter who your websites hosted with,  if your website email address is getting spam, changing hosts wont stop it.
Spam sent to fred.com hosted by xyz will arrive just as it will arrive if fred.com is hosted by abc !!

I was advised many years ago to never "unsubscribe" from junk mails I received as it can add my email address to other mailing lists.
Also often nowadays you sign up to deals and offers (along with social networks) and that information is (potentially) then sold or shared with other 'friendly' related companies.
Logged

x-visions.com


As I'm always saying.. (But nobody listens)
"Take a step back.. Take a deep breath and see if there a simple solution there, thats hiding" lol  Very HappyLunarpages Web Hosting   Lunarpages Forums  Lunarpages Affiliate Program
jim_h
Spacescooter Operator
*****
Offline Offline

Posts: 37


« Reply #6 on: March 26, 2014, 11:08:33 AM »

Sorry to hear your having this problem. The thing is no matter who your websites hosted with,  if your website email address is getting spam, changing hosts wont stop it


That's true but some ISPs are better than others.  I get absolutely zero spam on my Windows Live email address.  So far today I've gotten at least 60 from Lunarpages.  I can't keep deleting them every 5 minutes.

Logged
MrPhil
Senior Moderator
Berserker Poster
*****
Offline Offline

Posts: 5867



« Reply #7 on: March 26, 2014, 11:58:04 AM »

One of my site-related feedback email addresses evidently was being passed around among spammers, and I was suddenly getting 40 or 50 spams a day on it. My solution was to deep-six that email account and set up a new one with a slightly different user name. As only people going through my website interface should be sending emails to that address, it's no pain to anyone legitimate to have a dead (old) address. I would imagine it's still causing some traffic inside LP, as they have to handle all those emails before they get to me (and they're blackholed).

It was only one email account; the others haven't (yet...) been hit. It may not be possible for you to kill that account, if legitimate users have it as a contact point. IIRC, Spam Assassin was marking almost all these emails as spam, but I didn't have anything enabled to actually delete them automatically. It would have been nice if LP could have choked off this spam somewhere higher up. I just didn't have the time and energy to pursue this any further, and took a fairly quick way out.
Logged

Visit My Site

E-mail Me
  
-= From the ashes shall rise a sooty tern =-
jim_h
Spacescooter Operator
*****
Offline Offline

Posts: 37


« Reply #8 on: March 26, 2014, 06:08:12 PM »

I've probably gotten 100 spams today.  As recently as a week ago, I got a handful per day.  Something's been shut off or become broken at LP - the default spam filtering isn't doing anything, because the specified action  is to move spam to  the 'junk' folder, and nothing is showing up there - it's all going right on through.

I sent in a support ticket early this afternoon, but no response yet.   If they say it's my problem - i.e. I'd have to spend time creating custom rules, blocking domains etc. - that means I drop LP.  I'm not using my domain for anything but email these days and can't spend time policing it.

UPDATE:  Adding a filter for *.eu cut it way down.   It looks to me like the spam detection is just ignoring anything from that domain - but I really don't want to just block it.

No response to my support ticket in 3 days. Spam is starting to increase again.

« Last Edit: March 30, 2014, 03:34:54 PM by jim_h » Logged
rickei
Intergalactic Cowboy
*****
Offline Offline

Posts: 52


« Reply #9 on: April 01, 2014, 04:23:58 PM »

I've tested it and something is definitely up.
I'm getting spam from newly created email accounts that have never been used to send any mail and have never been published. I have accounts on 8 different severs, and it's happening on at least 5 of them.
Logged
tgibbons
Intergalactic Superstar
*****
Offline Offline

Posts: 130


« Reply #10 on: April 03, 2014, 10:54:56 AM »

Twice in the past two weeks, Spamassassin has stopped working on our server (nova).  Both times, the Spamassassin mail headers were blank (this is how you tell Spamassassin isn't running).  Both times I opened a support ticket, admistrators restarted Spamassassin, and everything went back to normal.

Hopefully, it was just a couple of glitches that happened close together. Although seeing this thread, maybe something has changed in the general server configurations that is causing Spamassassin to crash periodically.
Logged

Tom
jim_h
Spacescooter Operator
*****
Offline Offline

Posts: 37


« Reply #11 on: April 04, 2014, 09:10:56 AM »

After about 5 days someone responded to my support ticket and said it would be forwarded to someone who might actually be able to do something.
That was 2 days ago.  Spam still increasing.

I guess the spam filter has stopped filtering spam and is now sucking up support tickets.

I've stopped caring, now getting ready to drop LP and forward the domain somewhere else. .
Logged
cs491
Newbie
*
Offline Offline

Posts: 3


« Reply #12 on: April 04, 2014, 05:32:33 PM »

SpamAssassin has started disappearing at certain times of the day on my server also. (I'm on Scorpio) I have filters that are based on the X-Spam-Report: header, that are obviously worthless when SpamAssassin stops working. I'm lucky I'm not using my email address for business, so I can use a whitelist for my friends and pretty much dump everything else.
Logged
rickei
Intergalactic Cowboy
*****
Offline Offline

Posts: 52


« Reply #13 on: April 08, 2014, 06:19:45 AM »

I have an account on Scorpio too, and the problem seems to be that the server is being blocked from accessing the URIBL due to either a misconfiguration on the part of LP, or because of an overload.

Check your email headers and look for the following error.

URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information.

so essentially, even when spamassassin is running, it is pretty much useless since it can't access the spam registry.
Logged
cs491
Newbie
*
Offline Offline

Posts: 3


« Reply #14 on: April 08, 2014, 08:51:44 PM »

When SpamAssassin is running it's true that the URIBL_BLOCKED rule is not working but the other rules are. Here is an partial example:

X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=7.5
X-Spam-Score: 75
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "scorpio.lunarpages.com", has ........

pts rule name              description
---- ---------------------- --------------------------------------------------
0.0 URIBL_DBL_REDIR       Contains a URL listed in the DBL as a spammed redirector domain
                                               [URIs: bit.ly]
0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                                              See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information.
                                              [URIs: greenfieldreporter.com]
1.2 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                                              [URIs: nugifyanglosnsc.us]
2.5 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                                              [URIs: nugifyanglosnsc.us]



When SpamAssassin really stops working I only get this:

X-Spam-Status: No, score=
X-Spam-Score:
X-Spam-Bar:
X-Ham-Report:
X-Spam-Flag: NO

I opened a support ticket yesterday and they restarted SpamAssassin. At the moment it's still working. Who knows for how long.
Logged
Pages: [1] 2   Go Up
  Print  
 
Jump to: