Jump to content

Spam emails from phpvms.net


Tom

Recommended Posts

I have just (15 minutes ago) received an email from no-reply@phpvms.net under the display name tcqwyt@vrrcfy.com.

It seems totally random to me, see quote:

EF4pil  <a href="http://noucsnerqviz.com/">noucsnerqviz</a>, btvdggyonhee, [link=http://ndracjzaldow.com/]ndracjzaldow[/link], http://tzuqwbuwkgrl.com/

Any ideas what this is about? :s

Link to comment
Share on other sites

  • Administrators

And now another from "pkjnjw@jxsbds.com" (no-reply@phpvms.net)

Same sort of random nothingness.

Edit: And another :|

Really annoying. Is your user info secure here?

Edit: Oh guess what?

That's one every 3 mins ish now.

It should be secure but I don't know about SMF, could be a security hole. I'm trying to move off of SMF onto something else (maybe invisionboard), but have to pay for it first.

I shut off sendmail on my server for now, hopefully that should stop anything from going out until I can see what's going on

Link to comment
Share on other sites

  • Moderators

Look, when you run your own servers it can get a bit complicated, so what you got spam, its not the end of the world.

The hole would seem to be with SMF because i used a different email for the bug tracking site and no spam on that one.

Delivered-To:XXXX

Received: by 10.223.117.12 with SMTP id o12cs292065faq;

        Wed, 17 Feb 2010 07:07:52 -0800 (PST)

Received: by 10.91.19.17 with SMTP id w17mr2574334agi.54.1266419265456;

        Wed, 17 Feb 2010 07:07:45 -0800 (PST)

Return-Path: <>

Received: from mail.uk.loomis.com (ukmailgw01.loomis.com [212.240.255.211])

        by mx.google.com with ESMTP id 8si4042134gxk.46.2010.02.17.07.07.44;

        Wed, 17 Feb 2010 07:07:45 -0800 (PST)

Received-SPF: pass (google.com: domain of mail.uk.loomis.com designates 212.240.255.211 as permitted sender) client-ip=212.240.255.211;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of mail.uk.loomis.com designates 212.240.255.211 as permitted sender) smtp.mail=

Received: from domino2.chsuk.com ([192.168.200.21])

by mail.uk.loomis.com (8.14.1/8.14.1) with ESMTP id o1HEpdKf004419

for <XXXX>; Wed, 17 Feb 2010 14:51:39 GMT

Received: from mail.uk.loomis.com ([192.168.200.27])

          by domino2.chsuk.com (Lotus Domino Release 7.0.2)

          with ESMTP id 2010021715062643-51277 ;

          Wed, 17 Feb 2010 15:06:26 +0000

Received: from mail.nsslive.net (nsslive.net [72.14.190.114])

by mail.uk.loomis.com (8.14.1/8.14.1) with ESMTP id o1HEpOCg003502

for XXXX; Wed, 17 Feb 2010 14:51:25 GMT

Received: by mail.nsslive.net (Postfix, from userid 33)

id 95A3BC1F7; Wed, 17 Feb 2010 10:07:24 -0500 (EST)

To: XXXX

Subject: jkJLeclRfyNtENG

From: "cwhaie@bghslq.com" <no-reply@phpvms.net>

Reply-To: <cwhaie@bghslq.com>

Date: Wed, 17 Feb 2010 15:07:24 -0000

X-Mailer: SMF

Mime-Version: 1.0

Message-Id: <20100217150724.95A3BC1F7@mail.nsslive.net>

X-MIMETrack: Itemize by SMTP Server on UkDs2/SERVERS/UK/CHS(Release 7.0.2|September 26, 2006) at

17/02/2010 15:06:26,

Serialize by Router on UkDs2/SERVERS/UK/CHS(Release 7.0.2|September 26, 2006) at

17/02/2010 15:06:28,

Serialize complete at 17/02/2010 15:06:28

X-MailFwdBy: CN=Mark Grant/OU=TECH/OU=UK/O=CHS

Content-Transfer-Encoding: 7bit

Content-Type: multipart/alternative; boundary="SMF-ac5fb1a967b00ffd79db941d15c2b765"

X-EsetId: 5AD61B282C78E46945D01B7D212BA0

Link to comment
Share on other sites

well i got those e-mails before. And i'm not sure what your trying to do. But i'm blocking emails from phpvms until you get this fix. I want to keep my e-mails clean.

The emails stopped not long after the problem was reported for me... I just wasn't here to say so.

The forums have been switched to IP Board as the no-reply email was only used for the forums so there was a suspected security problem. Should all be fine now I haven't had anything.

Link to comment
Share on other sites

  • Moderators

The emails stopped not long after the problem was reported for me... I just wasn't here to say so.

The forums have been switched to IP Board as the no-reply email was only used for the forums so there was a suspected security problem. Should all be fine now I haven't had anything.

Yeah but i should block it for a while. Till i get nothing from them for 7 days. It's my server tech. recomacation

My E-mail server was so full because of the emails from phpvms and it botches my e-mail server space. So just in case till i get nothing from them for 7 days. And i will un-block them.

Link to comment
Share on other sites

  • Moderators

Well those should hopefully be taken care of now. I didn't realize how many security holes SMF2 had. They've also pretty much stopped development, and the whole project is a mess now.

Yeah i seen that. Could been ceased for a reason.

Link to comment
Share on other sites

  • Administrators

SMF was a pretty bad quality board anyway, phpBB is the way forward for free boards.

vBulletin/IPboard for paid boards.

SMF has an awesome plugin/addon system, way ahead of phpBB there. Too bad development has nearly stopped on SMF. I was never really a fan of phpBB. vBulletin has really fallen behind too, it used to be a leader in forums

Link to comment
Share on other sites

I've used phpBB for years now. The only issue I ever had was their security in 2.x really sucked. Hopefully V3 is much better. I hate V3 and no longer code any mods for phpBB or integrate any, but I still use it as a board. And I have not been around to check the email issue from here. I suppose it's been a week or so since I been on here. My last visit was during the move I suppose.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...