Spam emails from phpvms.net

[Tom]

I have just (15 minutes ago) received an email from no-reply@phpvms.net under the display name tcqwyt@vrrcfy.com.

It seems totally random to me, see quote:

EF4pil  <a href="http://noucsnerqviz.com/">noucsnerqviz</a>, btvdggyonhee, [link=http://ndracjzaldow.com/]ndracjzaldow[/link], http://tzuqwbuwkgrl.com/

Any ideas what this is about? :s

[Tom]

And now another from "pkjnjw@jxsbds.com" (no-reply@phpvms.net)

Same sort of random nothingness.

Edit: And another :|

Really annoying. Is your user info secure here?

Edit: Oh guess what?

That's one every 3 mins ish now.

[mark1million]

Yeh i have had some as well

[TennShadow]

I got 3 of them as well.

[joeri]

curently at 15

[Nabeel]

Can you paste me full headers?

[Nabeel]

And now another from "pkjnjw@jxsbds.com" (no-reply@phpvms.net)

Same sort of random nothingness.

Edit: And another :|

Really annoying. Is your user info secure here?

Edit: Oh guess what?

That's one every 3 mins ish now.

It should be secure but I don't know about SMF, could be a security hole. I'm trying to move off of SMF onto something else (maybe invisionboard), but have to pay for it first.

I shut off sendmail on my server for now, hopefully that should stop anything from going out until I can see what's going on

[TennShadow]

from nckorj@peemtt.com <no-reply@phpvms.net>

reply-to nckorj@peemtt.com

to xxxxxxxxxxx

date Wed, Feb 17, 2010 at 9:17 AM

subject NhQZDOrVhBBEblMN

mailed-by nsslive.net

The others I've received are the same except for the reply-to address.

[mark1million]

Look, when you run your own servers it can get a bit complicated, so what you got spam, its not the end of the world.

The hole would seem to be with SMF because i used a different email for the bug tracking site and no spam on that one.

Delivered-To:XXXX

Received: by 10.223.117.12 with SMTP id o12cs292065faq;

        Wed, 17 Feb 2010 07:07:52 -0800 (PST)

Received: by 10.91.19.17 with SMTP id w17mr2574334agi.54.1266419265456;

        Wed, 17 Feb 2010 07:07:45 -0800 (PST)

Return-Path: <>

Received: from mail.uk.loomis.com (ukmailgw01.loomis.com [212.240.255.211])

        by mx.google.com with ESMTP id 8si4042134gxk.46.2010.02.17.07.07.44;

        Wed, 17 Feb 2010 07:07:45 -0800 (PST)

Received-SPF: pass (google.com: domain of mail.uk.loomis.com designates 212.240.255.211 as permitted sender) client-ip=212.240.255.211;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of mail.uk.loomis.com designates 212.240.255.211 as permitted sender) smtp.mail=

Received: from domino2.chsuk.com ([192.168.200.21])

by mail.uk.loomis.com (8.14.1/8.14.1) with ESMTP id o1HEpdKf004419

for <XXXX>; Wed, 17 Feb 2010 14:51:39 GMT

Received: from mail.uk.loomis.com ([192.168.200.27])

          by domino2.chsuk.com (Lotus Domino Release 7.0.2)

          with ESMTP id 2010021715062643-51277 ;

          Wed, 17 Feb 2010 15:06:26 +0000

Received: from mail.nsslive.net (nsslive.net [72.14.190.114])

by mail.uk.loomis.com (8.14.1/8.14.1) with ESMTP id o1HEpOCg003502

for XXXX; Wed, 17 Feb 2010 14:51:25 GMT

Received: by mail.nsslive.net (Postfix, from userid 33)

id 95A3BC1F7; Wed, 17 Feb 2010 10:07:24 -0500 (EST)

To: XXXX

Subject: jkJLeclRfyNtENG

From: "cwhaie@bghslq.com" <no-reply@phpvms.net>

Reply-To: <cwhaie@bghslq.com>

Date: Wed, 17 Feb 2010 15:07:24 -0000

X-Mailer: SMF

Mime-Version: 1.0

Message-Id: <20100217150724.95A3BC1F7@mail.nsslive.net>

X-MIMETrack: Itemize by SMTP Server on UkDs2/SERVERS/UK/CHS(Release 7.0.2|September 26, 2006) at

17/02/2010 15:06:26,

Serialize by Router on UkDs2/SERVERS/UK/CHS(Release 7.0.2|September 26, 2006) at

17/02/2010 15:06:28,

Serialize complete at 17/02/2010 15:06:28

X-MailFwdBy: CN=Mark Grant/OU=TECH/OU=UK/O=CHS

Content-Transfer-Encoding: 7bit

Content-Type: multipart/alternative; boundary="SMF-ac5fb1a967b00ffd79db941d15c2b765"

X-EsetId: 5AD61B282C78E46945D01B7D212BA0

[Flightguy123]

just got one!

[Nabeel]

And I use no-reply for smf only.

[Kyle]

well i got those e-mails before. And i'm not sure what your trying to do. But i'm blocking emails from phpvms until you get this fix. I want to keep my e-mails clean.

[Tom]

well i got those e-mails before. And i'm not sure what your trying to do. But i'm blocking emails from phpvms until you get this fix. I want to keep my e-mails clean.

The emails stopped not long after the problem was reported for me... I just wasn't here to say so.

The forums have been switched to IP Board as the no-reply email was only used for the forums so there was a suspected security problem. Should all be fine now I haven't had anything.

[Kyle]

The emails stopped not long after the problem was reported for me... I just wasn't here to say so.

The forums have been switched to IP Board as the no-reply email was only used for the forums so there was a suspected security problem. Should all be fine now I haven't had anything.

Yeah but i should block it for a while. Till i get nothing from them for 7 days. It's my server tech. recomacation

My E-mail server was so full because of the emails from phpvms and it botches my e-mail server space. So just in case till i get nothing from them for 7 days. And i will un-block them.

[Nabeel]

Well those should hopefully be taken care of now. I didn't realize how many security holes SMF2 had. They've also pretty much stopped development, and the whole project is a mess now.

[Kyle]

Well those should hopefully be taken care of now. I didn't realize how many security holes SMF2 had. They've also pretty much stopped development, and the whole project is a mess now.

Yeah i seen that. Could been ceased for a reason.

[Kieran]

SMF was a pretty bad quality board anyway, phpBB is the way forward for free boards.

vBulletin/IPboard for paid boards.

[Nabeel]

SMF was a pretty bad quality board anyway, phpBB is the way forward for free boards.

vBulletin/IPboard for paid boards.

SMF has an awesome plugin/addon system, way ahead of phpBB there. Too bad development has nearly stopped on SMF. I was never really a fan of phpBB. vBulletin has really fallen behind too, it used to be a leader in forums

[Kieran]

I agree, but phpBB has that nice modern wordpress-y twitter-y feel about it.

Also I could never find a good base theme for SMF to build on.

[TAV1702]

I've used phpBB for years now. The only issue I ever had was their security in 2.x really sucked. Hopefully V3 is much better. I hate V3 and no longer code any mods for phpBB or integrate any, but I still use it as a board. And I have not been around to check the email issue from here. I suppose it's been a week or so since I been on here. My last visit was during the move I suppose.