Any ideas on how to deal with this email fisher?

Qualm

Gawd
Joined
May 31, 2003
Messages
562
At this point I am assuming this is an attempt to gather known good email addresses. I've substituted "spammertarget.com" for our actual domain name. This started about a week ago:

Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <dadams@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <enigma@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <michele@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <psmith@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <darlene@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <helen@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <davew@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <lucy@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <f@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <julian@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <2f38A19993G30816495a@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <gus@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <markm@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <lindsay@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <ski@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <eva@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <sterling@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <davem@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <blue@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <simpson@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <scottm@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <darryl@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <sammy@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <johnd@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <johnw@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <dani@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <conrad@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <rhonda@spammertarget.com>... User unknown
Jan 4 07:42:08 mail sendmail[13131]: i04Cg7r13131: <lyle@spammertarget.com>... User unknown
Jan 4 07:42:09 mail sendmail[13131]: i04Cg7r13131: from=<john@e-mailbox.com>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=c78004.upc-c.chello.nl [212.187.78.4]

... some names deleted for space reasons ...
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <2f6eQ18899G2808654f4@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <reid@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <law@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <jlee@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <employment@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <nicholas@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <cc@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <irene@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <paulb@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <creative@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <pc@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <kit@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <jared@spammertarget.com>... User unknown
Jan 4 13:33:53 mail sendmail[13451]: i04IXkr13451: <lenny@spammertarget.com>... User unknown
Jan 4 13:33:59 mail sendmail[13451]: i04IXkr13451: from=<john@erienet.com>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=pcp919938pcs.venice01.fl.comcast.net

[68.56.187.253]

... about 20 names per try ...
Jan 4 19:27:58 mail sendmail[13770]: i050Rvr13770: <sports@spammertarget.com>... User unknown
Jan 4 19:27:58 mail sendmail[13770]: i050Rvr13770: <sinclair@spammertarget.com>... User unknown
Jan 4 19:27:58 mail sendmail[13770]: i050Rvr13770: <viper@spammertarget.com>... User unknown
Jan 4 19:27:58 mail sendmail[13770]: i050Rvr13770: from=<john@email-lotto.com>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA,

relay=LL18748@moncey-1-82-67-21-179.fbx.proxad.net [82.67.21.179]

... more names here ...
Jan 5 11:13:49 mail sendmail[15575]: i05GDTr15575: <doyle@spammertarget.com>... User unknown
Jan 5 11:13:49 mail sendmail[15575]: i05GDTr15575: <sunny@spammertarget.com>... User unknown
Jan 5 11:13:49 mail sendmail[15575]: i05GDTr15575: <cds@spammertarget.com>... User unknown
Jan 5 11:13:49 mail sendmail[15575]: i05GDTr15575: <dane@spammertarget.com>... User unknown
Jan 5 11:13:51 mail sendmail[15575]: i05GDTr15575: from=<john@connectnet.net>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=[202.150.85.102]

As you can see, he changes the relay source, so I can't block by IP or by ISP. Maybe I could block anything from "username=John"? How would I do this on a Linux box running sendmail?

Any ideas on what I can do about this except prepare for the spam from the addresses he does manage to collect and sell?

- Qualm
 

FLECOM

Modder(ator) & [H]ardest Folder Evar
Staff member
Joined
Jun 27, 2001
Messages
15,740
Top