Log in

View Full Version : [urgent] suspend board because spam


anakayam.us
04-14-2008, 02:45 PM
hello,
my board now was suspend.
i dont know why,my host said : im overload sent message max 500/1hour.

im sure 100% im not spam / send email for all users in my board.

email :


Catchalls: 4 (warning)


WARNING: Catchall enabled for tasmania: babykruffy.com: *: zhazha (disabled)
WARNING: Catchall enabled for tasmania: juiceshare.anakayam.us: *: zhazha (disabled)
WARNING: Catchall enabled for tasmania: babykruffy.anakayam.us: *: zhazha (disabled)
WARNING: Catchall enabled for tasmania: juiceshare.com: *: zhazha (disabled)


Hi,


An account under your control was recently found to be sending out emails at a rate faster than 500 messages/hour,


Note: If you have a catchall enabled as well as boxtrapper, this could account for your enormous mail volume. Each spam message that arrives in your mailbox generates a second wasteful message to verify the original spam. If you intend to use boxtrapper, you MUST disable your catchall. Catchall service is no longer being offered, and only remains in place for our legacy customers. In situations like this, we may opt to disable your catchall to prevent further mail floods, if that is the cause of the spam or high mail volume.


Mail Log Parsed from 2008-04-13 04:02:49 to 2008-04-14 09:37:35
===========================
User sent approximately 11871 messages
A small sample follows.
-- top 5 entries --


2008-04-13 04:05:10 1Jky98-0001g1-Jb zhazha T="Welcome to anakayam.us - House Of Chick's!" for vils_august31st@hotmail.com
2008-04-13 04:13:34 1JkyHF-0002dK-Vl zhazha T="Welcome to anakayam.us - House Of Chick's!" for muscular_enough@yahoo.com
2008-04-13 04:23:13 1JkyQb-00027o-5o zhazha T="anakayam.us - House Of Chick's Contact Us Form - Site Feedback" for anakayam.us@gmail.com
2008-04-13 04:27:57 1JkyVB-0003xN-0L zhazha T="Your login details for anakayam.us - House Of Chick's" for peter_lapartie@yahoo.com
2008-04-13 04:41:44 1JkyiV-0005ay-Vj zhazha T="Welcome to anakayam.us - House Of Chick's!" for vidz2k@yahoo.com


-- last 5 entries --


2008-04-14 09:21:41 1JlPYz-0006ty-Rs zhazha T="Your login details for anakayam.us - House Of Chick's" for koesgk@cbn.net.id
2008-04-14 09:34:50 1JlPli-0000eo-9l zhazha T="Your login details for anakayam.us - House Of Chick's" for karyodumadi@telkom.net
2008-04-14 09:35:05 1JlPlw-0000iF-OT zhazha T="Your new password for anakayam.us - House Of Chick's" for koesgk@cbn.net.id
2008-04-14 09:35:10 1JlPm2-0000jI-1f zhazha T="Your login details for anakayam.us - House Of Chick's" for raditk@yahoo.com
2008-04-14 09:36:24 1JlPnE-0000xB-7S zhazha T="Welcome to anakayam.us - House Of Chick's!" for arha98@yahoo.com
===========================


Average hourly mail volume for the referenced account/domain/mailbox:


Hour Volume
===== ======


01-02 9415 ..................................................



how to fixed this ?

UncoderMom
04-14-2008, 02:53 PM
Been there done that! LOL

You need to turn off all your email notifications. I would say if you have to send out that many emails to switch to a vds that has no email restrictions.

anakayam.us
04-14-2008, 02:55 PM
just turn off email notifications,its can be okay mam?

UncoderMom
04-14-2008, 03:04 PM
Yes.. there is a query you can run to turn off all email notifications. Best to set to "subscribe with no email notification. Turn off letting users email. Turn of email for pms, birthdays etc.

You need to tell host gator that you are going to disable email. Thats only a temp fix though. Email is an important part of site growth. You should upgrade your server.

First.. get host gator to turn you back on with your promise to turn off email notifications.

SEOvB
04-14-2008, 03:07 PM
They make a suggestion right in the email


If you intend to use boxtrapper, you MUST disable your catchall. Catchall service is no longer being offered, and only remains in place for our legacy customers. In situations like this, we may opt to disable your catchall to prevent further mail floods, if that is the cause of the spam or high mail volume.


Are you using catchall?

anakayam.us
04-14-2008, 03:10 PM
Yes.. there is a query you can run to turn off all email notifications. Best to set to "subscribe with no email notification. Turn off letting users email. Turn of email for pms, birthdays etc.

You need to tell host gator that you are going to disable email. Thats only a temp fix though. Email is an important part of site growth. You should upgrade your server.

First.. get host gator to turn you back on with your promise to turn off email notifications.

i said like that mam,but now i must wait my site online again.
Hmmm,by the way,if im just turn on email for pm,thats a wrong choice.
because its for "inactive user reminder"
how about user cant online again via board ?

between thanks for ur help mam,:D

--------------- Added 1208189573 at 1208189573 ---------------

They make a suggestion right in the email



Are you using catchall?

what's catchall ?
im sorry i dont know about that :(

UncoderMom
04-14-2008, 03:13 PM
They make a suggestion right in the email



Are you using catchall?

LOL that I know nothing about but I did just come back to tell him to ask specifically which script was outputting the emails. Make sure hes not hacked.

--------------- Added 1208189710 at 1208189710 ---------------

i said like that mam,but now i must wait my site online again.
Hmmm,by the way,if im just turn on email for pm,thats a wrong choice.
because its for "inactive user reminder"
how about user cant online again via board ?

between thanks for ur help mam,:D

--------------- Added 1208189573 at 1208189573 ---------------



what's catchall ?
im sorry i dont know about that :(

:eek: How many members do you have> Inactive user reminder could send out a lot. but I doubt more then 500 an hour.

I'd be concerned if you dont have catchall installed but thats what they are warning you about.

anakayam.us
04-14-2008, 03:21 PM
LOL that I know nothing about but I did just come back to tell him to ask specifically which script was outputting the emails. Make sure hes not hacked.

--------------- Added 1208189710 at 1208189710 ---------------



:eek: How many members do you have> Inactive user reminder could send out a lot. but I doubt more then 500 an hour.

I'd be concerned if you dont have catchall installed but thats what they are warning you about.

dont take a look my board mam ? :D
now my site online again. ;)

sorry im not understand about catchall,its called a product or a plugin? :D

UncoderMom
04-14-2008, 03:46 PM
What else do you have installed on your hosting account? besides vb?

--------------- Added 1208191985 at 1208191985 ---------------

I dont know anything about catchall.. wiki says its some sort of email bounce protection/forwarder.

Could be playing badly with inactive users.

ssslippy
04-14-2008, 04:21 PM
Catchall is when something is sent to your domain but not a real email it goes to the catchall.

Marco van Herwaarden
04-15-2008, 09:35 AM
-- last 5 entries --


2008-04-14 09:21:41 1JlPYz-0006ty-Rs zhazha T="Your login details for anakayam.us - House Of Chick's" for koesgk@cbn.net.id
2008-04-14 09:34:50 1JlPli-0000eo-9l zhazha T="Your login details for anakayam.us - House Of Chick's" for karyodumadi@telkom.net
2008-04-14 09:35:05 1JlPlw-0000iF-OT zhazha T="Your new password for anakayam.us - House Of Chick's" for koesgk@cbn.net.id
2008-04-14 09:35:10 1JlPm2-0000jI-1f zhazha T="Your login details for anakayam.us - House Of Chick's" for raditk@yahoo.com
2008-04-14 09:36:24 1JlPnE-0000xB-7S zhazha T="Welcome to anakayam.us - House Of Chick's!" for arha98@yahoo.com
If these are the statistics they have a problem with, then it is strange. This log shows 5 emails sent in 15 minutes. that should be an average of 20 mails/hour.

UncoderMom
04-15-2008, 12:32 PM
With over 7000 users its far more likely that its the inactive users in combo with thread notifications. Or, once I had a kiddie script sending out spam.. hidden in my vbulletin archives (still dont know how it got there).

So I would also recommend going to ACP>Maintenance>Diagnostics>Suspect File Versions press enter

I do this often now since I was hacked. I mean all the "hackers" cared about was using my server for spam. LOL and that they were doing. 300,000 before the script was turned down. Thank goodness it bottle necked and most of them were sitting in mailque

With that last bit aside.. It wouldn't be hard to image that thread notifications could be hitting you up!The only cure for that is turning them off or upgrading your hosting plan with no email restrictions. The lat is what I would do.

I still don't know what catchall is. IF its something you install in your www. root then I would be going through your files really good.

Marco van Herwaarden
04-15-2008, 01:18 PM
Catchall is used by the servers mail server software if an email is sent to a non-existing address on your domain. Usually the catchall will forward these to the webmaster address, or discard them.