phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

Forum hacked to send spam emails?


 
Search this topic... | Search General Support... | Search Box
Register or Login to Post    Index » General Support  Previous TopicPrint TopicNext Topic
Author Message
AsciiSector
Board Member



Joined: 09 Dec 2008

Posts: 30
Location: Copenhagen, Denmark


flag
PostPosted: Tue Jul 14, 2009 7:52 am 
Post subject: Forum hacked to send spam emails?

My hosting provider shut down my site for a couple of days, as they could see excessive amounts of mail activity. When I checked my main mailbox, there were more than 4000 emails, all of which where returned mails that couldn't be delivered. All of it was spam, and all of it seemed to have randomly generated sender addresses in the form of xxx@asciisector.net (www.asciisector.net is my website and xxx was the randomly generated name). Have anybody here experienced anything similar and has my site truly been hacked to send spam emails, or is it just that spam emails have been sent out with a fake sender's addresses, so all the undelivered spam is returned to my email address?
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Tue Jul 14, 2009 10:18 pm 
Post subject: Re: Forum hacked to send spam emails?

If these emails were really sent from the server you're on, then the web host would likely have logs of each email sent.

In any case, email is no different from postal mail: one is expected to write the correct return address (ex: your home address, if mailing from there) on the envelope, but in actuality, any address can be written.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield IL Mac 512K Blog Mac GUI
Back to top
Slackervaara
Board Member



Joined: 01 Jan 2009

Posts: 70



PostPosted: Wed Jul 15, 2009 5:18 am 
Post subject: Re: Forum hacked to send spam emails?

I have been hacked once by someone that sent a lot of spam. The hacker uploaded a php-program to my site with a upload program that was a part of a chat program I had on the site. The php-program was used for spamming. I removed the php-program and disabled the upload program and the problem is solved.

My suggestion is that you look in your access logs to find out what the spammer has been doing on the site. From the return mails you know what time he has been active, so it will be fairly easy.
Back to top
AsciiSector
Board Member



Joined: 09 Dec 2008

Posts: 30
Location: Copenhagen, Denmark


flag
PostPosted: Wed Jul 15, 2009 11:03 am 
Post subject: Re: Forum hacked to send spam emails?

I haven't been able to find anything in the access logs, nor are there any unwelcome php scripts or anything. I've asked my hosting provider whether or not the large amount of mail activity that caused them to originally shut down my site was outgoing mail or just incoming mail (i.e. the returned spam emails). I haven't heard back from them in two days and I've opened my site again without any complaints from them. I'm thinking this really "just" was spam email sent with a faked return address. Thankfully all the returned spam is sent to an email address that I don't use, so I've just set it to delete everything that comes in (which seems to have died down a lot).
Back to top
Holger
Board Member



Joined: 19 Jan 2009

Posts: 509
Location: Hanover


flag
PostPosted: Wed Jul 15, 2009 1:12 pm 
Post subject: Re: Forum hacked to send spam emails?

Does not nessecarly have to do with your site.
My mailaddresses are also used to send spam.
Do you use catch-all for those addresses not known? Disable catch-all.
Back to top
AsciiSector
Board Member



Joined: 09 Dec 2008

Posts: 30
Location: Copenhagen, Denmark


flag
PostPosted: Thu Jul 16, 2009 8:34 am 
Post subject: Re: Forum hacked to send spam emails?

I've disabled catch-all now. Thanks for the advice. icon_smile.gif
Back to top
Holger
Board Member



Joined: 19 Jan 2009

Posts: 509
Location: Hanover


flag
PostPosted: Thu Jul 16, 2009 8:40 am 
Post subject: Re: Forum hacked to send spam emails?

The problem is, the mails do not nessecarily have to be sent from your server. Those idiots just use your address as sender.
Back to top
AsciiSector
Board Member



Joined: 09 Dec 2008

Posts: 30
Location: Copenhagen, Denmark


flag
PostPosted: Thu Jul 16, 2009 9:48 am 
Post subject: Re: Forum hacked to send spam emails?

Yeah, it was pretty annoying. I'm also a tad annoyed at my host for just shutting down my site without any word from them. I had to contact them to hear what was going on. And shouldn't they be able to see that the increased mail activity was from incoming mails - not from me sending out spam?
Back to top
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Tue Jul 21, 2009 2:08 am 
Post subject: Re: Forum hacked to send spam emails?

As you'll come to find, some hosting companies really don't care about the technicalities at first. They must've simply looked at the increased mail activity, saw that it was over your limit, and did the whole "shoot first and ask questions later" bit.
Back to top
AsciiSector
Board Member



Joined: 09 Dec 2008

Posts: 30
Location: Copenhagen, Denmark


flag
PostPosted: Tue Jul 21, 2009 9:03 am 
Post subject: Re: Forum hacked to send spam emails?

Yeah, they haven't even replied to my last couple of mails, where I ask if it was incoming our outgoing mail. Guess they consider the problem fixed and don't need to reply to my mails...
Back to top
Display posts from previous:   
Register or Login to Post    Index » General Support  Previous TopicPrint TopicNext Topic
Page 1 of 1 All times are GMT
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0111 seconds using 15 queries. (SQL 0.0022 Parse 0.0003 Other 0.0086)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo