You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by Kevin Peuhkurinen <ke...@meridiancu.ca> on 2005/05/30 20:49:25 UTC

Re: New dictionary spamming method -- SOLVED!

Looks like some particularly inept spammer is grabbing partial 
Message-IDs from the headers of messages on this list and trying to send 
email to them as though they were email addresses.   Sad, really.

Kevin Peuhkurinen wrote:

> I've noticed recently in my MTA logs a growing trend of attempts to 
> send email to numbered email addresses, such as:
>
> 0491.5090900@mydomain.ca
> 2050409@mydomain.ca
> 18.4060100@mydomain.ca
> 39.4030901@mydomain.ca
> 3.5070002@mydomain.ca
> 4.3040500@mydomain.ca
>
> Anyone have any ideas why spammers would be trying this particular 
> tactic?
>
>

Re: New dictionary spamming method -- SOLVED!

Posted by Kelson <ke...@speed.net>.

Kevin Peuhkurinen wrote:
> Looks like some particularly inept spammer is grabbing partial 
> Message-IDs from the headers of messages on this list and trying to send 
> email to them as though they were email addresses.   Sad, really.

We occasionally get mail sent to *full* message-IDs.  A nice 
demonstration of the fact that (at least some) spammers really don't pay 
any attention to what's on their lists.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>