Several of our servers are being attacked

Portal Home > Knowledgebase > Articles Database > Several of our servers are being attacked

Posted by Tina J, 04-12-2005, 12:47 PM
Greetings, Starting approximately 48 hours ago, 6 of our servers' email processes are being maliciously targetted. Almost every account on these servers are being "Joe Jobbed". This means that someone is sending out 100s of 1000s of emails NOT from our network, but using our customers' email addresses as the return address. All bounced emails will then be returned to our customers. They are also hitting our SMTP servers with an attack. The fallout is, our customers' email and diskspace quotas are filling up and legitimate email cannot get through. Also, because of the humongous amount of bounced emails that are being processed, the servers are having a hard time keeping up and are running noticably slower. Outgoing SMTP connections are also having trouble because of the server load and many users are getting "too busy" erros when trying to send email. We are actively working to clean up this mess and we hope to have things back to normal soon. This is a deliberate and very malicious attempt to harm these servers and alot of innocent people are suffering because of it. I will never understand the mentality of people who feel justified in hurting so many other people. --Tina
Posted by Infinix, 04-16-2005, 02:38 AM
Are they using only 'real' email addresses or is it a dictionary type run against the domain? If only 'real' addresses are being used it seems highly targetted.
Posted by SoftWareRevue, 04-16-2005, 09:57 AM
She discusses it here. Although it appears to have settled down.