Looks like somebody found my blog and decided to start spamming people by the hundreds, spoofing an “incoherentbabble.com” email address. I assure you, this isn’t email from me, it’s some unknown spammer that’s just harvested my domain and is using it to send his crap (apparently through a massive network of open SMTP relays, judging by the message headers).
Trust me, this is just as annoying for me as it is for you (if not more-so). I’m getting reject notices and Out of the Office auto-replies by the boatload over the past few hours.
I’m sorry you have to be punished because these guys exist… The scum of the earth just keep thriving…
2 Comments so far
Tom Simpson, on June 27, 2006 at 2:24pm, said:
I had this happen to a business domain that I take care of, about 10 months ago. Some spambot network using insecure SMTP relays just started spoofing headers to make it look like it was coming from that business’ domain. The thing that really worried me is that the only thing “I” saw was the bounced and Out-of-Office messages.
I just wondered how many were actually getting through to their intended recipients. My “guess” was that I was only seeing 10% of the messages they were sending. I did get a couple messages from “real” people, asking for a stop to it. I wrote them back with a long explaination of what was happening, and how I couldn’t do anything about it.
I ended up “blackholing” all non-specific addresses, so that I wouldn’t keep seeing the bounces, but 10 months later (although it has slowed down) it continues. It would be an endless job to try and contact all of the owners of the open relays and get them to lock things down…if they were even “willing” to do that.
Edit Comment
» Email is Broken - 7 Month Update - Webfeed Central, on June 28, 2006 at 5:26pm, said:
[…] Yesterday, I read about this crap happening to Chris and left a comment on his blog. After leaving the comment, I got curious about how many messages my domain that’s being attacked is getting. I changed things, so I would get mail sent to “any” address on that domain. […]
Edit Comment