Does anyone know the cause of this?

  • zineb98as

    (@zineb98as)


    2 years, 9 months ago

    Hello,
    I was supprised this morning by a bunch of emails (50 emails) from wordpress@***.com indicating that new users are registred to my website, but all of them are called test. I also received from the same sender some spam emails.
    Does anyone know what wordpress business prive is or know what could cause this problem?
    Thank you.

    • This topic was modified 2 years, 9 months ago by Yui. Reason: email redacted
Viewing 7 replies - 1 through 7 (of 7 total)
  • Moderator Yui

    (@fierevere)

    永子

    2 years, 9 months ago

    when users register on your site – you’ll get email from your site.

    Do you have any new users in your WP?

    If not – it is just spam and nothing else, or a scam with malicious intent to make you somewhat panic or so…

    Thread Starter zineb98as

    (@zineb98as)

    2 years, 9 months ago

    I don’t have any new users on my WP site so I think it’s just spam but I don’t know where it comes from. do you know what ‘wordpress business prive’ is?
    An example of the message I received:

    New user registration on your site Business Privé:

Username: test24711033

Email: [email protected]
    • This reply was modified 2 years, 9 months ago by zineb98as.
    Moderator Yui

    (@fierevere)

    永子

    2 years, 9 months ago

    You have to check full SMTP headers of email message to figure out where it comes from.

    Thread Starter zineb98as

    (@zineb98as)

    2 years, 9 months ago

    ok thank you!

    Thread Starter zineb98as

    (@zineb98as)

    2 years, 9 months ago

    Hi again,
    I checked the SMTP headers and I don’t know where it comes from

    From: WordPress <wordpress@b****e.com>
Date: July 17, 2021 at 13:53:37 GMT+2
To: irina@n***e.com
Subject: [Business Privé] New User Registration
New user registration on your site Business Privé:

Username: test24711033

Email: test24711033@w***ds.org

    Do you have a suggestion how to prevent this from happening again.
    Thank you

    • This reply was modified 2 years, 9 months ago by Yui. Reason: part of email obscured
    Moderator Yui

    (@fierevere)

    永子

    2 years, 9 months ago

    It’s becoming more a not-wordpress-related question.

    SMTP Received: headers can tell you where this mail has came from.
    Notably the last one.
    Example:

    
Received: from d***k.ru (d***k.ru [109.71.11.xxx])
	by ***.yandex.net (mxfront/Yandex) with ESMTP id YYY;
	Sat, 17 Jul 2021 20:25:27 +0300

    so there is a sender (and a spammer) – 109.71.11.xxx

    Thread Starter zineb98as

    (@zineb98as)

    2 years, 9 months ago

    ok. Thank you for taking time to reply.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Does anyone know the cause of this?’ is closed to new replies.