Eastern Railroad Discussion > NS email system potentially comprimised

The Norfolk Southern Railroad email system may have been compromised.

For the last 2 weeks or so, there have been massive amounts of email SPAM eminating from IP addresses assigned to NS.

ok....

Without proof, again.

longliveSP Wrote:
-------------------------------------------------------
> The Norfolk Southern Railroad email system may
> have been compromised.
>
> For the last 2 weeks or so, there have been
> massive amounts of email SPAM eminating from IP
> addresses assigned to NS.

I seem to remember our NS employee email system being compromised at least once in the past.

Posted from Android

SP4360 Wrote:
-------------------------------------------------------
> Without proof, again.

I have both firewall log data and email server log data to prove it. That is information that will not be published publicly. However, since you obviously have a doubt, you can view this:

https://www.abuseipdb.com/check/198.62.5.115

While I have never got spam in my corporate email and I've never seen my railroad's servers be hijacked to send spam....the spammers are always trying...and sometimes they get in....I'm sure NS knows when it happens and takes action to close up any holes. 

Just another reason the UP takeover is needed.

Posted from Android

The late 24 early 25 NS IT outage incident appeard to the employees to have started via webmail. We figued some Managers opened things they shouldnt have. That was one of the first systems to fail and the last to come back up. NS claimed that was a bad software update. 
 

ShortlinesUSA Wrote:
-------------------------------------------------------
> Just another reason the UP takeover is needed.
>
> Posted from Android

Not a chance! The UP takeover will be an anti trust lawsuit waiting to happen!
 

Michael Fair
Royal Oak, MI

ShortlinesUSA Wrote:
-------------------------------------------------------
> Just another reason the UP takeover is needed.
>
> Posted from Android

What makes you think things will he any different?

Posted from iPhone

Doug Wetherhold
Macungie, PA

ALCO630 Wrote:
-------------------------------------------------------
> ShortlinesUSA Wrote:
> --------------------------------------------------
> -----
> > Just another reason the UP takeover is needed.
> >
> > Posted from Android
>
> What makes you think things will he any different?
>
>
> Posted from iPhone


Guys- I’m pretty sure he was making a joke, satire.

JOHNY5ALIVE Wrote:
-------------------------------------------------------
> ALCO630 Wrote:
> --------------------------------------------------
> -----
> > ShortlinesUSA Wrote:
> >
> --------------------------------------------------
>
> > -----
> > > Just another reason the UP takeover is needed.
>
> > >
> > > Posted from Android
> >
> > What makes you think things will he any
> different?
> >
> >
> > Posted from iPhone
>
>
> Guys- I’m pretty sure he was making a joke,
> satire.

Satire is not permissible. Choo choos be serious bid-ness.

LOL, Scrap! Glad you and Johnny got it.

Posted from Android

engineerinvirginia Wrote:
-------------------------------------------------------
> I'm sure NS
> knows when it happens and takes action to close up
> any holes. 

That is what you would think would happen.

Yet, this has been going on for 2 weeks now.

Presumably you forwarded your logs to the abuse email address that NS has on their ICANN listing?

JUTower Wrote:
-------------------------------------------------------
> Presumably you forwarded your logs to the abuse
> email address that NS has on their ICANN listing?

Yep, and no response yet since I sent it on 07/02/2026.

bath_wildcat Wrote:
-------------------------------------------------------
> Not a chance! The UP takeover will be an anti
> trust lawsuit waiting to happen!

Is that still a thing???