Jump to content

How on earth


{R}
 Share

Recommended Posts

Apparently my shortly to be commissioned DNS server 217.169.24.83 which doesn't have an rDNS working yet, is spamming. See below.

Now there is no SMTP server on this Win2K box, and BIND is playing up too :( but that is a different story,

So can someone please explain how I got reported, I don't mind at all as I have no intention of running an SMTP server on that IP.

{R}

[ SpamCop V1.379 ]

This message is brief for your comfort. Please use links below for details.

Email from 217.169.24.83 / Wed, 13 Oct 2004 23:39:29 +0300 (EAT)

http://www.spamcop.net/w3m?i=z1264389395za...8b8cc502edbfcfz

[ Offending message ]

Received: from standardlife.ca ([217.169.24.83])

by mailexch-inalt.unon.org (8.13.1/8.13.1) with SMTP id i9DKdFJL009451

for <x>; Wed, 13 Oct 2004 23:39:29 +0300 (EAT)

Message-ID: <04de______________________e0db[at]standardlife.ca>

From: "Trisha Hutchins" <t.hutchins_gz[at]cicely5.cicely.de>

To: x

Subject: [spam]

Date: Thu, 14 Oct 2004 18:52:19 +0000

MIME-Version: 1.0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: 8bit

Received-SPF: softfail (mailexch-inalt.unon.org: transitioning domain of cicely5.cicely.de does not designate 217.169.24.83 as permitted sender) client-ip=217.169.24.83; envelope-from=t.hutchins_gz[at]cicely5.cicely.de; helo=standardlife.ca;

X-Miltered: at prtsvr-x with ID 416D9273.000 by Joe's j-chkmail (http://j-chkmail.ensmp.fr)!

X-Brightmail-Tracker: AAAAAwEjor4BIRIKASdFng==

{spam snipped}

Link to comment
Share on other sites

There is a problem with that machine, it has probably some kind of worm or it has been hacked. You don't have to be running an smtp server to send spam it is built into many worms.

CBL The CBL - Composite Blocking List: cbl.abuseat.org -> 127.0.0.2

Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=217.169.24.83

--------------------------------------------------------------------------------

XBL Exploits Block List (includes CBL): xbl.spamhaus.org -> 127.0.0.4

http://www.spamhaus.org/query/bl?ip=217.169.24.83

--------------------------------------------------------------------------------

SPAMCOP SpamCop Blocking List: bl.spamcop.net -> 127.0.0.2

Blocked - see http://www.spamcop.net/bl.shtml?217.169.24.83

--------------------------------------------------------------------------------

DNSBLUCEPN External Block List - UCEPROTECT®-Network Project: ucepn.dnsbl.net.au -> 127.0.0.2

PLEASE SEE http://www.uceprotect.net/

Edited by Merlyn
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...