Hi All,
I have a customer on my net that has a machine that seems to be spewing
some spam from it. So that I have a better understanding of how this
occurs any explanations would be helpful.
Here is what I received from Junkmailfilter. The 208.44.160.xxx hosts
are on my network.
I just want to know how his machine is doing this?
This is an automated email abuse report from the folks at junkemailfilter.com for an email message received from IP address [208.44.160.90] on .
We hope this information will help you in determining the source of the problem
and shut it down. The original message is attached in MIME format with complete
headers. For more information about this standardized abuse report format [ARF]
please visit http://www.mipassoc.org/arf/ If you would prefer abuse reports in
text format let us know.
If you have any questions or feedback about this abuse report or are interested
in learning about our spam filtering technology feel free to contact us. If
this is not spam please accept our apologies and let us know so we can fix the
problem. Pay close attention to the REASON listed.
Marc Perkel - Fearless Leader
Junk Email Filter dot com
http://www.junkemailfilter.com
[email protected]
* Date:
* From: Generic VIAGRA (c) Best Supplier <[email protected]>
* Subject: Visitor mary's personal 80% OFF
* Host: can-208-44-160-90.wletc.com [208.44.160.90]
* Reason: MULTI-BLACKLIST - can-208-44-160-90.wletc.com (wletc.com)
[208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] - OurBl BlList -
X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90] HELO=[wletc.com]
f=[[email protected]] t=[m...@zme
For more information about these abuse reports:
http://wiki.junkemailfilter.com/index.php/Spam_abuse
To test or be removed from our blacklist:
http://ipadmin.junkemailfilter.com/remove.php?ip=208.44.160.90
======== Original Headers ========
Received: from can-208-44-160-90.wletc.com ([208.44.160.90] helo=wletc.com)
by euclid.junkemailfilter.com with esmtps (TLSv1:RC4-MD5:128)
(Exim 4.71)
id 1NNlsS-0001hk-6w on interface=65.49.42.62
for [email protected]; Thu, 24 Dec 2009 03:29:08 -0800
From: Generic VIAGRA (c) Best Supplier <[email protected]>
To: [email protected]
Subject: Visitor mary's personal 80% OFF
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Sender-Domain: wletc.com
X-Spamfilter-host: euclid.junkemailfilter.com - http://www.junkemailfilter.com
X-Mail-from: [email protected]
X-Spam-Class: SPAM-HIGH-VERY - MULTI-BLACKLIST - can-208-44-160-90.wletc.com
(wletc.com) [208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] - OurBl
BlList - X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90]
HELO=[wletc.com] f=[[email protected]] t=[[email protected]] S=[Visitor
mary's personal 80% OFF]
X-Honeypot: Yes - MULTI-BLACKLIST - can-208-44-160-90.wletc.com (wletc.com)
[208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] - OurBl BlList -
X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90] HELO=[wletc.com]
f=[[email protected]] t=[[email protected]] S=[Visitor mary's personal 80%
OFF]
X-Abuse-email:
X-Abuse-email: [email protected]
X-Sender-Host-Address: 208.44.160.90
X-Sender-Host-Name: can-208-44-160-90.wletc.com
X-Original-helo: wletc.com
------------------------------------------------------------------------
Feedback-Type: abuse
User-Agent: JunkEmailFilter - Abuse Reporter/1.0 - Testing - Feedback
Appreciated
Version: 0.1
Original-Mail-From: Generic VIAGRA (c) Best Supplier <[email protected]>
Original-Rcpt-To: [email protected]
Received-Date:
Source-IP: 208.44.160.90
Thanks
---Dave
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
