David Milholen wrote:
Hi All,
I have a customer on my net that has a machine that seems to be spewing
some spam from it. So that I have a better understanding of how this
occurs any explanations would be helpful.
Here is what I received from Junkmailfilter. The 208.44.160.xxx hosts
are on my network.
I just want to know how his machine is doing this?
This is an automated email abuse report from the folks at
junkemailfilter.com for an email message received from IP address
[208.44.160.90] on .
We hope this information will help you in determining the source of the
problem and shut it down. The original message is attached in MIME
format with complete headers. For more information about this
standardized abuse report format [ARF] please visit
http://www.mipassoc.org/arf/ If you would prefer abuse reports in text
format let us know.
If you have any questions or feedback about this abuse report or are
interested in learning about our spam filtering technology feel free to
contact us. If this is not spam please accept our apologies and let us
know so we can fix the problem. Pay close attention to the REASON listed.
Marc Perkel - Fearless Leader
Junk Email Filter dot com
http://www.junkemailfilter.com
[email protected]
* Date: * From: Generic VIAGRA (c) Best Supplier
<[email protected]>
* Subject: Visitor mary's personal 80% OFF
* Host: can-208-44-160-90.wletc.com [208.44.160.90]
* Reason: MULTI-BLACKLIST - can-208-44-160-90.wletc.com (wletc.com)
[208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] - OurBl BlList
- X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90]
HELO=[wletc.com] f=[[email protected]] t=[m...@zme
For more information about these abuse reports:
http://wiki.junkemailfilter.com/index.php/Spam_abuse
To test or be removed from our blacklist:
http://ipadmin.junkemailfilter.com/remove.php?ip=208.44.160.90
======== Original Headers ========
Received: from can-208-44-160-90.wletc.com ([208.44.160.90] helo=wletc.com)
by euclid.junkemailfilter.com with esmtps (TLSv1:RC4-MD5:128)
(Exim 4.71)
id 1NNlsS-0001hk-6w on interface=65.49.42.62
for [email protected]; Thu, 24 Dec 2009 03:29:08 -0800
From: Generic VIAGRA (c) Best Supplier <[email protected]>
To: [email protected]
Subject: Visitor mary's personal 80% OFF
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Sender-Domain: wletc.com
X-Spamfilter-host: euclid.junkemailfilter.com -
http://www.junkemailfilter.com
X-Mail-from: [email protected]
X-Spam-Class: SPAM-HIGH-VERY - MULTI-BLACKLIST -
can-208-44-160-90.wletc.com (wletc.com) [208.44.160.90] - [S=6 -
cbl.abuseat.org bl.spamcop.net] - OurBl BlList - X=euclid
H=can-208-44-160-90.wletc.com [208.44.160.90] HELO=[wletc.com]
f=[[email protected]] t=[[email protected]] S=[Visitor mary's
personal 80% OFF]
X-Honeypot: Yes - MULTI-BLACKLIST - can-208-44-160-90.wletc.com
(wletc.com) [208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] -
OurBl BlList - X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90]
HELO=[wletc.com] f=[[email protected]] t=[[email protected]]
S=[Visitor mary's personal 80% OFF]
X-Abuse-email: X-Abuse-email: [email protected]
X-Sender-Host-Address: 208.44.160.90
X-Sender-Host-Name: can-208-44-160-90.wletc.com
X-Original-helo: wletc.com
------------------------------------------------------------------------
Feedback-Type: abuse
User-Agent: JunkEmailFilter - Abuse Reporter/1.0 - Testing - Feedback
Appreciated
Version: 0.1
Original-Mail-From: Generic VIAGRA (c) Best Supplier
<[email protected]>
Original-Rcpt-To: [email protected]
Received-Date: Source-IP: 208.44.160.90
Thanks
---Dave
---------------------------------------------------------------------------------
Is the host at 208.44.160.90 a QMT, or some other host?
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
