The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spammer

Discussion in 'General Discussion' started by jonmar, Mar 19, 2004.

  1. jonmar

    jonmar Member

    Joined:
    Sep 13, 2003
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    1
    I hope this is the right forum for this. If not, admin please accept my apologies.

    My server is being used for spam. I am having trouble tracking it down, but I actually think someone is somehow relaying messages through the server.

    The header returned from spamcop is as follows:

    Return-Path: <atifhunter@cariari.ucr.ac.cr>
    Delivered-To: spamcop-net-x
    Received: (qmail 21964 invoked from network); 18 Mar 2004 08:25:21 -0000
    Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101)
    by blade1.cesmail.net with SMTP; 18 Mar 2004 08:25:21 -0000
    Received: (qmail 1687 invoked from network); 18 Mar 2004 08:25:20 -0000
    Received: from solomon.io.com (199.170.88.24)
    by mailgate.cesmail.net with SMTP; 18 Mar 2004 08:25:17 -0000
    Received: from webmail.io.com (columbia.io.com [199.170.88.107])
    by solomon.io.com (8.12.8/8.12.8) with ESMTP id i2I8QFah017477
    for <x>; Thu, 18 Mar 2004 02:26:16 -0600
    Received: from chimta05.algx.net (mta6.algx.net [67.92.168.235])
    by webmail.io.com (8.12.8/8.12.8) with ESMTP id i2I8OT0G003451
    for <x>; Thu, 18 Mar 2004 02:24:30 -0600
    Received: from chiims02 (mta8.algx.net [67.92.168.237])
    by chimmx05.algx.net (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14
    2003)) with ESMTP id <0HUR0077LJCQ4M@chimmx05.algx.net> for x
    (ORCPT x); Thu, 18 Mar 2004 02:24:26 -0600 (CST)
    Received: from chimta04.algx.net (chimta04c.algx.com [172.16.18.29])
    by chimail02.algx.net
    (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
    with ESMTP id <0HUR002DLJCQZN@chimail02.algx.net> for x
    (ORCPT x); Thu, 18 Mar 2004 02:24:26 -0600 (CST)
    Received: from router.netkomp.com.pl
    (rc226.internetdsl.tpnet.pl [80.55.54.226]) by chimmx04.algx.net
    (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003))
    with ESMTP id <0HUR00C7JJCGV4@chimmx04.algx.net>; Thu,
    18 Mar 2004 02:24:26 -0600 (CST)
    Received: from relay1.binet.com.ua (xxxxxxx.xxxxxxx.com [11.22.111.21])(Not actual ip)
    by router.netkomp.com.pl (Postfix) with ESMTP id 227F11CE93; Thu,
    18 Mar 2004 07:10:55 +0100 (CET)
    Date: Thu, 18 Mar 2004 01:02:19 -0500
    From: Cheryl <atifhunter@cariari.ucr.ac.cr>
    Subject: Lotus SmartSuite Millennium Edition V9.7

    Notice that it says Received from relay1.binet.com.ua, then it has my server name and IP there (the x's) but this is not a domain that is hosted on my server. If anyone has any ideas, please help, as I am at risk of losing my service if I can't pinpoint this.
     

Share This Page