Help - Search - Members - Calendar
Full Version: Servidor suspendido por SPAM
The Planet Forums > General > Foro en Español / Spanish Forum
samuelmf
Hola me suspendieron el servidor por envio de spam y no se ni donde se origina ese spam, les pego una copia del ticket que me enviaron ellos avisandome de que en mi server se genera spam:

Dear Customer,

The Planet or its upstream providers has received a complaint related to a probable violation of the Acceptable Use Policy (AUP). We are forwarding a sample of the reports, requesting that you take appropriate measures to address the issue.

It is very important that you take action on this matter and respond to this ticket within the deadline specified. Failures to investigate, address the issue, and update this ticket with the root cause and actions taken to resolve the problem may result in service interruption. Consider this your only notification. If there is no productive reply, or if the abuse does not cease, Policy Enforcement will be forced to interrupt and/or terminate your service to protect the integrity of the network.

For general reference regarding The Planet's stance on abuse, refer to:
http://www.theplanet.com/about_us/legal.asp

Please direct any questions regarding this specific issue directly in this ticket, or open a new ticket if you are unable to update this ticket due to being logged in on a different user account.

The server in question has been identified as the origin of fraudulent spam messages. This issue needs to be addressed quickly to prevent blacklisting, for which fees may be assessed for removal.


Please investigate, resolve the issue, and update this ticket with your actions, referencing the attached reports for details. Failure to perform these actions within 24 hours will result in service interruption. Thank you in advance for your time, efforts, and cooperation.


Regards,
Nick
Abuse Department
The Planet

QUOTE

From Mrs. Maryann Williams Fri Nov 28 01:13:50 2008
X-Apparently-To: m5000cowan@yahoo.com via 216.252.110.217; Fri, 28 Nov 2008 05:28:39 -0800
Return-Path: <marywilliamsann4@netscape.net>
X-YMailISG: rRQhx00WLDt4CP4tg8Z03L6eCk51PYBYgw_rrF32n1iNHnG6x8HHdpBkfCFyqXb6yAbFINasrCLZIw2D
_vGtr.noPbnorlbCvgkYS5jYupcnEAH5oFmbjXyBRuB8gIBuz_0UeICZGmGcmKg9Q98H2W9j5fEw9Ggl
z
Z9ZiFR3yA_Kaaf2tVa9kWRFVKaiilD9l10bFDWjTq9BQvfvuksmuhAF4O53QQ_sDKV5GhA368Unb9Jvh
G
xoE9WiJyN.fjgzZNeg5kxQYkdow13nlcrYT6vjjyl0u1usgXK7VrNWUi7WJrsmC54uNQ03dIWgqzj_QJ
z
TGNTEfU4WsjXX_ENR1GAGHS1Z1.SmXbhBxlrfHM0m
X-Originating-IP: [69.57.138.34]
Authentication-Results: mta128.mail.re3.yahoo.com from=netscape.net; domainkeys=neutral (no sig)
Received: from 69.57.138.34 (EHLO opower.opowerserver.net) (69.57.138.34)
by mta128.mail.re3.yahoo.com with SMTP; Fri, 28 Nov 2008 05:28:36 -0800
Received: from localhost ([127.0.0.1] helo=cappiura.org.pe)
by opower.opowerserver.net with esmtpa (Exim 4.69)
(envelope-from <marywilliamsann4@netscape.net>)
id 1L5zQ6-0000FE-Sc; Fri, 28 Nov 2008 03:13:50 -0600
Received: from 41.220.75.3 ([41.220.75.3])
(SquirrelMail authenticated user webmaster@cappiura.org.pe)
by cappiura.org.pe with HTTP;
Fri, 28 Nov 2008 03:13:50 -0600 (CST)
Message-ID: <49406.41.220.75.3.1227863630.squirrel@cappiura.org.pe>
Date: Fri, 28 Nov 2008 03:13:50 -0600 (CST)
Subject: Re:Greetings
From: "Mrs. Maryann Williams"<marywilliamsann4@netscape.net>
Reply-To: marywilliamsann4@netscape.net
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - opower.opowerserver.net
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - netscape.net
Content-Length: 1529

MIME element (text/plain)

Dear friend,

My name is Mrs. Mary-Ann Williams, a wife of late Mr. George Williams, an
American Businessman.I got your contact through the listed postal address
in your country. I lost my husband recently to the international disaster
in West Indonesia (the Tsunami attack) and I am also receiving treatment
after the exposure to the hard conditions of the Tsunami. I have been
diagnosed with Esophageal cancer .It has defiled all forms of medical
treatment,and right now I have only about a few months to live, according
to medical experts.

My Late husband and I before is death once asked members of his family to
close one of our accounts and distribute the money which he had there to
charity organization in Ethiopia and Somalia; they refused and kept the
money to themselves. Hence, I do not trust them anymore, as they seem not
to be contended with what my late husband have left for them.

The last of my money, which no one knows of, is secured in a bank in
Europe worth US$15,000,000.00 (Fifteen million United States dollars
only)and secretly defaced and is coded for security reasons; this could be
release in short notice when a willing and acceptable partner emerges.

I will want you to help me collect this deposit and dispatched it to
charity organizations.I have set aside 20% for you and for your time
during this process

Please get back to me with the below information and i will give you more
details.

Name
Address in full
Telephone

I await your immidiate response


Regards,
Mrs Mary Ann Williams.




Ayudenme a entender eso y donde es que se origina el spam en mi server y como remediarlo, tengo el servidor suspendido tengo a los clientes quejándose de que no pueden enviar correo, por favor SOCORROOO!

Ayudenme, estoy al punto de la desesperación!
fusionado
Lo primero que debes de hacer es desactivar la funcion mail() en lo que encuentras la formar de detener el SPAM lo más seguro es alguna aplicación que este desactualizada.

Existen varias maneras de encontrar al spammer nobody busca en los mismo foros y encontraras mas informacion, mañana intento buscarte algo por ahora me voy a dormir que estoy fundido, saludos.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.