Re: Website link for 194.143.132.10

"Alexey Lobanov (dsbl)" <[email protected]>
Newsgroups gmane.mail.spam.dsbl.admin
Organization DSBL volunteer
Message-ID <[email protected]>
Hello.

On 17/02/06 12:42, Philippe JEAN - Prosygma Hébergement wrote:

> Dear Alexey Lobanov,
> 
> Thanks a lot for your help
> I performed tests on
> http://www.antispam-ufrj.pads.ufrj.br/cgi-bin/test-relay.cgi?host_to_test=19
> 4.143.132.10
> and it said :
> 
> Relay test result
> All tests performed, no relays accepted by remote host.
> 
> Can you simply say me on wich test dslbl failed ?

All the necessary information is available in links from "Messages from 
this host" section at http://dsbl.org/listing?194.143.132.10

An example:

IP: 194.143.132.10
Input IP: 194.143.132.10
Transport: smtp
Message Received: 2006/02/16 13:39:14 UTC
Message Sent By: anonymous
Extended Information for Transport:
AUTH LOGIN, user=test
MAIL FROM:<[email protected]>
RCPT TO:<[email protected]>

We see that your system has easily guessable password for user "test". 
And, possibly, for many other accounts, because you obviously do not run 
any password strength auditing tool in your system.

Professional spammers intensively use this class of vulnerabilities 
since mid-2002, they just check about 200 combinations of typical 
accounts and simple passwords. Same DSBL test does.

Alexey


> 
> 
> 
> Cordialement,
> 
> ********************************************************
> Prosygma se developpe en dehors des frontieres :
> consultez : http://www.sygmahosting.ma
> ********************************************************
> 
> -----------------------------------------
> Philippe JEAN
> Société Akilao Prosygma Hébergement
> Batiment PROLOGUE I
> La Pyrénéenne
> 31312 LABEGE Cedex
> http://www.prosygma.com
> Service technique : 08 92 23 01 15
> Service commercial : 05 61 75 96 30
> Fax : 05 61 75 96 30
> -----------------------------------------
> 
> De : Alexey Lobanov (dsbl) <[email protected]>
> À : Philippe JEAN - Prosygma Hébergement <[email protected]>
> CC : [email protected]
> Répondre à : [email protected]
> Date : 16 févr. 2006 - 14:46
> 
> 
> 
> Hello again.
> 
> On 16/02/06 16:06, Alexey Lobanov (dsbl) wrote:
> 
>> May we hope that you have performed a full internal security audit and
>> your system has no more weak passwords?
> 
> No, we may not :-( Your system is still vulnerable and is still abused.
> 
> http://dsbl.org/message?32240035
> 
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.