Re: Website link for 194.143.132.10
"Alexey Lobanov (dsbl)" <[email protected]>
| Newsgroups | gmane.mail.spam.dsbl.admin |
|---|---|
| Organization | DSBL volunteer |
| Message-ID | <[email protected]> |
Hello. On 17/02/06 12:42, Philippe JEAN - Prosygma Hébergement wrote: > Dear Alexey Lobanov, > > Thanks a lot for your help > I performed tests on > http://www.antispam-ufrj.pads.ufrj.br/cgi-bin/test-relay.cgi?host_to_test=19 > 4.143.132.10 > and it said : > > Relay test result > All tests performed, no relays accepted by remote host. > > Can you simply say me on wich test dslbl failed ? All the necessary information is available in links from "Messages from this host" section at http://dsbl.org/listing?194.143.132.10 An example: IP: 194.143.132.10 Input IP: 194.143.132.10 Transport: smtp Message Received: 2006/02/16 13:39:14 UTC Message Sent By: anonymous Extended Information for Transport: AUTH LOGIN, user=test MAIL FROM:<[email protected]> RCPT TO:<[email protected]> We see that your system has easily guessable password for user "test". And, possibly, for many other accounts, because you obviously do not run any password strength auditing tool in your system. Professional spammers intensively use this class of vulnerabilities since mid-2002, they just check about 200 combinations of typical accounts and simple passwords. Same DSBL test does. Alexey > > > > Cordialement, > > ******************************************************** > Prosygma se developpe en dehors des frontieres : > consultez : http://www.sygmahosting.ma > ******************************************************** > > ----------------------------------------- > Philippe JEAN > Société Akilao Prosygma Hébergement > Batiment PROLOGUE I > La Pyrénéenne > 31312 LABEGE Cedex > http://www.prosygma.com > Service technique : 08 92 23 01 15 > Service commercial : 05 61 75 96 30 > Fax : 05 61 75 96 30 > ----------------------------------------- > > De : Alexey Lobanov (dsbl) <[email protected]> > À : Philippe JEAN - Prosygma Hébergement <[email protected]> > CC : [email protected] > Répondre à : [email protected] > Date : 16 févr. 2006 - 14:46 > > > > Hello again. > > On 16/02/06 16:06, Alexey Lobanov (dsbl) wrote: > >> May we hope that you have performed a full internal security audit and >> your system has no more weak passwords? > > No, we may not :-( Your system is still vulnerable and is still abused. > > http://dsbl.org/message?32240035 > >