RE: Website link for 66.172.9.19

Hello Folks - It looks like the problem has been resolved for mailserver
66.172.9.19 .  I put in a removal request on the 18th, so I was wondering if
you could expedite my removal request if you get a chance.

Thank you, 

Jim

___________________________

*  *  Jim Guiltinan
  *   ABW Host, LLC
*  *  http://abwhost.net
  *   "Industrial Strength Web Hosting"

Support URLs:
http://abwhost.net/faq/
http://bizorgnet.com
     
-----Original Message-----
From: Dick Wesseling [mailto:[email protected]] 
Sent: Thursday, May 11, 2006 7:07 AM
To: Jim Guiltinan
Cc: [email protected]
Subject: Re: Website link for 66.172.9.19


"Jim Guiltinan" <[email protected]> wrote:

> OK thank you Bert.  I am now emailing to all my customers a broadcast 
> message informing them of the requirement to change their passwords to 
> secure ones.  If they don't, we'll change it for them to a secure one.
>
> This way we won't be the low hanging fruit on the Net regarding pop3 
> accounts or FTP accounts.

I noticed that the received: headers of the DSBL test messages have the SMTP
Auth username attached in front of the IP "([email protected])", but the spam's
received header does not reveal a username, so this may not even be a
authorization exploit (but I'm not a qmail expert).
Attached are the headers of the first spamtrap hit. From: and
return-path: appear to be valid. Dehoon.be is probably just a nitwit who
fell for the charms of a spammer-for-hire.

The spam claims to be a "weekly free newsletter" so issue #3 should arrive
at your server one of these days.


Return-Path: <[email protected]>
Received: from www5.usbusinessweb.net (www5.usbusinessweb.net [66.172.9.19])
by masked with SMTP
	for <masked>; Fri, 28 Apr 2006 16:50:40 +0200
Received: (qmail 16656 invoked from network); 28 Apr 2006 14:50:32 -0000
Received: from adsl-tplus-71-6.telecomplus.net (HELO optimium) (196.27.71.6)
  by www5.usbusinessweb.net with SMTP; 28 Apr 2006 14:50:32 -0000
To: <masked>
From: "De Hoon" <[email protected]>
Organization: De Hoon
Reply-To: "De Hoon" <[email protected]>
Subject: Nieuwsbrief 28 April 2006 - http://www.dehoon.be
Date: Fri, 28 Apr 2006 18:25:13 +0400
Message-Id: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary=fublneofaaorjgejenfcnhsftqqfefosphanoklq