• The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

spammer?

R

rviradia

Guest
I seem to have a spammer on a server and can't figure out how he's spamming through the server. Basically a email user will send mail to a single email address and get a response such as the one below, any clue what could be happening?

Thanks in advance

> Hi. This is the qmail-send program at plesk100.server.com.
> I'm afraid I wasn't able to deliver your message to the following
> addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <@plesk100.server.com>:
> Sorry. Although I'm listed as a best-preference MX or A for that host,
> it isn't in my control/locals file, so I don't treat it as local.
> (#5.4.6)
>
> <[email protected]>:
> 207.115.37.21 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.21.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta531.mail.mud.yahoo.com
>
> <[email protected]>:
> 66.196.97.250 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta125.mail.re3.yahoo.com
>
> <[email protected]>:
> 137.118.16.2 does not like recipient.
> Remote host said: 550 sorry, no mailbox here by that name (#5.1.1)
> Giving up on 137.118.16.2.
>
> <[email protected]>:
> 69.214.241.253 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient
> address rejected: User unknown in relay recipient table
> Giving up on 69.214.241.253.
>
> <[email protected]>:
> 207.69.189.217 does not like recipient.
> Remote host said: 550 [email protected]...Due to extended
> inactivity new mail is not currently being accepted for this mailbox.
> Giving up on 207.69.189.217.
>
> <[email protected]>:
> 68.1.17.3 does not like recipient.
> Remote host said: 550 <[email protected]> recipient rejected
> Giving up on 68.1.17.3.
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta216.mail.re3.yahoo.com
>
> <[email protected]>:
> 209.86.93.226 does not like recipient.
> Remote host said: 550 [email protected]...User unknown
> Giving up on 209.86.93.226.
>
> <[email protected]>:
> 207.115.37.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.23.
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 65.54.244.168 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.168.
>
> <[email protected]>:
> 65.54.244.232 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.232.
>
> <[email protected]>:
> 207.115.36.20 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.36.20.
>
> <[email protected]>:
> 216.39.53.1 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta366.mail.re4.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldap:eek:u=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 24.40.8.248 does not like recipient.
> Remote host said: 550 Mailbox unavailable or access denied -
> <[email protected]>
> Giving up on 24.40.8.248.
>
> <[email protected]>:
> 209.191.88.247 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta282.mail.mud.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldap:eek:u=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> Connected to 204.127.198.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldap:eek:u=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] - mta206.mail.re3.yahoo.com
>
> <[email protected]>:
> 207.115.20.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>...
> Addressee unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.20.23.
>
> <[email protected]>:
> Connected to 12.102.240.23 but sender was rejected.
> Remote host said: 550-209.xxx.xxx.xx blocked by
> ldap:eek:u=rblmx,dc=worldnet,dc=att,dc=net
> 550 Blocked for abuse. See http://www.att.net/general-info/
> rblinquiry.html
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#5.1.6]. - mta566.mail.mud.yahoo.com
>
> <[email protected]>:
> 64.136.164.29 does not like recipient.
> Remote host said: 550 5.1.1 <[email protected]> is not a valid
> mailbox
> Giving up on 64.136.164.29.
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta237.mail.re4.yahoo.com
>
> <[email protected]>:
> Sorry, I couldn't find any host named se.hroc.navy.mil. (#5.1.2)
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta553.mail.mud.yahoo.com
>
> <[email protected]>:
> 205.152.58.33 does not like recipient.
> Remote host said: 550 Invalid recipient: <[email protected]>
> Giving up on 205.152.58.33.
>
> <[email protected]>:
> 216.200.145.35 failed after I sent the message.
> Remote host said: 550 Account Inactive
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta230.mail.re4.yahoo.com
>
> <[email protected]>:
> 195.121.6.51 does not like recipient.
> Remote host said: 550 5.1.6 Recipient no longer on server:
> [email protected]
> Giving up on 195.121.6.51.
>
> <[email protected]>:
> 64.18.7.10 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient address
> rejected: 5.1.1 <[email protected]>... User unknown
> Giving up on 64.18.7.10.
>
> <[email protected]>:
> 209.55.1.140 failed after I sent the message.
> Remote host said: 550 5.6.0 Lone CR or LF in headers (see RFC2822
> section 2.2)
>
> <[email protected]>:
> 209.153.3.15 does not like recipient.
> Remote host said: 550 User unknown.
> Giving up on 209.153.3.15.
 
Back
Top