R
rviradia
Guest
I seem to have a spammer on a server and can't figure out how he's spamming through the server. Basically a email user will send mail to a single email address and get a response such as the one below, any clue what could be happening?
Thanks in advance
> Hi. This is the qmail-send program at plesk100.server.com.
> I'm afraid I wasn't able to deliver your message to the following
> addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <@plesk100.server.com>:
> Sorry. Although I'm listed as a best-preference MX or A for that host,
> it isn't in my control/locals file, so I don't treat it as local.
> (#5.4.6)
>
> <[email protected]>:
> 207.115.37.21 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.21.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta531.mail.mud.yahoo.com
>
> <[email protected]>:
> 66.196.97.250 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta125.mail.re3.yahoo.com
>
> <[email protected]>:
> 137.118.16.2 does not like recipient.
> Remote host said: 550 sorry, no mailbox here by that name (#5.1.1)
> Giving up on 137.118.16.2.
>
> <[email protected]>:
> 69.214.241.253 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient
> address rejected: User unknown in relay recipient table
> Giving up on 69.214.241.253.
>
> <[email protected]>:
> 207.69.189.217 does not like recipient.
> Remote host said: 550 [email protected]...Due to extended
> inactivity new mail is not currently being accepted for this mailbox.
> Giving up on 207.69.189.217.
>
> <[email protected]>:
> 68.1.17.3 does not like recipient.
> Remote host said: 550 <[email protected]> recipient rejected
> Giving up on 68.1.17.3.
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta216.mail.re3.yahoo.com
>
> <[email protected]>:
> 209.86.93.226 does not like recipient.
> Remote host said: 550 [email protected]...User unknown
> Giving up on 209.86.93.226.
>
> <[email protected]>:
> 207.115.37.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.23.
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 65.54.244.168 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.168.
>
> <[email protected]>:
> 65.54.244.232 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.232.
>
> <[email protected]>:
> 207.115.36.20 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.36.20.
>
> <[email protected]>:
> 216.39.53.1 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta366.mail.re4.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 24.40.8.248 does not like recipient.
> Remote host said: 550 Mailbox unavailable or access denied -
> <[email protected]>
> Giving up on 24.40.8.248.
>
> <[email protected]>:
> 209.191.88.247 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta282.mail.mud.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> Connected to 204.127.198.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] - mta206.mail.re3.yahoo.com
>
> <[email protected]>:
> 207.115.20.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>...
> Addressee unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.20.23.
>
> <[email protected]>:
> Connected to 12.102.240.23 but sender was rejected.
> Remote host said: 550-209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=worldnet,dc=att,dc=net
> 550 Blocked for abuse. See http://www.att.net/general-info/
> rblinquiry.html
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#5.1.6]. - mta566.mail.mud.yahoo.com
>
> <[email protected]>:
> 64.136.164.29 does not like recipient.
> Remote host said: 550 5.1.1 <[email protected]> is not a valid
> mailbox
> Giving up on 64.136.164.29.
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta237.mail.re4.yahoo.com
>
> <[email protected]>:
> Sorry, I couldn't find any host named se.hroc.navy.mil. (#5.1.2)
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta553.mail.mud.yahoo.com
>
> <[email protected]>:
> 205.152.58.33 does not like recipient.
> Remote host said: 550 Invalid recipient: <[email protected]>
> Giving up on 205.152.58.33.
>
> <[email protected]>:
> 216.200.145.35 failed after I sent the message.
> Remote host said: 550 Account Inactive
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta230.mail.re4.yahoo.com
>
> <[email protected]>:
> 195.121.6.51 does not like recipient.
> Remote host said: 550 5.1.6 Recipient no longer on server:
> [email protected]
> Giving up on 195.121.6.51.
>
> <[email protected]>:
> 64.18.7.10 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient address
> rejected: 5.1.1 <[email protected]>... User unknown
> Giving up on 64.18.7.10.
>
> <[email protected]>:
> 209.55.1.140 failed after I sent the message.
> Remote host said: 550 5.6.0 Lone CR or LF in headers (see RFC2822
> section 2.2)
>
> <[email protected]>:
> 209.153.3.15 does not like recipient.
> Remote host said: 550 User unknown.
> Giving up on 209.153.3.15.
Thanks in advance
> Hi. This is the qmail-send program at plesk100.server.com.
> I'm afraid I wasn't able to deliver your message to the following
> addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <@plesk100.server.com>:
> Sorry. Although I'm listed as a best-preference MX or A for that host,
> it isn't in my control/locals file, so I don't treat it as local.
> (#5.4.6)
>
> <[email protected]>:
> 207.115.37.21 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.21.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta531.mail.mud.yahoo.com
>
> <[email protected]>:
> 66.196.97.250 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta125.mail.re3.yahoo.com
>
> <[email protected]>:
> 137.118.16.2 does not like recipient.
> Remote host said: 550 sorry, no mailbox here by that name (#5.1.1)
> Giving up on 137.118.16.2.
>
> <[email protected]>:
> 69.214.241.253 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient
> address rejected: User unknown in relay recipient table
> Giving up on 69.214.241.253.
>
> <[email protected]>:
> 207.69.189.217 does not like recipient.
> Remote host said: 550 [email protected]...Due to extended
> inactivity new mail is not currently being accepted for this mailbox.
> Giving up on 207.69.189.217.
>
> <[email protected]>:
> 68.1.17.3 does not like recipient.
> Remote host said: 550 <[email protected]> recipient rejected
> Giving up on 68.1.17.3.
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta216.mail.re3.yahoo.com
>
> <[email protected]>:
> 209.86.93.226 does not like recipient.
> Remote host said: 550 [email protected]...User unknown
> Giving up on 209.86.93.226.
>
> <[email protected]>:
> 207.115.37.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.37.23.
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 65.54.244.168 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.168.
>
> <[email protected]>:
> 65.54.244.232 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.244.232.
>
> <[email protected]>:
> 207.115.36.20 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>... Addressee
> unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.36.20.
>
> <[email protected]>:
> 216.39.53.1 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta366.mail.re4.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 24.40.8.248 does not like recipient.
> Remote host said: 550 Mailbox unavailable or access denied -
> <[email protected]>
> Giving up on 24.40.8.248.
>
> <[email protected]>:
> 209.191.88.247 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta282.mail.mud.yahoo.com
>
> <[email protected]>:
> Connected to 204.127.225.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> Connected to 204.127.198.26 but sender was rejected.
> Remote host said: 550 209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please
> see http://www.comcast.net/help/faq/index.jsp?
> faq=SecurityMail_Policy18628
>
> <[email protected]>:
> 68.142.237.182 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] - mta206.mail.re3.yahoo.com
>
> <[email protected]>:
> 207.115.20.23 does not like recipient.
> Remote host said: 553 5.3.0 <[email protected]>...
> Addressee unknown, relay=[209.xxx.xxx.xx]
> Giving up on 207.115.20.23.
>
> <[email protected]>:
> Connected to 12.102.240.23 but sender was rejected.
> Remote host said: 550-209.xxx.xxx.xx blocked by
> ldapu=rblmx,dc=worldnet,dc=att,dc=net
> 550 Blocked for abuse. See http://www.att.net/general-info/
> rblinquiry.html
>
> <[email protected]>:
> 65.54.245.72 does not like recipient.
> Remote host said: 550 Requested action not taken: mailbox unavailable
> Giving up on 65.54.245.72.
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#5.1.6]. - mta566.mail.mud.yahoo.com
>
> <[email protected]>:
> 64.136.164.29 does not like recipient.
> Remote host said: 550 5.1.1 <[email protected]> is not a valid
> mailbox
> Giving up on 64.136.164.29.
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd This user doesn't have a
> yahoo.com account ([email protected]) [0] -
> mta237.mail.re4.yahoo.com
>
> <[email protected]>:
> Sorry, I couldn't find any host named se.hroc.navy.mil. (#5.1.2)
>
> <[email protected]>:
> 209.191.118.103 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta553.mail.mud.yahoo.com
>
> <[email protected]>:
> 205.152.58.33 does not like recipient.
> Remote host said: 550 Invalid recipient: <[email protected]>
> Giving up on 205.152.58.33.
>
> <[email protected]>:
> 216.200.145.35 failed after I sent the message.
> Remote host said: 550 Account Inactive
>
> <[email protected]>:
> 216.39.53.2 failed after I sent the message.
> Remote host said: 554 delivery error: dd Sorry your message to
> [email protected] cannot be delivered. This account has been
> disabled or discontinued [#102]. - mta230.mail.re4.yahoo.com
>
> <[email protected]>:
> 195.121.6.51 does not like recipient.
> Remote host said: 550 5.1.6 Recipient no longer on server:
> [email protected]
> Giving up on 195.121.6.51.
>
> <[email protected]>:
> 64.18.7.10 does not like recipient.
> Remote host said: 550 <[email protected]>: Recipient address
> rejected: 5.1.1 <[email protected]>... User unknown
> Giving up on 64.18.7.10.
>
> <[email protected]>:
> 209.55.1.140 failed after I sent the message.
> Remote host said: 550 5.6.0 Lone CR or LF in headers (see RFC2822
> section 2.2)
>
> <[email protected]>:
> 209.153.3.15 does not like recipient.
> Remote host said: 550 User unknown.
> Giving up on 209.153.3.15.