[Answered] Listed As A Spam Source?

[ATTO]

Hi!

 

I have just tried to send an e-mail and got back the following message:

 

This message was created automatically by mail delivery software.

 

A message that you sent could not be delivered to one or more of its

recipients. This is a permanent error. The following address(es) failed:

 

monolit.hs@dir.bg

SMTP error from remote mail server after RCPT TO:<monolit.hs@dir.bg>:

host mail.dir.bg [194.145.63.28]: 591 monolit.hs@dir.bg your host [65.19.143.2] is blacklisted by cbl.abuseat.org. Send your questions to blacklist-admin@srv.dir.bg

 

 

I went to the http://cbl.abuseat.org and then to http://cbl.abuseat.org/lookup.cgi and entered there [65.19.143.2]. Below is the result:

 

IP Address 65.19.143.2 is listed in the CBL. It appears to be infected with a spam sending trojan, proxy or some other form of botnet.

It was last detected at 2013-06-01 00:00 GMT (+/- 30 minutes), approximately 2 days, 8 hours, 29 minutes ago.

It has been relisted following a previous removal at 2013-01-24 19:36 GMT (129 days, 13 hours ago)

IMPORTANT

 

We have detected that this IP is NATting for, or is infected itself, with a Linux (or possibly some other Unix-like system such as FreeBSD) Trojan spam mailer script.

This is no joke. This infection is extremely dangerous for it can download anything it wishes, and needs to be removed ASAP.

 

An so on. I attach the whole text as a PDF file. Already delisted the host, but you might be interested anyway.

The CBL.pdf

[Krydos]

Generally it's a terrible idea to unlist an ip address as a spam source unless you're an administrator for that ip and you're relatively certain that the spam account(s) have been suspended. If you unlist an ip address and the spam continues and the ip address gets relisted then they could permanently block the ip address from being unlisted in the future.