waltersj Posted July 22, 2015 Posted July 22, 2015 username: waltersjServer" Johnnydomain: http://kkdjcomputers....heliohost.org/ not sure why i was suspended.. 1
waltersj Posted July 23, 2015 Author Posted July 23, 2015 That is interesting - I don't send emails from this account but a few. I'm thinking someone has hacked my email - besides changing the password is there anything else I can do to stop it in the future, since it isn't me sending it.
Byron Posted July 23, 2015 Posted July 23, 2015 This support request is being escalated to our root admin.
Krydos Posted July 25, 2015 Posted July 25, 2015 Here is the abuse report we received regarding your account: We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From fblbounces@senderscore.net Mon Jul 20 06:42:32 2015 Return-Path: <fblbounces@senderscore.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from he.net (he.net [iPv6:2001:470:0:76::2]) by abuse.he.net (Postfix) with SMTP id EA54754036D for <report@abuse.he.net>; Mon, 20 Jul 2015 06:42:31 -0700 (PDT) Received: from mrb-fbl.returnpath.net ([66.45.29.179]) by he.net for <abuse@he.net>; Mon, 20 Jul 2015 06:43:42 -0700 Received: from poma01.lan.returnpath.net (poma01.lan.returnpath.net [10.2.0.106]) by mrb-fbl.returnpath.net (Postfix) with ESMTP id 0339062A02 for <abuse@he.net>; Mon, 20 Jul 2015 07:42:30 -0600 (MDT) Received: by poma01.lan.returnpath.net (Postfix, from userid 106706) id E300A606B3; Mon, 20 Jul 2015 07:42:29 -0600 (MDT) Content-Type: multipart/report; boundary="_----------=_14373997492588209414"; report-type="feedback-report" MIME-Version: 1.0 X-Mailer: MIME::Lite 3.029 (F2.84; T2.04; A2.12; B3.13; Q3.13) Date: Mon, 20 Jul 2015 07:42:29 -0600 Subject: Comcast Abuse Report To: abuse@he.net From: feedbackloop@comcastfbl.senderscore.net Message-Id: <20150720134229.E300A606B3@poma01.lan.returnpath.net> Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. ----------=_14373997492588209414 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: text/plain This is a Comcast email abuse report for an email message received from IP 64.62.211.131 on Tue, 14 Jul 2015 21:59:52 +0000 ----------=_14373997492588209414 Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Type: message/feedback-report User-Agent: ReturnPathFBL/1.0 Abuse-Type: complaint Arrival-Date: Tue, 14 Jul 2015 21:59:52 +0000 Feedback-Type: abuse Version: 1 Source-IP: 64.62.211.131 Original-Rcpt-To: edc9076dd03a80a215dd864d4bb6bc51@comcast.net Original-Mail-From: webmaster@kkdjcomputersolutions.heliohost.org Reported-Domain: comcast.net ----------=_14373997492588209414 Content-Disposition: inline Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Path: waltersj@johnny.heliohost.org Received: from reszmta-po-02v.sys.comcast.net (LHLO reszmta-po-02v.sys.comcast.net) (96.114.154.194) by resmail-po-109v.sys.comcast.net with LMTP; Tue, 14 Jul 2015 22:00:02 +0000 (UTC) Received: from resimta-po-16v.sys.comcast.net ([96.114.154.144]) by reszmta-po-02v.sys.comcast.net with comcast id sN011q01o37BgFU01N02LB; Tue, 14 Jul 2015 22:00:02 +0000 Received: from johnny.heliohost.org ([64.62.211.131]) by resimta-po-16v.sys.comcast.net with comcast id sMzr1q00A2qf9oo01MzrJz; Tue, 14 Jul 2015 21:59:52 +0000 X-CAA-SPAM: 00000 X-Authority-Analysis: v=2.1 cv=OrGysHLt c=1 sm=1 tr=0 a=UGX5+mw3oW8i+imyuz22fA==:117 a=UGX5+mw3oW8i+imyuz22fA==:17 a=aNpNqCiWAAAA:8 a=C_IRinGWAAAA:8 a=GGcpBh7Jt_oA:10 a=wobHAGljAAAA:8 a=8nJEP1OIZ-IA:10 a=KT1TFeNMtz0A:10 a=zOBTXjUuO1YA:10 a=idUeeBFZ0deVN4vmTlgA:9 a=wPNLvfGTeEIA:10 a=wt3RFIUIoAYA:10 a=9cxlwZXvZSEA:10 Received: from waltersj by johnny.heliohost.org with local (Exim 4.82) (envelope-from <waltersj@johnny.heliohost.org>) id 1ZF8Ew-0004rV-8g for edc9076dd03a80a215dd864d4bb6bc51@comcast.net; Tue, 14 Jul 2015 14:59:50 -0700 From: KKDJ Computer Solutions Support Forum <webmaster@kkdjcomputersolutions.heliohost.org> X-Mailer: YaBB Sendmail Subject: Activation information for KKDJ Computer Solutions Support Forum Content-Type: text/plain; charset=ISO-8859-1 Message-Id: <E1ZF8Ew-0004rV-8g@johnny.heliohost.org> Date: Tue, 14 Jul 2015 14:59:50 -0700 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - johnny.heliohost.org X-AntiAbuse: Original Domain - comcast.net X-AntiAbuse: Originator/Caller UID/GID - [30802 32007] / [47 12] X-AntiAbuse: Sender Address Domain - johnny.heliohost.org X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: waltersj/from_h X-Source: /usr/local/bin/perl X-Source-Args: /usr/bin/perl -- YaBB.pl X-Source-Dir: kkdjcomputersolutions.heliohost.org:/public_html/cgi-bin/yabb2 To: edc9076dd03a80a215dd864d4bb6bc51@comcast.net Content-Transfer-Encoding: quoted-printable Welcome, MarilynTurnYO! Here is your account validation link. You have been successfully pre-registered at KKDJ Computer Solutions Supp= ort Forum. Please validate your account within 2 hours! Please click on the link below to activate your user account http://kkdjcomputersolutions.heliohost.org/cgi-bin/yabb2/YaBB.pl?action=3D= activate&username=3D173B28333623340E2F28345A0&activationkey=3DRk8n7Osyljz= f771KYyte If the link does not work (or if you use AOL or a browser-based Email pro= gram), copy the link and insert it in the address bar of your Web browse= r. Regards, The KKDJ Computer Solutions Support Forum team ----- ----------=_14373997492588209414-- My guess is that spam bots have discovered your yabb forum, and are creating accounts with random email addresses. One of those email addresses actually belong to someone and they flagged your email as spam since the bot tried to create the account not them. Let us know if you need more help with this. Your account has been unsuspended.
waltersj Posted July 25, 2015 Author Posted July 25, 2015 Thanks, yes I have had some bots using the forum - added the email verification to try an weed them out. This is exactly as you suggest, they used a real account for once.I will remove the email verification for now - that should resolve the issue, is there anything else I can try and do to stop the bots from hitting the forum - not sure what else to do with it to avoid this issue going forward and trying to stop the bots.
Recommended Posts