[Solved] Suspended: Waltersj

[waltersj]

username: waltersj

Server" Johnny

domain: http://kkdjcomputers....heliohost.org/

 

not sure why i was suspended..

[Byron]

You were suspended for sending spam mail.

[waltersj]

That is interesting - I don't send emails from this account but a few. I'm thinking someone has hacked my email - besides changing the password is there anything else I can do to stop it in the future, since it isn't me sending it.

[Byron]

This support request is being escalated to our root admin.

[waltersj]

Thank you

[Krydos]

Here is the abuse report we received regarding your account:

We have received a complaint about your account. Please investigate and fix within
24 hours.

Hurricane Electric Abuse Department
support@he.net

From fblbounces@senderscore.net  Mon Jul 20 06:42:32 2015
Return-Path: <fblbounces@senderscore.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from he.net (he.net [iPv6:2001:470:0:76::2])
       by abuse.he.net (Postfix) with SMTP id EA54754036D
       for <report@abuse.he.net>; Mon, 20 Jul 2015 06:42:31 -0700 (PDT)
Received: from mrb-fbl.returnpath.net ([66.45.29.179]) by he.net for <abuse@he.net>;
Mon, 20 Jul 2015 06:43:42 -0700
Received: from poma01.lan.returnpath.net (poma01.lan.returnpath.net [10.2.0.106])
       by mrb-fbl.returnpath.net (Postfix) with ESMTP id 0339062A02
       for <abuse@he.net>; Mon, 20 Jul 2015 07:42:30 -0600 (MDT)
Received: by poma01.lan.returnpath.net (Postfix, from userid 106706)
       id E300A606B3; Mon, 20 Jul 2015 07:42:29 -0600 (MDT)
Content-Type: multipart/report; boundary="_----------=_14373997492588209414";
report-type="feedback-report"
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.029 (F2.84; T2.04; A2.12; B3.13; Q3.13)
Date: Mon, 20 Jul 2015 07:42:29 -0600
Subject: Comcast Abuse Report
To: abuse@he.net
From: feedbackloop@comcastfbl.senderscore.net
Message-Id: <20150720134229.E300A606B3@poma01.lan.returnpath.net>
Content-Transfer-Encoding: 7bit

This is a multi-part message in MIME format.

----------=_14373997492588209414
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: text/plain

This is a Comcast email abuse report for an email message received from IP
64.62.211.131 on Tue, 14 Jul 2015 21:59:52 +0000


----------=_14373997492588209414
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: message/feedback-report

User-Agent: ReturnPathFBL/1.0
Abuse-Type: complaint
Arrival-Date: Tue, 14 Jul 2015 21:59:52 +0000
Feedback-Type: abuse
Version: 1
Source-IP: 64.62.211.131
Original-Rcpt-To: edc9076dd03a80a215dd864d4bb6bc51@comcast.net
Original-Mail-From: webmaster@kkdjcomputersolutions.heliohost.org
Reported-Domain: comcast.net

----------=_14373997492588209414
Content-Disposition: inline
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit

Path: waltersj@johnny.heliohost.org
Received: from reszmta-po-02v.sys.comcast.net (LHLO
 reszmta-po-02v.sys.comcast.net) (96.114.154.194) by
 resmail-po-109v.sys.comcast.net with LMTP; Tue, 14 Jul 2015 22:00:02 +0000
 (UTC)
Received: from resimta-po-16v.sys.comcast.net ([96.114.154.144]) by
 reszmta-po-02v.sys.comcast.net with comcast id sN011q01o37BgFU01N02LB; Tue,
 14 Jul 2015 22:00:02 +0000
Received: from johnny.heliohost.org ([64.62.211.131]) by
 resimta-po-16v.sys.comcast.net with comcast id sMzr1q00A2qf9oo01MzrJz; Tue,
 14 Jul 2015 21:59:52 +0000
X-CAA-SPAM: 00000
X-Authority-Analysis: v=2.1 cv=OrGysHLt c=1 sm=1 tr=0
 a=UGX5+mw3oW8i+imyuz22fA==:117 a=UGX5+mw3oW8i+imyuz22fA==:17
 a=aNpNqCiWAAAA:8 a=C_IRinGWAAAA:8 a=GGcpBh7Jt_oA:10 a=wobHAGljAAAA:8
 a=8nJEP1OIZ-IA:10 a=KT1TFeNMtz0A:10 a=zOBTXjUuO1YA:10
 a=idUeeBFZ0deVN4vmTlgA:9 a=wPNLvfGTeEIA:10 a=wt3RFIUIoAYA:10
 a=9cxlwZXvZSEA:10
Received: from waltersj by johnny.heliohost.org with local (Exim 4.82)
 (envelope-from <waltersj@johnny.heliohost.org>) id 1ZF8Ew-0004rV-8g for
 edc9076dd03a80a215dd864d4bb6bc51@comcast.net; Tue, 14 Jul 2015 14:59:50
 -0700
From: KKDJ Computer Solutions Support Forum
 <webmaster@kkdjcomputersolutions.heliohost.org>
X-Mailer: YaBB Sendmail
Subject: Activation information for KKDJ Computer Solutions Support Forum
Content-Type: text/plain; charset=ISO-8859-1
Message-Id: <E1ZF8Ew-0004rV-8g@johnny.heliohost.org>
Date: Tue, 14 Jul 2015 14:59:50 -0700
X-AntiAbuse: This header was added to track abuse, please include it with
 any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain - comcast.net
X-AntiAbuse: Originator/Caller UID/GID - [30802 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - johnny.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id:
 waltersj/from_h
X-Source: /usr/local/bin/perl
X-Source-Args: /usr/bin/perl -- YaBB.pl 
X-Source-Dir: kkdjcomputersolutions.heliohost.org:/public_html/cgi-bin/yabb2
To: edc9076dd03a80a215dd864d4bb6bc51@comcast.net
Content-Transfer-Encoding: quoted-printable

Welcome, MarilynTurnYO!
Here is your account validation link.

You have been successfully pre-registered at KKDJ Computer Solutions Supp=
ort Forum.
Please validate your account within 2 hours!

Please click on the link below to activate your user account

http://kkdjcomputersolutions.heliohost.org/cgi-bin/yabb2/YaBB.pl?action=3D=
activate&username=3D173B28333623340E2F28345A0&activationkey=3DRk8n7Osyljz=
f771KYyte

If the link does not work (or if you use AOL or a browser-based Email pro=
gram), copy the link and insert it  in the address bar of your Web browse=
r.

Regards,
The KKDJ Computer Solutions Support Forum team

-----
----------=_14373997492588209414--

My guess is that spam bots have discovered your yabb forum, and are creating accounts with random email addresses. One of those email addresses actually belong to someone and they flagged your email as spam since the bot tried to create the account not them. Let us know if you need more help with this.

 

Your account has been unsuspended.

[waltersj]

Thanks, yes I have had some bots using the forum - added the email verification to try an weed them out. This is exactly as you suggest, they used a real account for once.

I will remove the email verification for now - that should resolve the issue, is there anything else I can try and do to stop the bots from hitting the forum - not sure what else to do with it to avoid this issue going forward and trying to stop the bots.