[ale] Were we hacked?

[Joe Steele]

Listed below are the IPs which are shown as the source.  Unless they 
belong to you, then I doubt you are the source.  The netblock 200.80.47/24 
(located in Argentina) is shown to be a source of spam per 
http://spamcop.net/w3m?action=checkblock&ip=200.80.47.29

You are getting the failure notices because the spammer used 
lloydcarter at ChangingLINKS.com as the envelope sender address.

--Joe

200.80.47.29
200.80.47.254
200.80.47.29
200.80.47.235
200.153.75.37 In Brazil. See http://www.spews.org/ask.cgi?x=200.153.75.37
200.80.47.207
200.80.47.29

-----Original Message-----
From:	ChangingLINKS.com [SMTP:x3 at ChangingLINKS.com]
Sent:	Tuesday, November 05, 2002 5:48 PM
To:	ale at ale.org
Subject:	[block] [ale] Were we hacked?

Yesterday, I started getting bounced emails that I did not send out. Can you 
tell me if the origin of the email was my client/local machine or remote 
server?
I am thinking that I may have gotten a "emailing virus" hacked into my local 
machine, or that my server was hacked. I got several reports that emails sent 
to me two weeks ago bounced (which may be related) for the first time. I 
understand that there are also ways that someone could send email via my 
server without hacking it - I just need to figure out what is happening 
before I get blamed for it.


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.