Register a domain and help support LQ
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 06-07-2012, 12:11 AM   #1
Registered: Oct 2011
Posts: 164

Rep: Reputation: Disabled
Fail2ban Generating spam message

Hi all
i had installed iredmail mail server in ubuntu 10.04 lucid server .But yesterday my ipaddress was blocked by internet service provider regarding sending out spammessage to outside world.Fail2ban is the package comes out with default installation of iredmail server

Category: info
Report-Type: info
Service: badbot
Version: 0.1
User-Agent: Fail2BanFeedBackScript V0.1
Date: Mon, 04 Jun 2012 14:34:46 +0200
Source-Type: ip-address
Source: ip-address
Port: 80
Attachment: text/plain

My ipaddress was blocked due to my system was generating the below spam message

I Had removed fail2ban package from my server .Can anyone advise me how can proceed furthur to block such spam message generating without my knowledge.How can fail2ban generate such spam message

wpTextbox1: What's the interest rate on this account? <a href=" hxxp:// ">bbs porn pass</a> lol the guys looking at her like 'OMFG!!!' when shes riding him
<a href=" hxxp:// ">cp bbs cgi galleries</a> wow that was actually pretty damn hot lol
<a href=" hxxp:// ">zeps gallery lo bbs</a> If you find it let me know, xxxandra
<a href=" hxxp:// ">elwebbs samples</a> Ladynubiia India is on the continent of Asia (FYI go touch up on your geo before you start saying shit)
<a href=" hxxp:// ">bbs forum boy</a> hmmmm the end bit is tasty xxx
<a href=" hxxp:// ">bbs elweb wombat</a> That fucking crazy... This video is wrong
<a href=" hxxp:// ">super bbs in porn</a> tutto li'?
<a href=" hxxp:// ">Ptsc bbs pictures</a> where are my keys, i need to drive around
<a href=" hxxp:// ">bbs chill</a> she is a hot girl
<a href=" hxxp:// ">nude teenager bbs</a> damn..this is so fucking hot..i may have to find someone to fuck.. now

wpSummary: What's the interest rate on this account? <a href=" hxxp:// ">bbs porn pass</a> lol the guys looking at her like 'OMFG!!!' when shes riding him
<a href=" hxxp://

Last edited by sanjay87; 06-07-2012 at 12:13 AM.
Old 06-07-2012, 01:21 AM   #2
Senior Member
Registered: Mar 2012
Posts: 1,065

Rep: Reputation: 246Reputation: 246Reputation: 246
I really don't think it is your fail2ban that is the problem, it only sends reports of bans to the address you have configured in the config.

More likely is that THEY are using fail2ban with some custom scripting to ID spam arriving in their honeypot addresses and to notify the admin of the bad servers (you).

You need to check your mail server logs and see what is going on.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix/qmgr message in logs seems to indicate spam sent haymaker2000 Linux - Server 4 08-25-2010 03:53 PM
printing problem generating message (unsupported personilty :PCL) bharatlalgupta Red Hat 12 02-14-2010 02:53 PM
spam filter that puts spam into spam folder? paul_mat Linux - Software 3 03-31-2009 04:18 AM
Reporting spam by forwarded message broadcast Linux - General 2 03-21-2007 08:51 AM
Parsing a message directly to spam assassin cpanelskindepot Linux - Software 2 02-01-2005 08:59 PM

All times are GMT -5. The time now is 10:25 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration