AirNavSystems IP address listed as spam source?

Started by shouriken, July 06, 2015, 06:45:00 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

shouriken

When sending the RB report to the Mode_s yahoo group, I get the following message:
QuoteMailEnable: Message could not be delivered to some recipients.
The following recipient(s) could not be reached:

        Recipient: [SMTP:[email protected]]
        Reason: 553 5.7.1 [BL21] Connections will not be accepted from 96.31.64.6, because the ip is in Spamhaus's list; see http://postmaster.yahoo.com/550-bl23.html
96.31.64.6 is AirNav' IP address:
PING airnavsystems.com (96.31.64.6)

QuoteIP Address 96.31.64.6 is listed in the CBL. It shows signs of being infected with a spam sending trojan, malicious link or some other form of botnet.

It was last detected at 2015-06-28 13:00 GMT (+/- 30 minutes), approximately 7 days, 17 hours, 30 minutes ago.

This IP is infected with, or is NATting for a machine that is sending very large volumes of phish spam. "Phishes" are attempts to trick users into revealing their userids and passwords to other sites - often the user's bank or paypal, or some other site where they can steal money.

Recently, most of these infections have been on multi-website hosting sites, where one or more users have had their userids and passwords stolen or cracked. In some cases, checking your mail server logs to find how who is sending large quantities of email will find the infecdtion. In other cases, the infected user's domain name may be used in the HELO - which in this case was "tampa1.airnavsystems.com".
Liviu
A.net JetPhotos.Net
RadarBox
2xRTL USB + Franklin+Collinear antenna + PlanePlotter

Runway 31

I received Airnav logs from the same forum this morning  I will however pass this on to Airnav and get them to look into it.

Many thanks

Alan

Runway 31

#2
Liviu, your log has just come through to me.  3 of your 4 unknowns are already in the d/b.

Alan

shouriken

My log was sent manually from my yahoo account, not by ANRB.
Liviu
A.net JetPhotos.Net
RadarBox
2xRTL USB + Franklin+Collinear antenna + PlanePlotter

Runway 31


AirNav Support

This is one of the main reasons we ask customers to use their own email server for sending alerts and reports from RadarBox software.

All it takes is a few people to mark email from us as spam and that affects reports/alerts being recieved for many users.

Contact Customer/Technical support via:
http://www.airnavsystems.com/contact.html
[email protected]

shouriken

I'm sorry, but I don't remember seeing such a recommendation.

Even if it was, why do the RadarBox software allows sending reports/alerts using AirNav server?
I'm a RadarBox user since 2009 and it is the first time to experience this problem.
Liviu
A.net JetPhotos.Net
RadarBox
2xRTL USB + Franklin+Collinear antenna + PlanePlotter

AirNav Support

Not everyone is able to use there own ISP mail server. Some ISPs have restriction regarding this.

We are trying to get the IP unblocked.

Contact Customer/Technical support via:
http://www.airnavsystems.com/contact.html
[email protected]

Runway 31

Logs now appear to be getting mailed using the Airnav system again.

Alan