Bitcoin Forum
December 11, 2016, 04:13:28 AM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: anyone else getting repeated unusual e-mails from a linode server?  (Read 818 times)
Desolator
Sr. Member
****
Offline Offline

Activity: 392



View Profile
May 13, 2012, 07:36:11 AM
 #1

I'm wondering if this happened to anyone else.  I'm very suspicious now because Linode hosted sites were hacked fairly recently and are strongly related to bitcoins.

From GMT -6 US central time 1:16 AM until 2:06 (right now) I've gotten 6 e-mails on a main account of mine from apache@*******.members.linode.com with the stars being a specific member number.

The entire end of that URL won't resolve to a real site though.  The IP address that the message originated from was not in any known IP database but it does resolve to that ending URL according to one IP tool I used.  It was located in Europe but that's all it can determine.  The contents of the first message were:

test.com
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1

test

and the subject line is "test" and the from name is "added by portage for apache"

And all others had the same content except for the body text area "test" was removed.  With the most recent hack of a non-linode server, I'm wondering if somehow someone's attempting to do this big leak I heard so much about by those assholes who hacked that other site.  I don't recall if it was hosted on Linode but I don't think it was.  This may have nothing to do with bitcoins and is just some idiot with my e-mail address failing to configure a server correctly or someone setting up a spam server horribly wrong (on Linode though?) but, the timing is sure odd given recent events.

So this definitely leads me to ask, has anyone else gotten these e-mails?

EDIT: oh, if I type the IP address directly into a browser, I get a postfix admin login window requesting that I log in, stating "Mail admins login here to adminster your domain." but get this, there's a navigation link on the bottom of the login window saying "Return to NYCTelecomm Mail Admin Page" and it loops back to the IP address but not in a properly formed URL.  That appears to be a linux development website if I simply google the name and the Linode folks are way into Linux development and donating to Linux related stuff.  So....anyway, wtf is going on and did anyone else get these?
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!