IP Address 114.80.210.117 is listed in the CBL. It appears to be infected with a spam sending trojan or proxy.
It was last detected at 2012-02-12 12:00 GMT (+/- 30 minutes), approximately 13 hours, 30 minutes ago.
It has been relisted following a previous removal at 2012-02-12 07:49 GMT (17 hours, 46 minutes ago)
[size=+1]This IP is sending email in such a way to indicate that it is, or is NATting for a web server that is infected with a spam sending script, like Darkmailer, DirectMailer, r57shell, or some analogous Perl, PHP or CGI script.
If, however, you are running the "sendmagic" mail server package, please contact your vendor for an update.
If you are not running "sendmagic", the following should help you identify where the spam sending script is located so that you can remove it as well as innoculate your web server so it doesn't happen again.
This IP is infected with, or is NATting for a machine that is infected with, a PHP-based backdoor trojan. The most common target of this infestation is Plesk hosting environments using Qmail and Wordpress or CPanel hosting environments.
Specified IP has been removed an excessive number of times from the CBL without being fixed. Therefore, delisting of this IP address has been inhibited. YOU MUST FIX THE PROBLEM FIRST! Delisting inhibited Follow the above instructions to get it delisted.
