So I’ve been having a hell of a time with my ISP banning the blogger.com publishing IP address again.

66.102.15.83 is the IP in question. I’ve repeatedly emailed Blogger.com support, only to wait 1 week for a reply, which simply directed me to the FAQ.

Ok, so most companies don’t take an accusation that their server has been hacked seriously, but why else would that ip number above be requesting SMTP port 25 on my web server? The only port it should be accessing is port 21 for ftp, or 22 for their SCP feature.

As a system administrator myself, I know that backdoors are often installed on servers via security exploits in the software running on those servers. The general consensus from other admins I’ve talked to is that someone installed an trojan which scans for an open relay mail server on web servers it is publishing too, thus being able to send massive amounts of spam which look to have originated from a Blogger.com ip address.

Every other posting, I have to email my provider and have them unban the ip. This is truly a pain in the butt. Anyone know any good prices on co-locating? I’m sick of this virtual hosting crap.