Jump to content
rfrassetti

Possible Spam Through My Account?

Recommended Posts

Hi,

Please bare with me as I am not very knowledgeable concerning spam and email problems, Over the last week I have had 4 instances of returned mail from accounts I do not have. Below is an example of one of the emails I received:

 

_______________________________________________________________________

 

 

From : <MAILER-DAEMON@su9189250.aspadmin.net>

Sent : Saturday, September 24, 2005 1:17 AM

To : clamwj@frassettirealtors.com

Subject : failure notice

 

| | | Inbox

 

 

Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc5-f2.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 23 Sep 2005 23:19:28 -0700

Received: from [216.98.145.11] (helo=su9189250.aspadmin.net)by server24.totalchoicehosting.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.52)id 1EJ3NZ-0007nr-47for clamwj@frassettirealtors.com; Sat, 24 Sep 2005 02:19:21 -0400

Received: (qmail 8079 invoked for bounce); 24 Sep 2005 06:17:51 -0000

X-Message-Info: 6sSXyD95QpXOEB6SlXwKqVgMBX8+Why6LuxiL9ctGtE=

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com

X-AntiAbuse: Original Domain - frassettirealtors.com

X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

X-AntiAbuse: Sender Address Domain -

X-Source:

X-Source-Args:

X-Source-Dir:

Return-Path: <>

X-OriginalArrivalTime: 24 Sep 2005 06:19:29.0118 (UTC) FILETIME=[EB77AFE0:01C5C0CF]

 

--------------------------------------------------------------------------------

 

View E-mail Message Source

Content-Type: multipart/mixed

 

 

Content-Type: text/plain

 

 

Hi. This is the qmail-send program at su9189250.aspadmin.net.

I'm afraid I wasn't able to deliver your message to the following addresses.

This is a permanent error; I've given up. Sorry it didn't work out.

 

<newman@coronafirm.com>:

This address no longer accepts mail.

 

--- Below this line is a copy of the message.

 

 

 

 

 

Content-Type: message/rfc822

 

 

From: Claude Lam <clamwj@frassettirealtors.com>

Subject: we want you

Sent: Saturday, September 24, 2005 1:16 AM

 

Received: (qmail 8065 invoked from network); 24 Sep 2005 06:17:46 -0000

Received: from adsl-mum-203.94.209.88.mtnl.net.in (HELO ch.mmm.com) (203.94.209.88) by su9114511.aspadmin.net with SMTP; 24 Sep 2005 06:17:46 -0000

Return-Path: <clamwj@frassettirealtors.com>

X-MimeOLE: Produced By Microsoft Exchange V6.0.6726.0 Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 8bit

 

 

Hey I am Farrah

I have been modeling for over 2 years now, and so have all my friends. We have been told to post our profile on the below site.

 

Go to below site and check me and my friends out..

 

anulfriendly.com

 

Please check us out, and give us some comments.

 

You will also find millions of other great singles on the site, its one of the largest dating sites right now on the world wide web. You will find large communites from your area.

 

Give it a try and give us a shout thru the website.

 

Thank You very much

 

_______________________________________________________________________________

 

What does this mean? Is someone using my account to send spam? If so what can I do to stop it? As I said, I'm not very knowledgeable about things like this so any advise will be greatly appreciated.

Thanks for your help.

Bob

 

 

 

 

 

 

Following is another example of what I received. The other 2 have been deleted. Hope this helps in the "diagnosis". Thanks again, Bob

_________________________________________

 

 

From : Mail Delivery System <Mailer-Daemon@mail.jodapro.com>

Sent : Saturday, September 24, 2005 6:23 AM

To : g_wagnerte@frassettirealtors.com

Subject : Mail delivery failed: returning message to sender

 

| | | Inbox

 

 

Received: from server24.totalchoicehosting.com ([207.44.242.2]) by mc4-f8.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 24 Sep 2005 04:23:14 -0700

Received: from [216.170.113.130] (helo=mail.jodapro.com)by server24.totalchoicehosting.com with esmtps (TLSv1:DES-CBC3-SHA:168)(Exim 4.52)id 1EJ87c-0007lr-FJfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 07:23:12 -0400

Received: from smmsp by mail.jodapro.com with local (Exim 4.22)id INBJN5-000G00-5Nfor g_wagnerte@frassettirealtors.com; Sat, 24 Sep 2005 04:23:29 -0700

X-Message-Info: JGTYoYF78jGoNcABN5ATiaLm4OfbXVdKzbOmTuiStag=

X-Failed-Recipients: root@mail.jodapro.com

Auto-Submitted: auto-generated

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server24.totalchoicehosting.com

X-AntiAbuse: Original Domain - frassettirealtors.com

X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

X-AntiAbuse: Sender Address Domain -

X-Source:

X-Source-Args:

X-Source-Dir:

Return-Path: <>

X-OriginalArrivalTime: 24 Sep 2005 11:23:14.0768 (UTC) FILETIME=[5ACD2D00:01C5C0FA]

 

--------------------------------------------------------------------------------

 

View E-mail Message Source

Content-Type: text/plain

 

 

This message was created automatically by mail delivery software.

 

A message that you sent could not be delivered to one or more of its

recipients. This is a permanent error. The following address(es) failed:

 

root@mail.jodapro.com

(generated from webmaster@sfmds.com)

Operation timed out:

retry timeout exceeded

Share this post


Link to post
Share on other sites

Most likely this is spoofing to send spam

and make it look like it came from your domain.

 

I get the same all the time

and not much we can do about it.

Share this post


Link to post
Share on other sites

I just came to search the forum to see if I'm the only one having this problem, and I see that I am not! It's a lot more than 4 instances for me though... over just the last few days I've had HUNDREDS of messages flood my account, all returned mail from different places, coming back as undeliverable, as though they were sent from my domain.

 

This started suddenly, just a few days ago. It's as though someone is sending out SPAM from my domain, using random.names@myacount.com and all the undeliverables are coming back to my default mail account.

 

I saw the reply that this was probably just a tricky way to get a message into my inbox, but it sure seems like more than that. These are coming from so many different places... and it just started over night.

 

Does anyone have any ideas??

Edited by dhilke

Share this post


Link to post
Share on other sites

What you are seeing is the fallout from one or more of the current Virus/trojans that are infecting thousands of computers out there. These programs search the net or the infected persons email addresses and use the domains it finds and assigns random names or letter to them and sends out Spam. There is not much you can do but weather the storm or set you default mail to ::fail::.

Share this post


Link to post
Share on other sites

What Bob says is very true. Although nothing, I'm afraid, will stop spam completely, it will help cut down on the amount. I'm getting spam email sent to my "test" domain...and I don't even have any email accounts set up there! Such is life on the Internet!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...