ken Posted August 7, 2013 Share Posted August 7, 2013 I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field. I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message: ------------------------------------------------------------------------------------------------------------------- The following message to <psueann[at]megalink.net> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' Final-Recipient: rfc822;psueann[at]megalink.net Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [208.89.132.199] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' (delivery attempts: 0) Reporting-MTA: dns; c60.cesmail.net Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111]) by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400 Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111]) by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400 Received: from ubdzpnhke (unknown [86.57.185.195]) by smtprelay1.cesmail.net (Postfix) with ESMTPA id C0E4834CB7; Tue, 6 Aug 2013 01:38:48 -0400 (EDT) Date: Tue, 6 Aug 2013 06:30:57 -0700 To: <kristaylor952[at]gmail.com>, <jjwa[at]ix.netcom.com>, <psueann[at]megalink.net>, <hazas33[at]hotmail.com>, <waterbingdong[at]126.com> From: ken[at]spamcop.net Subject: Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-4 Message-Id: <20130806053848.C0E4834CB7[at]smtprelay1.cesmail.net> pudaso ri v dewuba http://www.xn----7sbbcid0b1bftd1a.xn--p1ai...ies.htm?hokyhyj rajol pazo mov foxehoz ------------------------------------------------------------------------------------------------------------------- These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail. Ken Link to comment Share on other sites More sharing options...
petzl Posted August 7, 2013 Share Posted August 7, 2013 I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field. I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message: These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail. Ken Happening here also http://forum.spamcop.net/forums/index.php?showtopic=13418 Just in case change your SC email password and run a Malware check Link to comment Share on other sites More sharing options...
ken Posted August 7, 2013 Author Share Posted August 7, 2013 Happening here also http://forum.spamcop.net/forums/index.php?showtopic=13418 Just in case change your SC email password and run a Malware check I had already done both of those, I'm pretty sure its not really coming from me, but its good advice, thanks. I did see the other thread when I logged in just now, since its not just me I guess I won't worry about it, irritating though it is. Link to comment Share on other sites More sharing options...
email_support Posted August 8, 2013 Share Posted August 8, 2013 spamcop.net' post='85319' date='Aug 7 2013, 03:45 AM'] I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field. I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message: ------------------------------------------------------------------------------------------------------------------- The following message to <psueann[at]megalink.net> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' Final-Recipient: rfc822;psueann[at]megalink.net Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [208.89.132.199] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' (delivery attempts: 0) Reporting-MTA: dns; c60.cesmail.net Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111]) by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400 Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111]) by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400 Received: from ubdzpnhke (unknown [86.57.185.195]) by smtprelay1.cesmail.net (Postfix) with ESMTPA id C0E4834CB7; Tue, 6 Aug 2013 01:38:48 -0400 (EDT) Date: Tue, 6 Aug 2013 06:30:57 -0700 To: <kristaylor952[at]gmail.com>, <jjwa[at]ix.netcom.com>, <psueann[at]megalink.net>, <hazas33[at]hotmail.com>, <waterbingdong[at]126.com> From: ken[at]spamcop.net Subject: Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-4 Message-Id: <20130806053848.C0E4834CB7[at]smtprelay1.cesmail.net> pudaso ri v dewuba http://www.xn----7sbbcid0b1bftd1a.xn--p1ai...ies.htm?hokyhyj rajol pazo mov foxehoz ------------------------------------------------------------------------------------------------------------------- These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail. Ken No the spam was not coming from your account. What you are seeing was part of the problem that slowed down mail delivery earlier in the week. Sorry your account has these piling up. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.