Jump to content

spam originating from my account ?


Recommended Posts

I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field.

I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message:

-------------------------------------------------------------------------------------------------------------------

The following message to <psueann[at]megalink.net> was undeliverable.

The reason for the problem:

5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown'

Final-Recipient: rfc822;psueann[at]megalink.net

Action: failed

Status: 5.0.0 (permanent failure)

Remote-MTA: dns; [208.89.132.199]

Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' (delivery attempts: 0)

Reporting-MTA: dns; c60.cesmail.net

Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111])

by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400

Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111])

by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400

Received: from ubdzpnhke (unknown [86.57.185.195])

by smtprelay1.cesmail.net (Postfix) with ESMTPA id C0E4834CB7;

Tue, 6 Aug 2013 01:38:48 -0400 (EDT)

Date: Tue, 6 Aug 2013 06:30:57 -0700

To: <kristaylor952[at]gmail.com>, <jjwa[at]ix.netcom.com>, <psueann[at]megalink.net>, <hazas33[at]hotmail.com>, <waterbingdong[at]126.com>

From: ken[at]spamcop.net

Subject:

Mime-Version: 1.0

Content-Type: text/plain; charset=iso-8859-4

Message-Id: <20130806053848.C0E4834CB7[at]smtprelay1.cesmail.net>

pudaso

ri v dewuba http://www.xn----7sbbcid0b1bftd1a.xn--p1ai...ies.htm?hokyhyj rajol

pazo mov foxehoz

-------------------------------------------------------------------------------------------------------------------

These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail.

Ken

Link to comment
Share on other sites

I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field.

I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message:

These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail.

Ken

Happening here also

http://forum.spamcop.net/forums/index.php?showtopic=13418

Just in case change your SC email password and run a Malware check

Link to comment
Share on other sites

Happening here also

http://forum.spamcop.net/forums/index.php?showtopic=13418

Just in case change your SC email password and run a Malware check

I had already done both of those, I'm pretty sure its not really coming from me, but its good advice, thanks.

I did see the other thread when I logged in just now, since its not just me I guess I won't worry about it, irritating though it is.

Link to comment
Share on other sites

spamcop.net' post='85319' date='Aug 7 2013, 03:45 AM']

I've recently started receiving a number of bounced emails, all of which appeared to originate inside SpamCop and all of which have my email account as the 'from' field.

I'm guessing that someone is spoofing the headers to make it look like it originates inside SpamCop, but it also seems possible that SpamCop is relaying inappropriate email. Does anyone else have another opinion ? Here's an example 'delivery failed' message:

-------------------------------------------------------------------------------------------------------------------

The following message to <psueann[at]megalink.net> was undeliverable.

The reason for the problem:

5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown'

Final-Recipient: rfc822;psueann[at]megalink.net

Action: failed

Status: 5.0.0 (permanent failure)

Remote-MTA: dns; [208.89.132.199]

Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'5.1.1 Mail Refused - Address <psueann[at]megalink.net> Recipient Unknown' (delivery attempts: 0)

Reporting-MTA: dns; c60.cesmail.net

Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111])

by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400

Received: from unknown (HELO smtprelay1.cesmail.net) ([192.168.1.111])

by c60.cesmail.net with ESMTP; 06 Aug 2013 01:38:42 -0400

Received: from ubdzpnhke (unknown [86.57.185.195])

by smtprelay1.cesmail.net (Postfix) with ESMTPA id C0E4834CB7;

Tue, 6 Aug 2013 01:38:48 -0400 (EDT)

Date: Tue, 6 Aug 2013 06:30:57 -0700

To: <kristaylor952[at]gmail.com>, <jjwa[at]ix.netcom.com>, <psueann[at]megalink.net>, <hazas33[at]hotmail.com>, <waterbingdong[at]126.com>

From: ken[at]spamcop.net

Subject:

Mime-Version: 1.0

Content-Type: text/plain; charset=iso-8859-4

Message-Id: <20130806053848.C0E4834CB7[at]smtprelay1.cesmail.net>

pudaso

ri v dewuba http://www.xn----7sbbcid0b1bftd1a.xn--p1ai...ies.htm?hokyhyj rajol

pazo mov foxehoz

-------------------------------------------------------------------------------------------------------------------

These failure messages are starting to become a significant proportion of my email, I wonder if this is related to the slow delivery of mail.

Ken

No the spam was not coming from your account. What you are seeing was part of the problem that slowed down mail delivery earlier in the week. Sorry your account has these piling up.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...