Question Locked

Hijacked email address

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi

So this morning I opened up outlook, and watched as 2500 emails came in from various mail programs telling em the email I sent had failed.

Only thing is I am not sending these emails. They are all spam base viagra, stock tips, cheap rolexes etc.

It seems someone is sending out emails that look like they come from me and then I am getting the bounce backs. How do I stop this !! i do not want my email address or our company domain to be added to spam lists.

I have checked the server and recently used client pc's and no viruses or spyware is to be found.

I have attached below an example of one of the returned emails.

Any help greatly appreciated.

Matt

Received: by 10.66.245.2 with SMTP id s2mr2516908ugh.16.1208623195028;
Sat, 19 Apr 2008 09:39:55 -0700 (PDT)
Return-Path:
Received: from dsl.static8121487195.ttnet.net.tr ([81.214.87.195])
by mx.google.com with ESMTP id t35si812192uge.81.2008.04.19.09.39.53;
Sat, 19 Apr 2008 09:39:55 -0700 (PDT)
Received-SPF: neutral (google.com: 81.214.87.195 is neither permitted nor denied by best guess record for domain of m.duns''te'''r@car''ebureausapmsapmsapm.co.uk) client-ip=81.214.87.195;
Authentication-Results: mx.google.com; spf=neutral (google.com: 81.214.87.195 is neither permitted nor denied by best guess record for domain of m.dunsghthhteter''@'''carebure''spanfdfwwgrwagau.co.uk) smtp.mail=m.du'''nster''@cajytj''''rebureau.co.uk
Message-ID: <000a01c8a23b$05c93137$045a7883@cbbrvb>
From: "herbie balfour"
To:
Subject: 10 great ways to tell time
Date: Sat, 19 Apr 2008 14:52:30 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C8A23B.05C72DB2"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

5 replies

by older mycroft

EDIT you post RIGHT NOW!

Take out your email address after the '@', substituting xxxxx.xxx.

TR is a worldwide public forum, readable by the entire world including all the scum in the world! ;)

Don't miss ANY of the [b]FIVE[/b] instances of your email address!

by jdclyde

except to make a new account for yourself and put anything coming into that old account directly to the bit bin.

It is a shame some assmunch admins think that return spamming will help the problem of spam, especially when even the most novice of admins knows that the email addresses used to spam with are all spoofed, so you only spam innocent people making YOU a spammer.

sucks ass.

by mamies

You could delete that address and create a new one with a differant name for eg if this@address.com was sending spam, delete it and create a new one called these@address.com

by dr dij

I once had Chinese spammers send out 5,600 spams from their address but with MY return address since I have a short domain name.

And it is too bad since these 5,600 were also the bounces, which means legitimate companies the spams were sent you were SPAMMING YOU, not the original spammer.

You'd think network admins or other people would be smart enuf to know that spammers don't use real return addresses and that to reply with failure emails is spam by itself.

If this is at work I guess you need some spam filters, etc. like a barracuda - iron port I think is called

If at home use disposable email addresses like at yahoo.com or google.com. If you start getting spam on one of the disposable addresses, which you only give out to one site or company you delete it.

Simple as that! I haven't had any spam to my personal email since I signed up. (except for the occasional yahoo 'offer' spam)

Like others have said, bounces DOESN'T mean your account was hijacked, just that someone was spoofing it. Just like anyone could put your address as return address on 1000 letters and mail them out, you can do the same with email.

In my case for example, besides knowing that email can be spoofed, I know that my email server had NEVER EMAILED ANYTHING (hosted on a datacenter hosting ISP, secure password, log of outgoing, use my local ISP instead.)

This discussion is closed to new replies.