My SMTP Server using by Scammer - TechRepublic
Question
March 18, 2011 at 07:32 AM
networknazar

My SMTP Server using by Scammer

by networknazar . Updated 15 years, 3 months ago

I am having Windows 2003 with IIS 6.0 SMTP enabled.

I am running many websites in the server. I am getting dozens of warning messages in my server event viewer.

**** The problem is that i get dozens of errors messages every day in the system event log on the SMTP relay (win2003 web ed. running IIS smtp relay). Each message is to a different host and they all are mail
to destinations that my users have not sent mail to different IP and domain. It looks like my relay is being used by spammers.

Event Type: Warning
Event Source: smtpsvc
Event Category: None
Event ID: 4006
Date: 3/18/2011
Time: 7:05:09 PM
User: N/A
Computer: E548712-135409
Description:
Message delivery to the host ‘69.43.160.177’ failed while delivering to the remote domain ‘reddifmail.com’ for the following reason: The remote server did not respond to a connection attempt.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d2 02 04 c0 ??..??

Can someone tell me whats going on and If I should be alarmed.
Please Advise.

This discussion is locked

All Comments