getting spammed by mailer-daemon

attgig · 09-21-2007, 09:40 AM

so, I have my own domain that I mainly use as my email. But yeah, I've gotten ridiculous amounts of junk mail in my catch-all account since last night. However, it's not normal junk mail. It seems like there the vast majority of them were Mailer-Daemon failure e-mails like:

Code:

Hi. This is the qmail-send program at mx1.golfconnections.us.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<cxigeigertown@golfconnections.us>:
Sorry, no mailbox here by that name. vpopmail (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <Roel-Ratchford@ @ t t g i g.com>
Received: (qmail 33339 invoked from network); 21 Sep 2007 08:50:44 -0000
Received: from ip-65-160.sn2.eutelia.it (83.211.65.160)
  by ip-140-155-3.phx.extremezone.com with SMTP; 21 Sep 2007 08:50:44 -0000
Received: from pc ([166.172.144.117]:19687 "EHLO pc"
	smtp-auth: <none> TLS-CIPHER: <none> TLS-PEER-CN1: <none>)
	by ip-65-160.sn2.eutelia.it with ESMTP id S22IXUSYZILHPTQU (ORCPT
	<rfc822;cxigeigertown%golfconnections.us@mx1.golfconnections.us>);
	Fri, 21 Sep 2007 10:37:29 +0200
Message-ID: <000301c7fc2a$9252e2c0$a041d353@pc>
From: "Roel Ratchford" <Roel-Ratchford@attgig.com>
To: <cxigeigertown@golfconnections.us>
Subject: didymite
Date: Fri, 21 Sep 2007 10:36:57 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0006_01C7FC3B.55DBB2C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3028
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028

------=_NextPart_000_0006_01C7FC3B.55DBB2C0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Rumo+r N*e+w s,: 

Oncol.o_gy M-e,d-. I_n+c-.  (OT'C: ONCO,) a Ca.ncer Treat-men,t =
S.olution s G*roup is s_a-i,d to h,a*v,e 
expe_rience*d o*v_e*r a 1*000% in *crease in reven'u,es f,o+r t h_e =
fis_cal 3*r'd q.uarter e+nding J*u+l+y., 
2 0+0.7 com+pa-red w_i t h t_h'e p+rior y+e'a+r whil+e fisca.l fou.rth =
qu,arter resul+ts f*o,r 2+0-0 7 a-r'e on

t.rack to ex_ceed t h,i_s ye*ar=92s t hird qu'arter re'sults. 

O.N*C*O add*ition,ally plan-s to incr-ea se ser'vice of fer*ings w hich =
a_r.e curre,ntl.y u_nderwa,y. 


D on=92t w+a,i_t f.o-r t.h*e n*e'w,s to c-o,m,e o+u t a.n_d l.o*s+e =
t*h'e op_portun+ity to g+e_t in fro_nt of the
gen*eral inve.stin_g publi+c.  On*co-logy M*e'd is in a multi bill+ion =
do*llar indu*.stry w-h e*r+e 
t,h-e_y a,r-e ga ining marke-t s hare r_apidly. 

C+a l.l y*o+u'r brok+er n o+w f+o,r O+N-C*O,. 

------=_NextPart_000_0006_01C7FC3B.55DBB2C0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.3059" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT Arial size=3D2>Rumo+r N*e+w s,: </FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>Oncol.o_gy M-e,d-. I_n+c-.  (OT'C: ONCO,) a =
Ca.ncer=20
Treat-men,t S.olution s G*roup is s_a-i,d to h,a*v,e </FONT></DIV>
<DIV><FONT Arial size=3D2>expe_rience*d o*v_e*r a 1*000% in *crease in =
reven'u,es=20
f,o+r t h_e fis_cal 3*r'd q.uarter e+nding J*u+l+y., </FONT></DIV>
<DIV><FONT Arial size=3D2>2 0+0.7 com+pa-red w_i t h t_h'e p+rior =
y+e'a+r whil+e=20
fisca.l fou.rth qu,arter resul+ts f*o,r 2+0-0 7 a-r'e on</FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>t.rack to ex_ceed t h,i_s ye*ar=92s t hird =
qu'arter=20
re'sults. </FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>O.N*C*O add*ition,ally plan-s to incr-ea se =
ser'vice of=20
fer*ings w hich a_r.e curre,ntl.y u_nderwa,y. </FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>D on=92t w+a,i_t f.o-r t.h*e n*e'w,s to =
c-o,m,e o+u t=20
a.n_d l.o*s+e t*h'e op_portun+ity to g+e_t in fro_nt of the</FONT></DIV>
<DIV><FONT Arial size=3D2>gen*eral inve.stin_g publi+c.  On*co-logy =
M*e'd is in a=20
multi bill+ion do*llar indu*.stry w-h e*r+e </FONT></DIV>
<DIV><FONT Arial size=3D2>t,h-e_y a,r-e ga ining marke-t s hare =
r_apidly. </FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>C+a l.l y*o+u'r brok+er n o+w f+o,r O+N-C*O,.=20
</FONT></DIV></BODY></HTML>

------=_NextPart_000_0006_01C7FC3B.55DBB2C0--

----------------------------------------------------------------

From what I gather, it seems like someone is sending e-mails from bogus accounts from my domain (xxxx@@ttgig.com, xxxx being a wide variety of fake usernames).

Last night, from 4am on, I had over 1500 e-mails to this effect (and who knows how many more that actually ended up being sent to real addresses. Is there anything on my end that may have caused this or made my domain accessible? Or is a spammer somewhere simply spoofing e-mail addresses from my domain and there's nothing I can do about it?

Or do I have it completely wrong, and am I getting spammed like i sent a message?

Jeffbx · 09-21-2007, 09:51 AM

Quote:

Originally Posted by attgig

Or is a spammer somewhere simply spoofing e-mail addresses from my domain and there's nothing I can do about it?

Ding ding ding! We have a winner! Looks like it's being sent by an IP address in Italy, so your server has not been taken over.

Happens all.. the.. time. Annoying as heck & nothing you can do to stop it.

Markel · 09-21-2007, 10:19 AM

Back when I was on attbi.com, I would get failed emails "returned" to me because some spammer was spoofing my email address as the source.

One thing you may want to do is notify your provider that this is happening, just in case they get any abuse complaints.

BlueTriangle · 09-21-2007, 12:30 PM

I hate spam. i even get some spam with my e-mail address in it. I've been getting a lot of Cialis spam. boooo

09-21-2007, 10:19 AM	#3
Markel Chief of Naval Operations Join Date: Feb 2001 Posts: 11,733	Back when I was on attbi.com, I would get failed emails "returned" to me because some spammer was spoofing my email address as the source. One thing you may want to do is notify your provider that this is happening, just in case they get any abuse complaints. __________________ stay low... keep moving...

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

09-21-2007, 12:30 PM	#4
BlueTriangle Lieutenant Junior Grade Join Date: Sep 2007 Location: Washington,DC Posts: 181	I hate spam. i even get some spam with my e-mail address in it. I've been getting a lot of Cialis spam. boooo

User Name
Password
Remember Me?