Spam? Joe Job? Huh?

I checked my mail, and have three bounced messages -- all coming from mail accounts that don't exist on my domain, bouncing back from either accounts on my domain that don't exist, or other accounts on foreign servers.

Here's an excerpt from one that I got:

Code: 
Return-path: <helen@n1zyy.com>
Received: from [12.149.219.130] (helo=n1zyy.com)
        by 1n8-35.servernode.net with esmtp (Exim 4.24)
        id 1Ao8AX-00017A-Lb
        for bob@n1zyy.com; Tue, 03 Feb 2004 16:33:17 -0500
From: helen@n1zyy.com
To: bob@n1zyy.com
Subject: Hello
Date: Tue, 3 Feb 2004 16:35:31 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0007_978CA084.F2A87B74"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <E1Ao8AX-00017A-Lb@1n8-35.servernode.net>
n1zyy.com is my server; the servernode.net is the server's reverse hostname. Their has never been a helen, nor a bob, at my domain. Similarly, the 12.149.219.130 IP has no relation to my site, or anyone I know. (This one looks to have gotten to me because the attachment, document.pif, was rejected by the antivirus stuff, and then it ended up in my catchall box.)

The helo= makes it look like that 12/8 IP (on AT&T's block; specifically sublet to "Interepnational Radio SA," connected to me to send me the mail, claiming its hostname was n1zyy.com (my server). Can someone confirm that this is some just lunatic attack at sending me crap and not my box being used to spam, and/or a "joe job"? I'm a wee bit worried at the moment.

 

 

 

 

Top