Spammer using my domain to mass spam.
I just logged in outlook today and received a bunch of returned email addresses, all being bounced back to multiple email accounts on my server that dont even exist. Just random names but with my domain. From what i see in the headers, the mail looks like it was sent from other servers and just had my domain as the return account.
In the headers below i changed my domain to: mydomain.net
Here is what believe to be the header attached to one of the emails that bounced back:
Received: from host5.e-businessexpress.com (t2.poweredby.qa.alabanza.com [65.109.239.78]) by rly-yd04.mx.aol.com (v107.13) with ESMTP id MAILRELAYINYD42-20a434677b132a; Fri, 07 Oct 2005 09:27:13 -0400
Received: (qmail 5076 invoked by uid 6370); Sun, 09 Oct 2005 03:52:57 +0200 (CEST)
Message-Id: <20051009035257.5076.qmail@host5.e-businessexpress.com>
From: "Masten" <amybrien2@mydomain.net>
To: "kaylaluvit" <kaylaluvit@aol.com>
Date: Sun, 09 Oct 2005 03:52:57 +0200 (CEST)
Subject: {#316fa} Mother makes dau serve to her
Mime-Version: 1.0
Content-Type: text/plain
X-AOL-IP: 65.109.239.78
X-AOL-SCOLL-SCORE: 0:2:320217252:10737418
X-AOL-SCOLL-URL_COUNT: 0
Received: (qmail 5076 invoked by uid 6370); Sun, 09 Oct 2005 03:52:57 +0200 (CEST)
Message-Id: <20051009035257.5076.qmail@host5.e-businessexpress.com>
From: "Masten" <amybrien2@mydomain.net>
To: "kaylaluvit" <kaylaluvit@aol.com>
Date: Sun, 09 Oct 2005 03:52:57 +0200 (CEST)
Subject: {#316fa} Mother makes dau serve to her
Mime-Version: 1.0
Content-Type: text/plain
X-AOL-IP: 65.109.239.78
X-AOL-SCOLL-SCORE: 0:2:320217252:10737418
X-AOL-SCOLL-URL_COUNT: 0
Return-path: <>
Envelope-to: amybrien2@mydomain.net
Delivery-date: Fri, 07 Oct 2005 09:28:02 -0400
Received: from [64.12.138.23] (helo=omr-m11.mx.aol.com)
by dxl1.mydomain.net with esmtp (Exim 4.52)
id 1ENsGY-0008Um-82
for amybrien2@mydomain.net; Fri, 07 Oct 2005 09:28:02 -0400
Received: from rly-yd04.mx.aol.com (rly-yd04.mail.aol.com [172.18.141.68]) by omr-m11.mx.aol.com (v107.10) with ESMTP id RELAYIN1-2434677bb23e; Fri, 07 Oct 2005 09:27:23 -0400
Received: from localhost (localhost)
by rly-yd04.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
with internal id JAA22091;
Fri, 7 Oct 2005 09:27:23 -0400 (EDT)
Date: Fri, 7 Oct 2005 09:27:23 -0400 (EDT)
From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Message-Id: <200510071327.JAA22091@rly-yd04.mx.aol.com>
To: <amybrien2@mydomain.net>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="JAA22091.1128691643/rly-yd04.mx.aol.com"
Subject: Returned mail: User unknown
Auto-Submitted: auto-generated (failure)
X-AOL-IP: 172.18.141.68
Envelope-to: amybrien2@mydomain.net
Delivery-date: Fri, 07 Oct 2005 09:28:02 -0400
Received: from [64.12.138.23] (helo=omr-m11.mx.aol.com)
by dxl1.mydomain.net with esmtp (Exim 4.52)
id 1ENsGY-0008Um-82
for amybrien2@mydomain.net; Fri, 07 Oct 2005 09:28:02 -0400
Received: from rly-yd04.mx.aol.com (rly-yd04.mail.aol.com [172.18.141.68]) by omr-m11.mx.aol.com (v107.10) with ESMTP id RELAYIN1-2434677bb23e; Fri, 07 Oct 2005 09:27:23 -0400
Received: from localhost (localhost)
by rly-yd04.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
with internal id JAA22091;
Fri, 7 Oct 2005 09:27:23 -0400 (EDT)
Date: Fri, 7 Oct 2005 09:27:23 -0400 (EDT)
From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Message-Id: <200510071327.JAA22091@rly-yd04.mx.aol.com>
To: <amybrien2@mydomain.net>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="JAA22091.1128691643/rly-yd04.mx.aol.com"
Subject: Returned mail: User unknown
Auto-Submitted: auto-generated (failure)
X-AOL-IP: 172.18.141.68
Thank you.
