Hi
My website provides free email and so mx record points to everyone.net.
Last one week , I see my /mail/<domain>/inbox getting filled up (upto 20mb every few hours).
I am getting some of the spam mails too ... When I check I find the header something like this:
X-Apparently-To: CHANGED@sbcglobal.net via web80103.mail.yahoo.com; Thu, 06 May 2004 13:17:40 -0700
X-YahooFilteredBulk: 66.94.225.244
Return-Path: <CHANGED@alexandria15.alexsrv15.com>
Received: from yipvmc-ext.prodigy.net (EHLO yipvmc.prodigy.net) (207.115.63.30) by mta813.mail.yahoo.com with SMTP; Thu, 06 May 2004 13:17:40 -0700
X-Originating-IP: [66.94.225.244]
Received: from mta349.mail.scd.yahoo.com (mta349.mail.scd.yahoo.com [66.94.225.244]) by yipvmc.prodigy.net (8.12.10/8.12.10) with SMTP id i46KHcZW139472 for <CHANGED@sbcglobal.net>; Thu, 6 May 2004 16:17:39 -0400
Received: from mta349.mail.scd.yahoo.com for CHANGED@sbcglobal.net; May 6 13:17:35 2004 -0700
X-YahooFilteredBulk: 216.74.85.97
X-Yahoo-Forwarded: from CHANGED@yahoo.com to CHANGED@sbcglobal.net
Received: from 216.74.85.97 (EHLO alexandria15.alexsrv15.com) (216.74.85.97) by mta349.mail.scd.yahoo.com with SMTP; Thu, 06 May 2004 13:17:34 -0700
Received: from CHANGED by alexandria15.alexsrv15.com with local (Exim 4.24) id 1BLpIs-0002rs-5V; Thu, 06 May 2004 16:17:10 -0400
To: CHANGED@yahoo.com
To: jona254@www.CHANGED.com
From: MarketMakerPick329@nznet.com Add to Address Book
Content-Type: multipart/alternative; boundary=6tTE97isYAJ
Subject: Stocks to Own for Mid Year QX i4EC VpV g+JFMI Qb iDU7 bzgHS6 CN Mt
Message-Id: <E1BLpIs-0002rs-5V@alexandria15.alexsrv15.com>
Date: Thu, 06 May 2004 16:17:10 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - alexandria15.alexsrv15.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [32036 32036] / [47 12]
X-AntiAbuse: Sender Address Domain - alexandria15.alexsrv15.com
Content-Length: 3306
alexandria15.alexsrv15.com is my webserver name.
Also the inbox file in the mail dir lists a huge list of aol email ids ...
Definitely it looks like someone is using my account ... to spam ...
Can someone tell me how i can track that and stop this ...
My website provides free email and so mx record points to everyone.net.
Last one week , I see my /mail/<domain>/inbox getting filled up (upto 20mb every few hours).
I am getting some of the spam mails too ... When I check I find the header something like this:
X-Apparently-To: CHANGED@sbcglobal.net via web80103.mail.yahoo.com; Thu, 06 May 2004 13:17:40 -0700
X-YahooFilteredBulk: 66.94.225.244
Return-Path: <CHANGED@alexandria15.alexsrv15.com>
Received: from yipvmc-ext.prodigy.net (EHLO yipvmc.prodigy.net) (207.115.63.30) by mta813.mail.yahoo.com with SMTP; Thu, 06 May 2004 13:17:40 -0700
X-Originating-IP: [66.94.225.244]
Received: from mta349.mail.scd.yahoo.com (mta349.mail.scd.yahoo.com [66.94.225.244]) by yipvmc.prodigy.net (8.12.10/8.12.10) with SMTP id i46KHcZW139472 for <CHANGED@sbcglobal.net>; Thu, 6 May 2004 16:17:39 -0400
Received: from mta349.mail.scd.yahoo.com for CHANGED@sbcglobal.net; May 6 13:17:35 2004 -0700
X-YahooFilteredBulk: 216.74.85.97
X-Yahoo-Forwarded: from CHANGED@yahoo.com to CHANGED@sbcglobal.net
Received: from 216.74.85.97 (EHLO alexandria15.alexsrv15.com) (216.74.85.97) by mta349.mail.scd.yahoo.com with SMTP; Thu, 06 May 2004 13:17:34 -0700
Received: from CHANGED by alexandria15.alexsrv15.com with local (Exim 4.24) id 1BLpIs-0002rs-5V; Thu, 06 May 2004 16:17:10 -0400
To: CHANGED@yahoo.com
To: jona254@www.CHANGED.com
From: MarketMakerPick329@nznet.com Add to Address Book
Content-Type: multipart/alternative; boundary=6tTE97isYAJ
Subject: Stocks to Own for Mid Year QX i4EC VpV g+JFMI Qb iDU7 bzgHS6 CN Mt
Message-Id: <E1BLpIs-0002rs-5V@alexandria15.alexsrv15.com>
Date: Thu, 06 May 2004 16:17:10 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - alexandria15.alexsrv15.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [32036 32036] / [47 12]
X-AntiAbuse: Sender Address Domain - alexandria15.alexsrv15.com
Content-Length: 3306
alexandria15.alexsrv15.com is my webserver name.
Also the inbox file in the mail dir lists a huge list of aol email ids ...
Definitely it looks like someone is using my account ... to spam ...
Can someone tell me how i can track that and stop this ...
Last edited: