Wat gebeurd er hier met mijn email adres?

[stok]

Ik heb een eigen domein. Plus een paar email adresjes erbij (eigenlijk alles wat op stokkie.com eindigd;)), maar nu krijg ik sinds een week steeds mailtjes van mailservers. Heel vreemd. Steeds .ru of .ch erin.

Ksnap er niet veel van.
Hieronder staat wat er bijvoorbeeld in zo'n mailtje staat.

The original message was received at Thu, 11 Dec 2003 22:42:13 +0100 from adsl-62-167-101-168.adslplus.ch [62.167.101.168]

----- The following addresses had permanent fatal errors ----- <[e-mail]> <[e-mail]> <[e-mail]>
(reason: 550 unknown user)
<[e-mail]>
(reason: 550 5.1.1 <[e-mail]> User unknown; rejecting) <[e-mail]> <[e-mail]>
(reason: 550 5.1.1 <[e-mail]>... User unknown) <[e-mail]>
(reason: 550 5.0.0 <[e-mail]>... No such user here) <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]> <[e-mail]>
(reason: 550 5.1.1 <[e-mail]>... User unknown) <[e-mail]>
(reason: 554 5.7.1 Message cannot be accepted, content filter rejection SPAM Nobody->Nobody) <[e-mail]>
(reason: 550 Error: SPzeDk)
<[e-mail]>
(reason: 550 Error: SPzeDk)
<[e-mail]>
(reason: 550 Error: SPzeDk)
<[e-mail]>
(reason: 550 no such address)
<[e-mail]>
(reason: 550 no such address)
<[e-mail]>
(reason: 553 5.3.0 <[e-mail]>... No such user here) <[e-mail]>
(reason: 550 5.1.1 <[e-mail]>... User unknown) <[e-mail]>
(reason: 550 [e-mail] unknown user account) <[e-mail]>
(reason: 550 <[e-mail]>: User unknown in relay recipient table)

----- Transcript of session follows -----
... while talking to mxs.mail.ru.:
>>> DATA
<<< 503 Administrative prohibition -- access from ip address [194.158.229.31] is blocked. See http://www.mail.ru/pages/help/262.html for details. 554 5.0.0 Service unavailable <[e-mail]>,<[e-mail]>... Deferred: Connection timed out with relay1.chat.ru. ... while talking to cic.infos.ru.:
>>> DATA
<<< 550 unknown user
550 5.1.1 <[e-mail]>... User unknown
<<< 503 valid RCPT command must precede DATA <[e-mail]>... Deferred: Connection timed out with relay1.chat.ru. ... while talking to mail1.forex.ru.:
>>> RCPT To:<[e-mail]>
<<< 550 5.1.1 <[e-mail]> User unknown; rejecting
550 5.1.1 <[e-mail]>... User unknown
... while talking to mxs.mail.ru.:
>>> DATA
<<< 503 Administrative prohibition -- access from ip address [194.158.229.31] is blocked. See http://www.mail.ru/pages/help/262.html for details. 554 5.0.0 Service unavailable ... while talking to mail.infopac.ru.:
>>> DATA
<<< 550 5.1.1 <[e-mail]>... User unknown
550 5.1.1 <[e-mail]>... User unknown
... while talking to relay.cmk.ru.:
>>> DATA
<<< 550 5.0.0 <[e-mail]>... No such user here 550 5.1.1 <[e-mail]>... User unknown <<< 503 5.0.0 Need RCPT (recipient) ... while talking to mxs.mail.ru.:
>>> DATA
<<< 503 Administrative prohibition -- access from ip address [194.158.229.31] is blocked. See http://www.mail.ru/pages/help/262.html for details. 554 5.0.0 Service unavailable ... while talking to relay.utk.ru.:
>>> DATA
<<< 550 5.1.1 <[e-mail]>... User unknown
550 5.1.1 <[e-mail]>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
... while talking to mail.meat.ru.:
>>> DATA
<<< 554 5.7.1 Message cannot be accepted, content filter rejection SPAM Nobody->Nobody 554 5.0.0 Service unavailable ... while talking to mx.mtu.ru.:
>>> DATA
<<< 550 Error: SPzeDk
554 5.0.0 Service unavailable
... while talking to mail.newmail.ru.:
>>> DATA
<<< 550 no such address
550 5.1.1 <[e-mail]>... User unknown
<<< 503 RCPT first (#5.5.1)
... while talking to mail.nm.ru.:
>>> DATA
<<< 550 no such address
550 5.1.1 <[e-mail]>... User unknown
<<< 503 RCPT first (#5.5.1)
... while talking to relay1.online.ru.:
>>> QUIT
<<< 450-gnome09.net.rol.ru - Too many simultaneous connections from mailrelay03.sunrise.ch (2 of 1) <<< 450 Come again later <[e-mail]>... Deferred: 450-gnome09.net.rol.ru - Too many simultaneous connections from mailrelay03.sunrise.ch (2 of 1) ... while talking to relay.orel.ru.:
>>> DATA
<<< 450 4.3.2 <[e-mail]>... Relaying delayed: checking you host for zombi <[e-mail]>... Deferred: 450 4.3.2 <[e-mail]>... Relaying delayed: checking you host for zombi <<< 503 5.0.0 Need RCPT (recipient) ... while talking to relay2.orel.ru.:
>>> DATA
<<< 450 4.3.2 <[e-mail]>... Relaying delayed: checking you host for zombi <[e-mail]>... Deferred: 450 4.3.2 <[e-mail]>... Relaying delayed: checking you host for zombi <<< 503 5.0.0 Need RCPT (recipient) ... while talking to mx8.rambler.ru.:
>>> DATA
<<< 450 Temporary failure, try again later
... while talking to mxe.rambler.ru.:
>>> DATA
<<< 450 Graylisted by DCC
... while talking to relay1.rol.ru.:
>>> QUIT
<<< 450-gnome09.net.rol.ru - Too many simultaneous connections from mailrelay03.sunrise.ch (4 of 1) <<< 450 Come again later <[e-mail]>... Deferred: 450-gnome09.net.rol.ru - Too many simultaneous connections from mailrelay03.sunrise.ch (4 of 1) ... while talking to semris.ru.:
>>> RCPT To:<[e-mail]>
<<< 553 5.3.0 <[e-mail]>... No such user here
550 5.1.1 <[e-mail]>... User unknown
... while talking to it.sivma.ru.:
>>> RCPT To:<[e-mail]>
<<< 550 5.1.1 <[e-mail]>... User unknown
550 5.1.1 <[e-mail]>... User unknown
... while talking to cgp.sovintel.ru.:
>>> DATA
<<< 550 [e-mail] unknown user account
550 5.1.1 <[e-mail]>... User unknown
<<< 554 no valid RCPT address specified
... while talking to mail.tl.ru.:
>>> DATA
<<< 550 <[e-mail]>: User unknown in relay recipient table 550 5.1.1 <[e-mail]>... User unknown <<< 421 Error: too many errors

Wat is hier aan de hand?

[rjf]

misschien probeeren ze je server voor spam te gebruiken
Maar dat is een wild gokje.

[ Voor 4% gewijzigd door rjf op 12-12-2003 00:41 ]

[stok]

rjf schreef op 12 december 2003 @ 00:41:
misschien probeeren ze je server voor spam te gebruiken
Maar dat is een wild gokje.

Maar ik heb geen mailserver draaien.
Gewoon een formward van [e-mail] naar mijn @home mailadres.

Maarja, zal wel nix ernstigs zijn...toch?

[bigben04]

Ik denk dat ze niet een mailserver van je gebruiken, maar jouw emailadres als afzender opgeven bij het spammen, waardoor de errors bij jou terecht komen.

[MikeN]

Mja, leuk, van die spamruns waarbij jouw emailadres als afzender wordt gebruikt
Heb ik ook gehad, bereid je nog maar voor op een berg bounce mailtjes

[Verwijderd]

je moet je server scanne op spyware, waarschijnlijk zit er een spanmrobot op

[Sjowhan]

Kan je dat gewoon met ad-aware scannen? of heb je speciale software ervoor nodig?

[Coen Rosdorff]

Lijkt er idd op dat [e-mail] is gebruikt voor het versturen van bakken spam.

Dit noemt men ook wel een joe-job.
Alle bounces (spam verstuurd naar niet bestaande adressen) komen dus bij jou terrecht.

Probeer de * forward te vervangen door een forward van enkel de adressen die je gebruikt. Dit soort bounces kan oplopen tot 10 duizenden stuks.