Getting Strange Rejected Emails

Discussion in 'General troubleshooting' started by coyott07, Sep 10, 2009.

  1. I am not a programmer so dumb those answers down. I have a forums tab for my site at http://levott.net/cs/ and this appears to be where these strange rejected emails are coming from. The emails I'm getting seem to indicate that I'm sending out an email to a users account that does not exist or at least the email address is not valid. The problem is I'm not sending out any emails via this platform and the email addresses are obviously bogus. The rejected emails addresses are different every time. I have not had any problems with this in the past and over the last week or so have got well over 50 of these "rejected" emails. Is someone trying to hack into my site? Has anyone else got these messages?

    Below is a sample of the emails I'm getting:

    Could not deliver message to the following recipient(s):

    Failed Recipient: [email protected]
    Reason: Failed to connect to the recipients mail server. No DNS information was found for the 'jcnrkyzug.com' domain.

    -- The header and top 20 lines of the message follows --

    Received: from web135.dotnetplayground.com [192.168.100.108] by postino1.discountasp.net with SMTP;
    Wed, 9 Sep 2009 23:33:42 -0700
    Received: from web135 ([127.0.0.1]) by web135.discountasp.net with Microsoft SMTPSVC(6.0.3790.3959);
    Wed, 9 Sep 2009 23:33:42 -0700
    Content-Base: http://levott.net/cs
    Content-Location: http://levott.net/cs
    MIME-Version: 1.0
    From: "Levott Community - Automated Email" <[email protected]>
    To: [email protected]
    X-Priority: 1
    Priority: urgent
    Importance: high
    Date: 9 Sep 2009 23:33:42 -0700
    Subject: =?utf-8?B?TGV2b3R0IENvbW11bml0eSAtIFlvdXIgQWNjb3VudCBpcyBFbmFibGVkIQ==?=
    Content-Type: text/html; charset=utf-8
    Content-Transfer-Encoding: base64
    Return-Path: [email protected]
    Message-ID: <[email protected]>
    X-OriginalArrivalTime: 10 Sep 2009 06:33:42.0023 (UTC) FILETIME=[A392E970:01CA31E0]
     
  2. mjp

    mjp

    Do you have a "lost password" function on the forum? That's usually the only visitor-generated email from a forum...
     
  3. There is no "lost password" function on the forum. If the visitor has not signed in and they try to post, we redirect them to our main site www.levott.net to log in. It is very strange, even if it was a current user, they are never allowed to send out emails to anyone besides the webmaster. These emails look like we are sending out an email to someone with a bad email address. I'm thinking about just pulling the forum out to limit my exposure.
     
  4. Bruce

    Bruce DiscountASP.NET Staff

    are you using some sort of canned application? They may have some security hole that allow unauthorized user to send email.
     

Share This Page