PDA

Zobacz pełną wersję : Mail delivery failed: returning message to sender



rychu_cmg
02-01-2017, 17:05
Od kilku tygodniu na mojego maila na g.pl (gazeta.pl kiedyś było to konto google w domenie Gazety, jednak przed kilkoma miesiącami zmienili na swoją kiepską poczte) dostaje zwrotki niedoręczonej poczty. Wygląda na to, że ktoś się włamał na moje konto ponieważ w adresach do których nie doszedł mail są moje kontakty. Profilaktycznie zmieniłem hasło do konta, ale te wiadomości przychodzą nadal. Czyli skopiowali mi kontakty i wysyłają ze swoich serwerów (ostatnio codigonet.net) z moim adresem w polu nadawca. Jest jakiś sposób, żeby z tym walczyć?

https://forum.nikoniarze.pl//brak.gif
źródło (https://zapodaj.net/images/06a9fd8c6ef9f.png)

Received: from mx.poczta.onet.pl (unresolved [10.174.34.83]:42629)
by ps23 (Ota) with LMTP id 0D1EECF5FC78E
for <[email protected]>; Sun, 1 Jan 2017 16:13:48 +0100 (CET)
Received: from cdn5.codigonet.net (cdn5.codigonet.net [162.243.202.105])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by mx.poczta.gazeta.pl (Onet) with ESMTPS id 3ts3cl51L0z6CZTZv
for <[email protected]>; Sun, 1 Jan 2017 16:13:27 +0100 (CET)
Received: from mailnull by cdn5.codigonet.net with local (Exim 4.87)
id 1cNhp7-00075f-Pq
for [email protected]; Sun, 01 Jan 2017 12:13:25 -0300
X-Failed-Recipients: [email protected]
Auto-Submitted: auto-replied
From: Mail Delivery System <[email protected]>
To: [email protected]
Content-Type: multipart/report; report-type=delivery-status; boundary=1483283605-eximdsn-562523364
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <[email protected]>
Date: Sun, 01 Jan 2017 12:13:25 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cdn5.codigonet.net
X-AntiAbuse: Original Domain - g.pl
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: cdn5.codigonet.net: sender_ident via received_protocol == local: mailnull/primary_hostname/system user
X-Authenticated-Sender: cdn5.codigonet.net: mailnull
X-Source:
X-Source-Args:
X-Source-Dir:
X-ONET_PL-MDA-Version: 1.0.25
X-ONET_PL-MDA-Info: 023 30815 0D1EECF5FC78E 0.999822
X-ONET_PL-MDA-From:
X-ONET_PL-MDA-Spam: YES

--1483283605-eximdsn-562523364
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

[email protected]
Domain codigonet.net has exceeded the max defers and failures per hour (5/5 (62%)) allowed. Message discarded.

--1483283605-eximdsn-562523364
Content-type: message/delivery-status

Reporting-MTA: dns; cdn5.codigonet.net

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0

--1483283605-eximdsn-562523364
Content-type: message/rfc822

Return-path: <[email protected]>
Received: from [86.98.8.156] (port=42400 helo=fqdvis-PC)
by cdn5.codigonet.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
(envelope-from <[email protected]>)
id 1cKOZw-0007b7-07
for [email protected]; Fri, 23 Dec 2016 09:04:04 -0300
From: Mariusz Kruchowski <[email protected]>
To: "maciej" <[email protected]>
References: <[email protected]>
In-Reply-To: <[email protected]>
Subject: RE: need your help
Date: Fri, 23 Dec 2016 10:03:49 -2200
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_001E_0100AE6E.7E9873CC"
Content-Language: en-us

------=_NextPart_000_001E_0100AE6E.7E9873CC
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGV5LA0KQ2FuIHlvdSAgaGVscCBtZSAgd2l0aCBzb21ldGhpbm c/IEknbSBsb29raW5nICBmb3Igc29t
ZSBzdHVmZiBhbmQgY2Fubm90IGZpbmQgaXQgYW55d2hlcmUuLi 4gTG9vayBhdCB0aGF0IDxodHRwOi8v
YWRlbGUuYWRkYW5jZS5jb20vYjZiNz4NCg0KTWFyaXVzeiBLcn VjaG93c2tpDQoNCg0KDQpGcm9tOiBt
YWNpZWogW21haWx0bzptYWNpZWpAb3JsaWNvLnBsXQ0KU2VudD ogRnJpZGF5LCBEZWNlbWJlciAyMywg
MjAxNiA4OjAzIEFNDQpUbzogZ2ViYWxhQGcucGwNClN1YmplY3 Q6IFJpcCBpbiBwZWFjZS4NCg0KdGhp
cy4gICAgQXMgIGxvbmcgYXMgeW91ciB2YXBvciAgZmxvdyBwYX RoIGlzIGNsZWFyLCBhbmQgeW91ciBs
aXF1aWQgZmxvdyBwYXRoIGlzIEFMV0FZUyBkb3duc2xvcGVkLi 4uLnlvdSBzaG91bGQgYmUgZmluZS4g
IEZlcm1lbnRlZCB0aGluZ3MgY29sbGVjdCBDTzIsIHNvIGFsd2 F5cyB3aGlzayB5b3VyIHdhc2ggYmVm
b3JlIHlvdSBwdXQgdGhlIGxpZCBvbiBhbmQgZG8gIGEgIHJ1bi wgIHNvIHRoZSBnYXNzeSB3YXNoIGRv
ZXNuJ3QgYm9pbCAgb3Zlci4gICBDbGVhbiB3YXNoZXMgYWx3YX lzLiAgIEFsc28sICBrZWVwIHRoZSBo
ZWF0IGxvdyB1bnRpbCB5b3Uga25vdyB0aGUgbGltaXRzICBvZi AgdGhlIHN0aWxsL2Nvb2xpbmcsIHRo
ZW4geW91IGNhbiByYWlzZSBpdCB1cC4NCg0KDQo=

------=_NextPart_000_001E_0100AE6E.7E9873CC
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas=
-microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:off=
ice:word" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"=
xmlns=3D"http://www.w3.org/TR/REC-html40"><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-=
8"><meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered med=
ium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal1, li.msonormal1, div.msonormal1
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:9.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
=2EMsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head>
<body lang=3D"EN" link=3D"#0563C1" vlink=3D"#954F72"><div class=3D"Wor=
dSection1"><p class=3D"MsoNormal"><p class=3DMsoNormal><span lang=3DEN=
-US>Hey,<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US>=
Can you help me with something? I'm looking for some stuff and cann=
ot find it anywhere... Look at that <a href=3D"http://adele.addance.co=
m/b6b7"><b>http://adele.addance.com/b6b7</b></a><o:p></o:p></span></p>=
<p class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p><p=
class=3DMsoNormal><span lang=3DEN-US>Mariusz Kruchowski<o:p></o:p></s=
pan></p><o:p></o:p></p><p class=3D"MsoNormal"><span lang=3D"EN-US"><o:=
p></o:p></span></p><p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p><div><d=
iv style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0=
cm 0cm 0cm"><p class=3D"MsoNormal"><b><span style=3D"mso-fareast-langu=
age:EN">From:</span></b><span style=3D"mso-fareast-language:EN"> macie=
j [mailto:[email protected]] <br><b>Sent:</b> Friday, December 23, 2016=
8:03 AM<br><b>To:</b> [email protected]<br><b>Subject:</b> Rip in peace.<o:=
p></o:p></span></p></div></div><p class=3D"MsoNormal"><o:p>&nbsp;</o:p=
></p><p class=3D"MsoNormal"><p class=3Dmsonormal1><span lang=3DEN-US>t=
his. As long as your vapor flow path is clear, and your liquid fl=
ow path is ALWAYS downsloped....you should be fine. Fermented things =
collect CO2, so always whisk your wash before you put the lid on and d=
o a run, so the gassy wash doesn't boil over. Clean washes alway=
s. Also, keep the heat low until you know the limits of the still=
/cooling, then you can raise it up.<o:p></o:p></span></p><o:p></o:p></=
p><p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p><p class=3D"MsoNormal"><=
o:p>&nbsp;</o:p></p><p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p><p cla=
ss=3D"MsoNormal"><o:p></o:p></p></div></body></html>

------=_NextPart_000_001E_0100AE6E.7E9873CC--

--1483283605-eximdsn-562523364--

jurkarol
02-01-2017, 17:17
nie musiałes tyle wklejac...

może masz wirusa. a Twoje kontakty tez dostają jakieś przykładowe wiadomości

rychu_cmg
03-01-2017, 15:47
nie musiałes tyle wklejac...

może masz wirusa. a Twoje kontakty tez dostają jakieś przykładowe wiadomości
Skanowałem komputer i telefon i nie wykrywa żadnego syfa. Podejrzewam raczej włamanie bezpośrednio na maila

Kurtz
08-01-2017, 02:15
Received: from [86.98.8.156] (port=42400 helo=fqdvis-PC)

ISP:
Emirates Telecommunications Corporation

Jeżeli nie jesteś w Dubai, to zapewne faktycznie nie Twój komputer. Pytanie tylko, czy unieważniłeś wszystkie formy autoryzacji do konta, albo w ustawieniach "włamywacz" nie dodał czegoś co pozwoliłoby mu utrzymać możliwość wysyłania maili z Twojego konta.