Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 209
  • Last Modified:

Getting loads of Event ID 4000 late at night

I'm getting around 30-100 of the event ID: 4000 each night. They can't connect to domains such as zmailz.com or publicrecordsnow.com or dxsspc1.com etc etc. Just curious if this means I've got a machine on our network trying to spam outside email? How do i track this down?
0
adminknight
Asked:
adminknight
1 Solution
 
Stacy SpearCommented:
This possibly means that spammers are sending you junk mail to bad addresses and Exchange is trying to send them NDRs. You don't have any messages in your queues?

Why possibly? You need to provide the Event Source as well. It could also be this for example http://support.microsoft.com/kb/899392
0
 
SembeeCommented:
Do you have messages in the queues? If not then it could be simply relay attempts that are failing. Nothing to worry about.

Simon.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now