Solved

Getting loads of Event ID 4000 late at night

Posted on 2007-11-20
2
198 Views
Last Modified: 2010-03-06
I'm getting around 30-100 of the event ID: 4000 each night. They can't connect to domains such as zmailz.com or publicrecordsnow.com or dxsspc1.com etc etc. Just curious if this means I've got a machine on our network trying to spam outside email? How do i track this down?
0
Comment
Question by:adminknight
2 Comments
 
LVL 23

Expert Comment

by:Stacy Spear
ID: 20321522
This possibly means that spammers are sending you junk mail to bad addresses and Exchange is trying to send them NDRs. You don't have any messages in your queues?

Why possibly? You need to provide the Event Source as well. It could also be this for example http://support.microsoft.com/kb/899392
0
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 20321547
Do you have messages in the queues? If not then it could be simply relay attempts that are failing. Nothing to worry about.

Simon.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
how to add IIS SMTP to handle application/Scanner relays into office 365.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question