• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 287
  • Last Modified:

How can I find who's sending this e-mail?

All exchange server alerts are sent to my blackberry.  I need a way to find out which computer keeps sending this  e-mail that's undeliverable.  I looked into the logs on my exchange server 2003 but was unable to find the ip of the computer that initially sent the e-mail.  Does anyone know how I can find out which computer on my network is sending this e-mail?

message did not reach some or all of the intended recipients.

      Subject:      xx.xx.xx.231 | sales | sales
      Sent:      4/6/2009 4:07 AM

The following recipient(s) cannot be reached:

      address@yahoo on 4/8/2009 4:10 AM
            The e-mail system was unable to deliver the message, but did not report a specific reason.  Check the address and try again.  If it still fails, contact your system administrator.
            <servername.com #4.0.0 smtp;450 <address removed>: Sender address rejected: Domain not found>
IP address obfuscated by modus_operandi, EE Moderator

Open in new window

2 Solutions
That looks like a phishing attempt, so may well not be a machine on your network at all. Have you got your server set to send you a copy of the NDRs?

check the message headers

they should tell you which was the originating machine
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now