I have a SBS 2003 server. I have suddenly got a load of extra SMTP quese that have failed trying to deliver an email from service@paypal.com
These are SPAM emails and I want to find which pc is sending them on my network
ExchangeWindows Server 2003PayPal
Last Comment
Alan Hardisty
8/22/2022 - Mon
Alan Hardisty
Chances are it isn't a PC on your network, but it may be an Authenticated Relay and my article and blogs should help you out here:
The last blog has a way to resolve an authenticated relay very quickly.
Alan
Rob_Smuker
ASKER
HI Alan
I have outbound email disabled at the moment. If I enable the otbound email and look at the message as your article suggests then I see that the sender is service@paypal.com
I have raised the diagmostic logging to max for authentication. The application event log has many event IDs of 4006 and 3006
https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2556-Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html
http://alanhardisty.wordpress.com/2010/09/28/increase-in-frequency-of-security-alerts-on-servers-from-hackers-trying-brute-force-password-programs/
http://alanhardisty.wordpress.com/2010/12/01/increase-in-hacker-attempts-on-windows-exchange-servers-one-way-to-slow-them-down/
The last blog has a way to resolve an authenticated relay very quickly.
Alan