<html><head></head><body>Sounds "leaked" to me. <br><br><div class="gmail_quote">On September 2, 2014 9:42:29 PM EDT, Alex Carver <agcarver+ale@acarver.net> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">I did change the alias at AT&T to a newly generated one. I have several<br />dozen other aliases on the server and none of them are being hit with<br />attempts. All the activity is confined to that single alias I had given<br />to AT&T. I'm certain nothing has happened to my server, already triple<br />checked all the logs just in case and there is nothing out of the<br />ordinary beyond the increased attempts to use that particular email alias.<br /><br />On 2014-09-02 18:28, Jim Kinney wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> The timing is suspicious but it very well could be just a coincidence.<br /> Create a few more random name accounts on the same server, don't give those<br /> out and watch for a few days for activity.<br /> <br /> <br /> On Tue, Sep 2, 2014 at 8:37 PM, Alex Carver <agcarver+ale@acarver.net><br /> wrote:<br /> <br /><blockquot
e
class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> I have cell service with AT&T and, in their section of the account for<br /> handling billing information, there's a spot to add an email address for<br /> billing notifications. I have long ago opted out of all marketing<br /> options offered and for many years didn't get much except notices the<br /> bill is due.<br /><br /> Two years ago I decided to give them a new email address which was a<br /> randomly generated alias at my domain and hosted on my own server. I<br /> had done that with several other companies (bank, credit card, etc.),<br /> just hadn't gotten around to AT&T yet.<br /><br /> Two years and all was fine. A few days ago, I suddenly start receiving<br /> tons of spam attempts (usually blocked by an RBL) and connection<br /> attempts on my server. I always have the exim logs showing on my<br /> screen, I can see emails coming in as it happe
ns
including the failures.<br /> This was the first time that any of my random aliases were used by<br /> someone other than the company that has it. Until this point no one<br /> tried these addresses because they weren't advertised anywhere by any<br /> mechanism.<br /><br /> I never gave anyone else that particular alias, I don't use it as a<br /> username for my online account access, it's not stored in my phone or on<br /> any address books, and I don't send email from it (receive only alias).<br /><br /> I've already called their fraud department who proceeded to spend 40<br /> minutes on the phone with me using various levels of technical jargon<br /> plus pointing fingers to shift the blame away from them (at one point<br /> they actually said "A third party must have your email address.")<br /><br /> Do you think it was sold and they got caught with their hand in the<br /> cookie jar or stolen and they don't know there's a breach in progress?<br /><br /> Aside from th
e fraud
group which has advised me that they are opening an<br /> investigation (maybe) would you suggest I talk to anyone else?<br /><br /><br /> Exim's logs show attempts coming in from a vast array of countries<br /> including Italy, Canada, Switzerland, Brazil, Romania, Argentina,<br /> Bulgaria, Portugal, Serbia, Germany, Austria, Israel, India, Turkey,<br /> Spain, Croatia, Venezuela, Columbia, Poland, Iraq (by way of Al<br /> Jazeera's servers of all things) and quite a few servers within the US<br /> plus many, many more that I didn't spend time looking up just yet.<br /></blockquote></blockquote><br /><hr /><br />Ale mailing list<br />Ale@ale.org<br /><a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a><br />See JOBS, ANNOUNCE and SCHOOLS lists at<br /><a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a><br /><br /></pre></blockquote></div><br>
--<br>
Jim Kinney<br>
Linux Systems Analyst<br>
Physicist/Brewer<br>
<a href="http://jimkinney.us">http://jimkinney.us</a></body></html>