We have been receiving delivery failures for unsent messages over the past few days. The email user in question doesn't have any sent messages that match the failure. I changed the user's password and ran malware scans on the user's machine and the mail server, and everything came up clean. Not sure where this is coming from, hope someone can give me some ideas. The message text is listed below (IPs and domains are blocked out):
-----Original Message-----
From: System Administrator [mailto:System Administrator]
Sent: Thursday, November 06, 2014 9:27 AM
Subject: Delivery Failure
Could not deliver message to the following recipient(s):
Reason: Remote host said: 550 5.1.1 address failed
-- The header and top 20 lines of the message follows --
Received: from ************.cpe.cableone.net [***.***.***.***] by
mail.*****.com with SMTP;
Thu, 6 Nov 2014 09:26:28 -0600
Subject: Not read: Your payment request has been received
Date: Thu, 6 Nov 2014 09:26:26 -0600
Message-ID: <000c01cff9d6$08b91aa0$1a2b4fe0$@com>
MIME-Version: 1.0
Content-Type: application/ms-tnef;
name="winmail.dat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="winmail.dat"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Act6BZopr0Fqq+zkQkOeRydsiSLBuYj/nul2
X-MS-TNEF-Correlator: 00000000B005F2511BA67346823B7E2C5D99A7EFC4DE2B00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