Spam mail

[pammy]

Is anyone else getting this?

I'm getting the damm thing 5 or 6 times a day. Always from different senders with diff subject titles - always two random words and the message itself is an image that's embedded into the message so Motino can't identify it.

ANy ideas? IT's driving me nuts

 

[Steve_Perry]

What are the subject titles? No common words at all?

Some of my webmail based accounts are getting unusable because of the limited filter system employed, my Orange account gets approx 12 spams a day, usually identical posts too.

Fortunately my other accounts are either not spammed or have sophisticated filters to keep the Censored!'s under control.

I'm even starting to get unsolicited emails from the likes of Ocean Finance for no obvious reason what-so-ever, grrr.

S.

 

[pammy]

yup - totally random words. The last 5 for example:

Excellent Define
Luxury Bigotry
Untoward Dumpling
Republican Party
Definitively Reverence

Senders:

Luke Beach
Theobold Olliver and the like - so nothing a filter can pull out

 

[Steve_Perry]

yup - totally random words. The last 5 for example:

Excellent Define
Luxury Bigotry
Untoward Dumpling
Republican Party
Definitively Reverence

Senders:

Luke Beach
Theobold Olliver and the like - so nothing a filter can pull out

Can you look at the full email header to see if they come from the same IP address? The email address are more than likely spoofed or faked.

S.

 

[KillerHERTZ]

I keep getting hotmail card forms asking me to fill my card details in to update my account

 

[pammy]

Can you look at the full email header to see if they come from the same IP address? The email address are more than likely spoofed or faked.

S.

Dunno - which bit of it would tell me? These are the headers from 2 (1 in green, 1 in red to make it easier to see which is which:

Return-Path: <[email protected]>
Received: from aamtain03-winn.ispmail.ntl.com ([81.103.221.35])
by mtain04-winn.ispmail.ntl.com with ESMTP
id <20060423114909.EKDV2851.mtain04-winn.ispmail.ntl.com@aamtain03-winn.ispmail.ntl.com>
for <REMOVED>; Sun, 23 Apr 2006 12:49:09 +0100
Received: from 139-56.73-24.tampabay.res.rr.com ([24.73.56.139])
by aamtain03-winn.ispmail.ntl.com with SMTP
id <20060423114908.MMJA27823.aamtain03-winn.ispmail.ntl.com@139-56.73-24.tampabay.res.rr.com>
for <REMOVED>; Sun, 23 Apr 2006 12:49:08 +0100
Received: from pbxmhc ([24.73.101.222])
by 139-56.73-24.tampabay.res.rr.com (8.13.3/8.13.3) with SMTP id k3NBr6St018971;
Sun, 23 Apr 2006 07:53:06 -0400
Message-ID: <001501c666cb$e966f20e$de654918@pbxmhc>
From: "Theobald Oliver" <[email protected]>
To: <REMOVED>
Subject: excellent define
Date: Sun, 23 Apr 2006 07:41:31 -0400
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0011_01C666AA.625551F6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Return-Path: <[email protected]>
Received: from aamtain08-winn.ispmail.ntl.com ([81.103.221.35])
by mtain01-winn.ispmail.ntl.com with ESMTP
id <20060422055544.NTJE1322.mtain01-winn.ispmail.ntl.com@aamtain08-winn.ispmail.ntl.com>
for <REMOVED>; Sat, 22 Apr 2006 06:55:44 +0100
Received: from FLA1Abe183.aic.mesh.ad.jp ([133.205.89.183])
by aamtain08-winn.ispmail.ntl.com with SMTP
id <20060422055542.PNWW5375.aamtain08-winn.ispmail.ntl.com@FLA1Abe183.aic.mesh.ad.jp>
for <REMOVED>; Sat, 22 Apr 2006 06:55:42 +0100
Received: from irr.jwed ([133.205.240.84])
by FLA1Abe183.aic.mesh.ad.jp (8.13.1/8.13.1) with SMTP id k3M60DCA079231;
Sat, 22 Apr 2006 15:00:13 +0900
Message-ID: <[email protected]>
From: "Joachim Christopher" <[email protected]>
To: <REMOVED>
Subject: untoward dumpling
Date: Sat, 22 Apr 2006 14:50:25 +0900
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0003_01C6661C.D306BF40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

 

[Steve_Perry]

*Ahem* You may want to take out all references to your email address from the post above otherwise you may increase spam count.

S.

 

[grober]

Spyware/trojan E mails

There's a spate of "mail undelivered, address unknown, delivery failure etc etc " going the rounds at the moment also. Be wary SOME contain spyware or Trojans. You dont have to open them highlighting them can be enough make sure your virus spyware software is up to date.

 

[glojo]

*Ahem* You may want to take out all references to your email address from the post above otherwise you may increase spam count.

S.

You beat me to it.

Pammy,
Hit the edit button.

I was pestered with spam when I was with Freeserve, Eclipse is excellent.

John

 

[Steve_Perry]

You beat me to it.

Pammy,
Hit the edit button.

I was pestered with spam when I was with Freeserve, Eclipse is excellent.

John

Pammy, I have edited your post above removing any references to your own email address. I hope you don't mind but we don't want to make your problem worse in trying to cure the problem.

If I had to guess I would say that irr.jwed ([133.205.240.84]) and pbxmhc ([24.73.101.222]) have been infected with back door trojans and are being remotely directed to send spam mail, I'm not sure but even those addresses could be spoofed. You can see from the header that "Joachim Christopher" <[email protected]> and "Theobald Oliver" <[email protected]> are not thr original senders as you would first imagine.

S.

 

[pammy]

Thanks Steve - appreciate that. Looks like I'm just going to have to wait for them to go out of fashion then - rather like the Viagra ones

 

[Steve_Perry]

Thanks Steve - appreciate that. Looks like I'm just going to have to wait for them to go out of fashion then - rather like the Viagra ones

Afraid so,

Hotmail have a great system whereby if an incoming email isn't from someone on your own "safe list" then it doesn't get past the front door.

S.

 

[pammy]

mm - sounds good.

btw - nice to see you around m8 - you have been missed Will you make Clumber this year?

 

[Steve_Perry]

... btw - nice to see you around m8 - you have been missed Will you make Clumber this year?

Thanks, I've been working away from home quite a bit these last few months hence my absence from the boards. I doubt I will be able to make Clumber this year

S.

 

[GRAV888]

rather like the Viagra ones

Ah, an email nightmare, but a brilliant invention.

 

[grasmere]

wait for them to go out of fashion then - rather like the Viagra ones

what! do you mean Viagra is going out of fashion ?

 

[GRAV888]

what! do you mean Viagra is going out of fashion ?

Not round my neck of the woods it isn't.
More viagra available here than anadin

 

[Ian B Walker]

Not round my neck of the woods it isn't.
More viagra available here than anadin

So your Mrs keeps saying

 

[PJH]

Most ISPs have an abuse mailbox that you can forward e-mails to, ie [email protected]
Might encourage them to do something about them.....