A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Spam flood - anyone else getting this?



 
 
Thread Tools Display Modes
  #1  
Old June 14th 14, 09:24 PM posted to uk.telecom.broadband
Harry Bloomfield
external usenet poster
 
Posts: 250
Default Spam flood - anyone else getting this?

I'm suddenly getting maybe 30 per day spam emails, never from the same
addresses - so I cannot even block them with my spam filter, many with
'If you cannot see this email visit us' then URL's to click on.
Obviously I don't click on them, but if I look at the raw header, I see
hundreds of random words, one word per line and each is different from
the next.

--
Regards,
Harry (M1BYT) (L)
http://www.ukradioamateur.co.uk
  #2  
Old June 15th 14, 11:11 AM posted to uk.telecom.broadband
George Weston
external usenet poster
 
Posts: 467
Default Spam flood - anyone else getting this?

On 14/06/2014 21:24, Harry Bloomfield wrote:
I'm suddenly getting maybe 30 per day spam emails, never from the same
addresses - so I cannot even block them with my spam filter, many with
'If you cannot see this email visit us' then URL's to click on.
Obviously I don't click on them, but if I look at the raw header, I see
hundreds of random words, one word per line and each is different from
the next.

In short, no.
It would help to know from which mail server these spams are coming.
I get maybe one or two spams/phishing emails a week on my main (Plusnet)
address, on which I've been able to set the spam filter to "medium"
aggression. These are usually recognisable as such from the subject
line, and after checking properties, I can usually block the sender's
domain or email address, and then delete without opening.
On my Gmail account, I get no nasties at all.
It looks like your email address has been targeted by a botnet?
  #3  
Old June 15th 14, 02:34 PM posted to uk.telecom.broadband
R. Mark Clayton
external usenet poster
 
Posts: 699
Default Spam flood - anyone else getting this?


"Harry Bloomfield" wrote in message
. uk...
I'm suddenly getting maybe 30 per day spam emails, never from the same
addresses - so I cannot even block them with my spam filter, many with 'If
you cannot see this email visit us' then URL's to click on. Obviously I
don't click on them, but if I look at the raw header, I see hundreds of
random words, one word per line and each is different from the next.

--
Regards,
Harry (M1BYT) (L)
http://www.ukradioamateur.co.uk


Sounds like a denial of service attack


  #4  
Old June 15th 14, 03:55 PM posted to uk.telecom.broadband
alexd
external usenet poster
 
Posts: 1,765
Default Spam flood - anyone else getting this?

R. Mark Clayton (for it is he) wrote:

"Harry Bloomfield" wrote in message
. uk...
I'm suddenly getting maybe 30 per day spam emails,


Sounds like a denial of service attack


Ehh? 30 emails a day is a DoS? Perhaps if you were running your mail server
on a Commodore 64...

never from the same addresses - so I cannot even block them with my spam
filter


In my experience, complete and utter ****e email never uses the same
[inevitably forged] address twice, whereas commercial organisations who you
might want to do business with do, and often include a working unsubscribe
link [I assume this is a legal requirement].

You might want to ask your email provider about anti-spam measures.

--
http://ale.cx/ (AIM:troffasky) )
15:50:42 up 164 days, 17:29, 10 users, load average: 0.40, 0.48, 0.49
"If being trapped in a tropical swamp with Anthony Worral-Thompson and
Christine Hamilton is reality then I say, pass the mind-altering drugs"
-- Humphrey Lyttleton

  #5  
Old June 15th 14, 08:27 PM posted to uk.telecom.broadband
Michael R N Dolbear
external usenet poster
 
Posts: 87
Default Spam flood - anyone else getting this?

"Harry Bloomfield" wrote

I'm suddenly getting maybe 30 per day spam emails, never from the same

addresses - so I cannot even block them with my spam filter, many with
'If you cannot see this email visit us' then URL's to click on.
Obviously I don't click on them, but if I look at the raw header, I see
hundreds of random words, one word per line and each is different from
the next.

You might consider installing SpamAssassin for example (one of its tests is
naughty URLs in the body.

Besides SpamAssassin other trainable filters can be tried and obviously a
header hundreds of lines long is easy.

If you are using Tiscali/Talktalk or indeed any ISP then look into their
anti-spam features.

One method, if you don't have many new correspondents, is to filter all such
who are known to you to a filtered folder and put the rest in a new & junk
folder.

More advice at http://forum.spamcop.net/forums/



--
Mike D

  #6  
Old June 16th 14, 11:35 AM posted to uk.telecom.broadband
Nigel Wade
external usenet poster
 
Posts: 41
Default Spam flood - anyone else getting this?

On 14/06/14 21:24, Harry Bloomfield wrote:
I'm suddenly getting maybe 30 per day spam emails, never from the same addresses - so I cannot even block them with my
spam filter, many with 'If you cannot see this email visit us' then URL's to click on. Obviously I don't click on them,
but if I look at the raw header, I see hundreds of random words, one word per line and each is different from the next.


If they contain random words they are presumably an attempt to "poison" Bayesian filtering spam filters.
Just ignore them. There's not much more that you can do. Adding them to your spam filtering will probably mess up its
accuracy.

The pond life usually moves on after a while.
  #7  
Old June 16th 14, 02:04 PM posted to uk.telecom.broadband
Harry Bloomfield
external usenet poster
 
Posts: 250
Default Spam flood - anyone else getting this?

Nigel Wade presented the following explanation :
If they contain random words they are presumably an attempt to "poison"
Bayesian filtering spam filters.
Just ignore them. There's not much more that you can do. Adding them to your
spam filtering will probably mess up its accuracy.

The pond life usually moves on after a while.


None showed up yesterday and none so far today, so it may hopefully be
at an end.

As you suggest, there was just nothing for my filters to latch onto -
all different from addresses, all different content.

--
Regards,
Harry (M1BYT) (L)
http://www.ukradioamateur.co.uk
  #8  
Old June 16th 14, 03:36 PM posted to uk.telecom.broadband
Harry Bloomfield
external usenet poster
 
Posts: 250
Default Spam flood - anyone else getting this?

Harry Bloomfield explained :
Nigel Wade presented the following explanation :
If they contain random words they are presumably an attempt to "poison"
Bayesian filtering spam filters.
Just ignore them. There's not much more that you can do. Adding them to
your spam filtering will probably mess up its accuracy.

The pond life usually moves on after a while.


None showed up yesterday and none so far today, so it may hopefully be at an
end.

As you suggest, there was just nothing for my filters to latch onto - all
different from addresses, all different content.


One was just delivered, but not one containing the random list of
words..

Return-Path:
Received: from public.mx1gb1.int.opaltelecom.net (62.24.139.126) by
mail.svcgb1.int.opaltelecom.net (8.5.153)
id 535DB50703223176 for ; Mon, 16 Jun
2014 15:02:17 +0100
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
ArBPAGn4nlNteLEzYGdsb2JhbAAlGwQWEII+XAIzLzCBb08pgX UBiVMBBpZkhSoKViiGQAyJJBkFAYYugQkDgSkEGAcECQgVKIQN IAgGAQETCCIQFQMEEgIPAhUCAiwDAQENLgIDBxUEh0RJAQEWCT awb4F7gUZbgmKBWo8HZYVkgSoXhiaEf4EmewyCYRKBOgSKOYZH hG6GGIZJimWCKYFHPDgEAygEAg
X-IPAS-Result:
ArBPAGn4nlNteLEzYGdsb2JhbAAlGwQWEII+XAIzLzCBb08pgX UBiVMBBpZkhSoKViiGQAyJJBkFAYYugQkDgSkEGAcECQgVKIQN IAgGAQETCCIQFQMEEgIPAhUCAiwDAQENLgIDBxUEh0RJAQEWCT awb4F7gUZbgmKBWo8HZYVkgSoXhiaEf4EmewyCYRKBOgSKOYZH hG6GGIZJimWCKYFHPDgEAygEAg
X-IronPort-AV: E=Sophos;i="5.01,486,1400022000";
d="scan'208,217";a="1864965713"
Received: from mta8.mojpiar.net (HELO vps-1028190.srv.pa.infobox.ru)
([109.120.177.51])
by public.mx1gb1.int.opaltelecom.net with ESMTP; 16 Jun 2014 15:02:18
+0100
Received: by vps-1028190.srv.pa.infobox.ru (Postfix, from userid 0)
id 5001A37CD530; Mon, 16 Jun 2014 09:43:46 +0400 (MSK)
To:

Subject: Does your Business accept card payments?
X-PHP-Originating-Script: 0:email.php
Message-ID:
Date: Mon, 16 Jun 2014 08:22:58 +0400
From: "Mark"
Reply-To:

MIME-Version: 1.0
X-Mailer-LID: 464,465
List-Unsubscribe:
http://mojpiar.net/IEM610/unsubscribe.php?M=19720288&C=df8d459ff438674e43f0a 8f48ea1c1ce&L=464&N=473

--
Regards,
Harry (M1BYT) (L)
http://www.ukradioamateur.co.uk
  #9  
Old June 16th 14, 05:03 PM posted to uk.telecom.broadband
MB
external usenet poster
 
Posts: 60
Default Spam flood - anyone else getting this?

On 14/06/2014 21:24, Harry Bloomfield wrote:
I'm suddenly getting maybe 30 per day spam emails, never from the same
addresses - so I cannot even block them with my spam filter, many with
'If you cannot see this email visit us' then URL's to click on.
Obviously I don't click on them, but if I look at the raw header, I see
hundreds of random words, one word per line and each is different from
the next.



I have been getting a lot for some time now. It used to be a few a day
but several dozen a day is now quite common.

At the moment they are mainly of one type - 'Tax Refund Message!' from
(obviously not really from there). 'For security
purposes, your online account has been locked. To restore your account,
please click : Sign into My Barclays Account and proceed with the
verification process.' The wording is identical but there seem to be a
few different links in the message. There must be twenty odd of those
today.

The others are the usual mixture.


  #10  
Old June 16th 14, 09:06 PM posted to uk.telecom.broadband
Vir Campestris
external usenet poster
 
Posts: 255
Default Spam flood - anyone else getting this?

On 16/06/2014 14:04, Harry Bloomfield wrote:
None showed up yesterday and none so far today, so it may hopefully be
at an end.


I had 5 today, to random addresses on my domain.

I don't recall the titles. Some b2b type things, with a link to an ip
address. I didn't pay much attention.

Andy
 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
A fire... and flood... at BT Paddington node Martin Jay uk.telecom.broadband (UK broadband) 4 April 2nd 10 06:37 PM
What is Anti-Spam Filter.(thunderbird spam filter) zak07000 uk.telecom.broadband (UK broadband) 0 March 27th 08 04:41 PM
Help! Router failures coinciding with SYN Flood entries in the logs Shevek uk.telecom.broadband (UK broadband) 6 November 24th 05 10:27 AM
flood/bulk network cabling T. uk.comp.home-networking (UK home networking) 4 February 14th 05 06:15 AM
no spam Stephen Routledge uk.telecom.broadband (UK broadband) 0 November 24th 03 08:14 PM


All times are GMT +1. The time now is 05:43 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.