cancel
Showing results for 
Search instead for 
Did you mean: 

'Blank' Emails received

minkey
Rising Star
Posts: 418
Thanks: 15
Fixes: 2
Registered: ‎22-07-2007

'Blank' Emails received

Hi
I have received a load of emails today which didn't get stopped by the spam filter. They had no readable 'From' or 'Subject' and were in multi-MIME format. Any reason why these didn't get picked up by the filter and don't have the normal postini headers?
Full Header here:
Return-path: <therese536sonia@poczta.onet.pl>
Envelope-to: x_wuefeigqh@XXXXXXX.co.uk
Delivery-date: Mon, 06 Oct 2008 13:51:14 +0100
Received: from exprod5mx194.postini.com ([64.18.0.40] helo=psmtp.com)
  by pih-sunmxcore14.plus.net with smtp (PlusNet MXCore v2.00) id 1KmpYP-0005tj-15
  for x_wuefeigqh@XXXXXXX.co.uk; Mon, 06 Oct 2008 13:51:13 +0100
Received: from source ([78.188.40.168]) by exprod5mx194.postini.com ([64.18.4.14]) with SMTP;
Mon, 06 Oct 2008 05:51:10 PDT
Message-ID: <2eea019dbf58$416e9af0$2a1dabd0@poczta.onet.pl>
From: "=?windows-1251?B?y8XOzcjE?=" <therese536sonia@poczta.onet.pl>
To: <x_wuefeigqh@XXXXXXX.co.uk>
Subject: =?windows-1251?B?WW91ciBhY3RpdmF0aW9uIGNvZGU=?=
Date: Mon, 06 Oct 3609 15:51:09 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=----=_NextPart_000_0023_1D_BA3BBD85.B81DFDDC
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-pstn-neptune: 495/163/0.33/43
X-pstn-levels:    (S:62.74508/99.90000 CV:99.9999 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1
X-pstn-addresses: from <therese536sonia@poczta.onet.pl> [1368/71]
To:
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject:
7 REPLIES 7
rahewitt
Grafter
Posts: 62
Thanks: 1
Registered: ‎28-07-2007

Re: 'Blank' Emails received

Yes, I had five of these to my catch all email address, at 12:39pm, all using some sort of randomly generated email address.  Looking at them there must be very little for postini to go on?
I guess if this becomes regular I'm going to have to black hole my catch all email address.
jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: 'Blank' Emails received

20 of them here
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
geewizz
Grafter
Posts: 1,125
Registered: ‎01-08-2007

Re: 'Blank' Emails received

I get these too. I suspect they're from the same guy who does the heavy breathing phonecalls.
Chris
Legend
Posts: 17,724
Thanks: 600
Fixes: 169
Registered: ‎05-04-2007

Re: 'Blank' Emails received

Hmm, I've not received any of these yet. I'll keep an eye out in the office for any reports coming in of this and see what I can find out from the headers posted in the first post when I get in tomorrow.
Former Plusnet Staff member. Posts after 31st Jan 2020 are not on behalf of Plusnet.
rahewitt
Grafter
Posts: 62
Thanks: 1
Registered: ‎28-07-2007

Re: 'Blank' Emails received

I forwarded mine as attachments to Spamtraining if this helps?
dave
Plusnet Help Team
Plusnet Help Team
Posts: 12,257
Thanks: 306
Fixes: 4
Registered: ‎04-04-2007

Re: 'Blank' Emails received

I get them from time to time, had a bunch this afternoon, all spam by the looks of it. Chris if you need any more headers let me know.
Dave Tomlinson
Enterprise Architect - Network & OSS
Plusnet Technology
Tony_W
Grafter
Posts: 745
Registered: ‎11-08-2007

Re: 'Blank' Emails received

I looked at the headers and found that they were all addressed to only 5 (supposedly random lettered) addresses.
E.g.
kjiwefiu3@username.f9.co.uk
deadr44@username.f9.co.uk
45fsef56@username.f9.co.uk
67h34gg@username.f9.co.uk
1234hsdf72@username.f9.co.uk

I went to the email settings redirections section, created 5 new redirections to blackhole them and have not had any since.
The apparent random nature of the addresses makes you think that it is not possible to trap them, but the addresses are repeated in later emails.