cancel
Showing results for 
Search instead for 
Did you mean: 

SpamBot

reflexion
Dabbler
Posts: 15
Registered: 08-06-2007

SpamBot

I wonder if PN know there's a spambot on there network? Its been doing its business now for the last 5 days.
inetnum:      212.159.8.0 - 212.159.11.255
netname:      PLUSNET-VISP-SERVERS
descr:        Virtual ISP Portal servers
descr:        PlusNet Technologies Ltd
country:      GB
It been hitting my mail server & a couple of other I manage at a rate of about 20 spam an hour, I have now had to blacklist PN's server to stop the jank coming through
11 REPLIES
Community Veteran
Posts: 18,668
Thanks: 231
Registered: 12-08-2007

Re: SpamBot

I got an email from unquarantine@quarantine.plus. com telling me that PN was holding an email that had been sent to me because it contained a virus.  I've never seen this before and don't recognise the PN email given.  Is this part of the problem?
Community Veteran
Posts: 1,264
Registered: 04-04-2007

Re: SpamBot

reflexion:
Have you reported it to our abuse team so they can investigate and deal with it? You should be able to do it via abuse@plus.net and they'll take a look.
artmo:
That's a genuine email assuming it's something similar to:
Quote
Dear Force9 Customer,
You are receiving this mail because you have an active virus-scanning
service, and either a banned file extension or an email containing
a virus has been sent to your address.
The item(s) in question picked up by the service was:
*      New Malware.aaa
and was sent to you from:
*      "UPS Postal Service Support Team" <rtnsvihaca@boim.com>
The subject line of the mail received was:
*      Tracking N 0223578129
In order to protect you, this email has been stored on our servers
and quarantined.  If you wish to retrieve this, please send an
email to unquarantine@quarantine.force9.co.uk containing the following information;
----------------------- SUPPORT INFORMATION ----------------------
Quarantine-Id: b30a039c138221aba90b300dcdf7d4c232422
Message-Id: <01c93435$473f1f80$4215e1de@rtnsvihaca>
To: <me@myaccount.co.uk>
----------------------- SUPPORT INFORMATION ----------------------
It should be possible to reply to this mail to retrieve your email,
as long as your email application includes this entire message in
the reply.
Kind Regards,
Customer Support.
Community Veteran
Posts: 18,668
Thanks: 231
Registered: 12-08-2007

Re: SpamBot

Thanks again Colin.  You're clearing up a few queries for me this morning Smiley  Yes it was in the format you show.  It was just something I'd not seen before.
pierre_pierre
Grafter
Posts: 19,757
Registered: 30-07-2007

Re: SpamBot

What Colin didnt tell you was if you dont want take no action it will soon get deleted
Community Veteran
Posts: 5,880
Thanks: 1
Registered: 05-04-2007

Re: SpamBot

Moderators Note
I've moved this into community support as it's more of a support issue than a rant or rave Smiley
Community Veteran
Posts: 18,668
Thanks: 231
Registered: 12-08-2007

Re: SpamBot

Quote from: pierre_pierre
What Colin didnt tell you was if you dont want take no action it will soon get deleted

Full instructions are clearly stated in the email.  My concern was that having not seen one of these messages before I wondered if it was genuine.
Superuser
Superuser
Posts: 9,583
Thanks: 958
Fixes: 55
Registered: 06-04-2007

Re: SpamBot

Perhaps an example message could be added to the Help and Support pages, e.g. the Anti Virus tool FAQ?
David
pierre_pierre
Grafter
Posts: 19,757
Registered: 30-07-2007

Re: SpamBot

Nothing in the one I received on the 22nd to say leave it and we will delete it and nothing in the one Colin quoted
Community Veteran
Posts: 38,460
Thanks: 1,027
Fixes: 62
Registered: 15-06-2007

Re: SpamBot

just looked in my catchall address and received this
Quote
Dear Plusnet Customer,
You are receiving this mail because you have an active virus-scanning
service, and either a banned file extension or an email containing
a virus has been sent to your address.
The item(s) in question picked up by the service was:
*       Generic PWS.o
and was sent to you from:
*       "floyd boyd" <info@imc-quorum.com>
The subject line of the mail received was:
*       New Anje1lna Jo1ie p0rn
In order to protect you, this email has been stored on our servers
and quarantined.  If you wish to retrieve this, please send an
email to unquarantine@quarantine.plus.com containing the following information;
----------------------- SUPPORT INFORMATION ----------------------
Quarantine-Id: 98b51acc3a42c6a4126e6dfde5eff12d32422
Message-Id: <79736.clarisa@xueqing>
To: "friend" <gmn@holtlane.plus.com>
----------------------- SUPPORT INFORMATION ----------------------
It should be possible to reply to this mail to retrieve your email,
as long as your email application includes this entire message in
the reply.
Kind Regards,
Customer Support.

Community Veteran
Posts: 18,668
Thanks: 231
Registered: 12-08-2007

Re: SpamBot

Yes, same as the one I received except for the sender.
pierre_pierre
Grafter
Posts: 19,757
Registered: 30-07-2007

Re: SpamBot

your lucky I have had 14 since beginning of Sept