cancel
Showing results for 
Search instead for 
Did you mean: 

Please Help me stop unwanted emails

FIXED
Champnet
Hero
Posts: 3,201
Thanks: 1,255
Fixes: 18
Registered: ‎25-07-2007

Re: Please Help me stop unwanted emails

@Digsy  Can you block on the  contents of the Subject line as the sending IP varies on eaeh email.

Today I've received :

07/04 05:45       126.52.131.47 Japan
07/04 06:38        88.188.201.98 France
07/04 06:39           2.79.111.129 Kazakhstan
07/04 07:26       199.174.48.246 USA

 

 

shark50
Hooked
Posts: 9
Thanks: 1
Fixes: 1
Registered: ‎18-08-2021

Re: Please Help me stop unwanted emails

I'm currently getting about a 100 of these spoofed emails per hour!!

Luckily they all end up in the SPAM bucket, so it's a battle of wills between me getting bored or him getting bored first, but he's not getting a penny from me.

 

I've checked the full email headers and they change almost every time.

 

Return-Path: <myemail@plus.net>
Delivered-To: myemail@plus.net
Received: from dovecot-director-2.dovecot-director.enmail-prod.svc.cluster.local ([192.168.59.8])
    by dovecot-9.dovecot.enmail-prod.svc.cluster.local with LMTP
    id uK7xOKnG1GmsoQcAnHNXmw
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 08:56:09 +0000
Received: from mail.enmail.co ([192.168.118.137])
    by dovecot-director-2.dovecot-director.enmail-prod.svc.cluster.local with LMTP
    id 0J52OKnG1GkNHQEABAqjjQ
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 08:56:09 +0000
Received: from [103.247.52.254] (unknown [139.5.7.3])
    by mail.enmail.co (Postfix) with ESMTP id 5A60DC02C7
    for <myemail@plus.net>; Tue,  7 Apr 2026 08:56:07 +0000 (UTC)
Authentication-Results: mail.enmail.co;
    dkim=none;
    spf=softfail (mail.enmail.co: 139.5.7.3 is neither permitted nor denied by domain of myemail@plus.net) smtp.mailfrom=myemail@plus.net;
    dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plus.com (policy=none)
Received: from ivlfsvf ([131.210.209.120]) by 66220.com with MailEnable ESMTP; Tue, 7 Apr 2026 14:25:56 +0530
Received: (qmail 00596 invoked by uid 005); 7 Apr 2026 14:25:54 +0530


Return-Path: <myemail@plus.net>
Delivered-To: myemail@plus.net
Received: from dovecot-director-4.dovecot-director.enmail-prod.svc.cluster.local ([192.168.35.93])
    by dovecot-9.dovecot.enmail-prod.svc.cluster.local with LMTP
    id gP5cFXzJ1GmMzwcAnHNXmw
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 09:08:12 +0000
Received: from mail.enmail.co ([192.168.118.145])
    by dovecot-director-4.dovecot-director.enmail-prod.svc.cluster.local with LMTP
    id SMgvFXzJ1GnM6jgACykUkg
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 09:08:12 +0000
Received: from [197.211.52.72] (unknown [197.211.52.254])
    by mail.enmail.co (Postfix) with ESMTP id EA60A120138
    for <myemail@plus.net>; Tue,  7 Apr 2026 09:08:09 +0000 (UTC)
Authentication-Results: mail.enmail.co;
    dkim=none;
    spf=softfail (mail.enmail.co: 197.211.52.254 is neither permitted nor denied by domain of myemail@plus.net) smtp.mailfrom=myemail@plus.net;
    dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plus.com (policy=none)
Received: from zwigxke ([209.249.146.152]) by 34759.com with MailEnable ESMTP; Sat, 2 Feb 2002 01:04:30 +0100
Received: (qmail 38489 invoked by uid 384); 2 Feb 2002 01:04:28 +0100


Return-Path: <myemail@plus.net>
Delivered-To: myemail@plus.net
Received: from dovecot-director-1.dovecot-director.enmail-prod.svc.cluster.local ([192.168.222.96])
    by dovecot-9.dovecot.enmail-prod.svc.cluster.local with LMTP
    id eENNEFXM1GmMzwcAnHNXmw
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 09:20:21 +0000
Received: from mail.enmail.co ([192.168.65.54])
    by dovecot-director-1.dovecot-director.enmail-prod.svc.cluster.local with LMTP
    id UA4gGEPM1GkEIBUAOi1KhQ:T19
    (envelope-from <myemail@plus.net>)
    for <myemail@plus.net>; Tue, 07 Apr 2026 09:20:21 +0000
Received: from [212.241.16.138] (unknown [212.241.16.138])
    by mail.enmail.co (Postfix) with ESMTP id E57B6C03F8
    for <myemail@plus.net>; Tue,  7 Apr 2026 09:20:18 +0000 (UTC)
Authentication-Results: mail.enmail.co;
    dkim=none;
    spf=softfail (mail.enmail.co: 212.241.16.138 is neither permitted nor denied by domain of myemail@plus.net) smtp.mailfrom=myemail@plus.net;
    dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plus.com (policy=none)
Received: from bkvdgnf ([144.55.29.29]) by 59347.com with MailEnable ESMTP; Tue, 7 Apr 2026 15:20:30 +0300
Received: (qmail 50493 invoked by uid 504); 7 Apr 2026 15:20:27 +0300
From: myemail@plus.net


My wife is getting them too, just not at the same rate.

 

Deep joy

Digsy
Rising Star
Posts: 79
Thanks: 20
Fixes: 1
Registered: ‎20-06-2016

Re: Please Help me stop unwanted emails


@Champnet wrote:

@Digsy  Can you block on the  contents of the Subject line as the sending IP varies on each email.

 

 

 


I could, if the PN spam filter gave me that option, as the subject line is always the same.

I did have my spam filter sensitivity set to 1 (the lowest setting) so I shall start increasing it one notch at a time to see it makes any diiference.

Mind you with a PN spam rating already at 99 you have to wonder why these are getting through in the first place.

geoffers
Rising Star
Posts: 90
Thanks: 16
Fixes: 1
Registered: ‎30-07-2007

Re: Please Help me stop unwanted emails

I've been getting 20 or so a day too - only since Plusnet email migrated to Grennby

Mine are Received: from [213.230.92.48]   <<<< This is Hostname: 48.64.uzpak.uz a service provider in Uzbekistan 

Luckily they go into the spam email box, but also do some valid emails so have to keep deleting the pervert ones to see the non-spam emails

Mad_Moggies
Aspiring Pro
Posts: 1,315
Thanks: 67
Registered: ‎01-08-2007

Re: Please Help me stop unwanted emails

I've been getting the same since this weekend just gone. The first couple of batches were from a named person but the remainder have been sent as though from me, but obviously the address has been spoofed.

I'm fed up with them too, and incidentally I'm a 75 yrs old female, but I'm not embarrassed as it's probably silly young students doing this spamming - idiots anyway, as if we're going to give in and send them what they demand! I don't even have a webcam on my computer

Have been logging into webmail to report them as Junk/Spam and also forwarding them to report@phishing.gov.uk but they are still coming. There's not much more we can do unfortunately, apart from blocking the sent address, but if I block my own email address I won't see anything I've BCCd to myself when I've sent emails to people using it (though it's an address I don't often use).

Plusnet user since November 2003
Full Fibre since September 2023
Mac OS and Firefox user with latest versions of both
Digsy
Rising Star
Posts: 79
Thanks: 20
Fixes: 1
Registered: ‎20-06-2016

Re: Please Help me stop unwanted emails

I've not had any dodgy emails today. 

 

In the worst tradition of the scientific method I had changed two things at once: (1) I increased my spam filter sensitivity from 1 to 2, and (2) I used webmail to "mark these messages as spam".  So I don't know which of these was instrumental in stopping the mails.

 

Happily, marking several e-mails apparently from my own address as spam did not block my own address. I can still send mail to me from me (which I often do for notes when I am on the move).

 

I have now put my spam filter sensitivity back to 1 to see if the mails start again. 

Leanne_T
Plusnet Help Team
Plusnet Help Team
Posts: 116
Thanks: 82
Fixes: 2
Registered: ‎10-12-2024

Re: Please Help me stop unwanted emails

Morning everyone,

Could you send me a private message with the full unedited email headers please? I will send the feedback and examples over to the email support team.

Details on finding this can be found in the Obtaining email headers page.

Leanne.

Digsy
Rising Star
Posts: 79
Thanks: 20
Fixes: 1
Registered: ‎20-06-2016

Re: Please Help me stop unwanted emails

I've received four more emails since turning the spam filter sensitivity back down to 1, so I have just reset to 2. I expect they will stop again now.

Mad_Moggies
Aspiring Pro
Posts: 1,315
Thanks: 67
Registered: ‎01-08-2007

Re: Please Help me stop unwanted emails

I've been getting them all along with my spam filter permanently set at level 2!
Another 20+ overnight and a few more more recently, but those few were only on my phone and webmail. My computer may be learning to ignore them!

Plusnet user since November 2003
Full Fibre since September 2023
Mac OS and Firefox user with latest versions of both
Mad_Moggies
Aspiring Pro
Posts: 1,315
Thanks: 67
Registered: ‎01-08-2007

Re: Please Help me stop unwanted emails

Thanks. Several sent to you via PM

Plusnet user since November 2003
Full Fibre since September 2023
Mac OS and Firefox user with latest versions of both
Katie222
Rising Star
Posts: 84
Thanks: 19
Fixes: 3
Registered: ‎16-01-2017

Re: Please Help me stop unwanted emails

I get my emails via outlook. is there a spam filter with it please? I looked but can't see anything.

Katie

pvmb
Seasoned Pro
Posts: 1,307
Thanks: 233
Fixes: 11
Registered: ‎12-02-2014

Re: Please Help me stop unwanted emails

On a technical level I am finding some of these posts a little bit confusing. (Could just be me)

I only ever used Plusnet and now Greenby email via the webmail service. That means via a web browser, one on my PC (Edge) and now another on my phone (Opera). No spam, no problems! AFAIK I had spam filtering off in my Plusnet account. Spam filtering with Greenby is On by default (Level 3), no spam emails received yet, but it occasionally puts a few incoming messages into the Spam box*. Not a problem, just flag them as Not Spam.

If people are using email clients on their devices the situation would be more nuanced. They can use POP or IMAP. I have used POP in the past but never IMAP (so am not entirely clear about its workings).

The thing is, I would assume using a client software with POP you would either operate with no spam filter on the host and use the client software for spam control, or if using host spam filters be prepared to log on via webmail in order to check for spam in the Spam mailbox. I assume, if using, IMAP you would see the Spam box mapped to your local device.

If people are using different devices to access their email, how clear are they about how it all works? e.g. POP moves incoming messages out of the mail hosts inbox to the client device so they won't then any longer be available via webmail or IMAP (some systems do retain a copy in another user mailbox, don't know about Greenby). My understanding of IMAP is that it maps the host system's user mailboxes on the client device. I assume this would indeed interwork OK with webmail, but what if some are using POP on one device and IMAP on another - plus webmail?

 

With your Greenby account email settings, accessed via the Greenby portal, at FILTERS you can choose Blocked & Whitelist for email addresses. At SETTINGS you can control the Anti Spam level. Mine was set at Level 3 ("More aggressive"). I have now reduced it to 8 ("Less aggressive").

Katie222
Rising Star
Posts: 84
Thanks: 19
Fixes: 3
Registered: ‎16-01-2017

Re: Please Help me stop unwanted emails

Leanne -

How do I PM you?

jab1
The Full Monty
Posts: 23,565
Thanks: 8,354
Fixes: 353
Registered: ‎24-02-2012

Re: Please Help me stop unwanted emails

@Katie222 Click Leanne_T 's name (in pink) and it should give you the option to send a PM.

John
pvmb
Seasoned Pro
Posts: 1,307
Thanks: 233
Fixes: 11
Registered: ‎12-02-2014

Re: Please Help me stop unwanted emails


@Digsy wrote:

In the worst tradition of the scientific method I had changed two things at once: (1) I increased my spam filter sensitivity from 1 to 2, and (2) I used webmail to "mark these messages as spam".  So I don't know which of these was instrumental in stopping the mails.

I have now put my spam filter sensitivity back to 1 to see if the mails start again. 


But, on the Greenby system, surely an Anti Spam setting of "1" is the most aggressive? A higher setting number corresponds to less aggressive.