FRIHOST FORUMS SEARCH FAQ TOS BLOGS COMPETITIONS
You are invited to Log in or Register a free Frihost Account!


Spam(?) coming from donutey@host.frihost.net





Donutey
donutey@host.frihost.net seems to be sending another account of mine (kcas88[at]gmail[dot)com) spam in groups of three.

For example, I'll get:

Quote:

February 22, 2007 / 09:24:35am

Name: replica rolex
Email Address: replica@rolex.com
Message: replica handbags
http://replicarolex.forum-on.de
<a href="http://replicarolex.forum-on.de">replica rolex</a>
<a href="http://replicarolex.forum-on.de">rolex replica</a>
<a href="http://replicarolex.forum-on.de">replica rolex watches</a>
IP Address: 201.91.144.3


Then within a few seconds a blank email with the same subject, then another blank email after that.

They seem to be similiar to the wordpress "Please moderate: " emails, but those come from wordpress@donutey.frihost.net, and have some explanation at the top that they are about moderating the spam below.

I'm relatively certain that this is a configuration error on my part, but I'm not sure. Thanks for the help.
Animal
This is a Wordpress notification that someone has placed a comment on your blog. You are notified using the built-in php mail function on the server, so the emails will come from your_DA_username@host.frih.net

The reason they come in threes is that the spam bots will tend to post comments by automation, and quite often submit several comments at once. You can disable the email notifications in your Wordpress settings.

Quote:
February 22, 2007 / 09:24:35am

Name: replica rolex
Email Address: replica@rolex.com
Message: replica handbags
http://replicarolex.forum-on.de
<a href="http://replicarolex.forum-on.de">replica rolex</a>
<a href="http://replicarolex.forum-on.de">rolex replica</a>
<a href="http://replicarolex.forum-on.de">replica rolex watches</a>
IP Address: 201.91.144.3

This is simply the comment that the spammers have left on your blog along with the IP address they were using when they submitted it. This isn't anything to worry about, but there are loads and loads of anti-spam plugins available for Wordpress that should help prevent bots from posting on your blog (Captcha images, high-school maths plugins etc). However, Askimet is probably the best way to keep your blog spam-free.

HTH
tidruG
Donutey wrote:
donutey@host.frihost.net seems to be sending another account of mine (kcas88[at]gmail[dot)com) spam in groups of three.

For example, I'll get:

Quote:

February 22, 2007 / 09:24:35am

Name: replica rolex
Email Address: replica@rolex.com
Message: replica handbags
http://replicarolex.forum-on.de
<a href="http://replicarolex.forum-on.de">replica rolex</a>
<a href="http://replicarolex.forum-on.de">rolex replica</a>
<a href="http://replicarolex.forum-on.de">replica rolex watches</a>
IP Address: 201.91.144.3


Then within a few seconds a blank email with the same subject, then another blank email after that.

They seem to be similiar to the wordpress "Please moderate: " emails, but those come from wordpress@donutey.frihost.net, and have some explanation at the top that they are about moderating the spam below.

I'm relatively certain that this is a configuration error on my part, but I'm not sure. Thanks for the help.

It could be a Wordpress comment notification for a spam comment. Judging by the content, I'd say it is.
However, the following is the template of the comment notification I get on my e-mail when someone comments on my Wordpress blog:

Subject of e-mail:
Quote:
[<blogname>] Comment : "<postname>"


Message of e-mail
Quote:
New comment on your post #60 "Back to School"
Author : <authorname> (IP: <IP address of the poster>)
E-mail : <e-mail address of poster>
URL : <this part is optional>
Whois : <link to whois query>
Comment:
<comment-body>

You can see all comments on this post here:
<perma-link to the comments of the post>

To delete this comment, visit:
<Admin URI>
To mark this comment as spam, visit:
<link to Dashboard>

If you're getting something similar, then it's possible that this is a wordpress notification of a comment.

Otherwise, it could very well be some notification for some other kind of software that you've installed.
Donutey
Although it seems a lot like wordpress, it doesn't seem to be wordpress as I'm still receiving wordpress "Please moderate" emails (the same as in tidruG's example), in addition to these without any explanation.

It might be http://js-kit.com/, but to my knowledge I never gave an email address to them.

I've been needing to reinstall my blog software for a while, so if I have time this weekend I might try that and see what happens. (or remove js-kit for a few hours and see if I receive emails)

Anyway thanks for the help.
Daniel15
The server's hostname is "host" (very original, isn't it? Razz), and the domain is "frih.net", so the server's FQDN (fully qualified domain name) is "host.frih.net". When a script sends an email, if there's no sender set, it will default to [username]@host.frih.net (as this is how the server sees your email address - [username]@[subdomain].frih.net is simply an alias of this).

To me, this looks like the output from a contact form or similar. Is it possible that it's some special type of comment on your Wordpress blog? Log in to your blog, and check if anything similar is in the recent comments list. My suggestion: On your Wordpress blog, install Akismet, as it stops almost all spam (I use it on my blog at http://www.daniel15.com/blog/ - Over 1,800 spam comments blocked so far! Very Happy)

EDIT: If you're still not sure of the origin of these messages, post the full message (including all headers). From the headers, we can tell if the email was generated by the server, or if it's just a fake "From" header.
Related topics
Reply to topic    Frihost Forum Index -> Support and Web Hosting -> Web Hosting Support

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2011 Frihost, forums powered by phpBB.