[ale] Strang returned mail

Sun Nov 18 17:06:26 EST 2007

I've been getting junk mail like this for months, supposedly from some 
mail server in Germany.  They change errors between mailbox out of space 
and user not found.

Definitely spam.

Tom

Scott Castaline wrote:
> I received this today as Undeliverable Mail for subject and Sender as 
> Postmaster. The problem is it does not correspond with anything that I 
> sent. On one of the addresses, it gave what appeared to be an IP in 
> hyphenated format. When I did an nslookup, I got hte following: 
> nslookup 62.16.0.165
> Server:         64.94.1.1
> Address:        64.94.1.1#53
>
> Non-authoritative answer:
> 165.0.16.62.in-addr.arpa        name = host-62-16-0-165.soborka.net.
>
> Authoritative answers can be found from:
> 0.16.62.in-addr.arpa    nameserver = ns.soborka.net.
> 0.16.62.in-addr.arpa    nameserver = ns2.soborka.net.
> ns.soborka.net  internet address = 62.16.0.1
> ns2.soborka.net internet address = 91.90.15.4
>
>
> The following is the actual message cut and pasted from my Thunderbird 
> inbox file opened in a text editor:
> From - Sun Nov 18 15:27:24 2007
> X-Account-Key: account2
> X-UIDL: <10711182057.AA01332 at automation.com.cn>
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 00000000
> X-Mozilla-Keys:                                                                                 
>
> Return-Path: <>
> Received: from aarpub06.charter.net ([10.20.200.169]) by 
> mtao04.charter.net
>          (InterMail vM.7.08.02.00 201-2186-121-20061213) with ESMTP
>          id 
> <20071118134320.FXRJ2230.mtao04.charter.net at aarpub06.charter.net>
>          for <hscast at charter.net>; Sun, 18 Nov 2007 08:43:20 -0500
> Received: from automation.com.cn ([211.100.7.7]) by aarpub06.charter.net
>          with ESMTP
>          id 
> <20071118134319.FDFC3629.aarpub06.charter.net at automation.com.cn>
>          for <hscast at charter.net>; Sun, 18 Nov 2007 08:43:19 -0500
> Date:     Sun, 18 Nov 2007 20:57:17 +0800
> Message-Id: <10711182057.AA01332 at automation.com.cn>
> Mime-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> From:     "Postmaster" <postmaster at automation.com.cn>
> Sender:   <postmaster at automation.com.cn>
> To:       <hscast at charter.net>
> Subject:  Undeliverable Mail
> X-Mailer: <SMTP32 v7.13>
> X-Chzlrs: 0
>
> User mailbox exceeds allowed message count: hsc at automation.com.cn
>
>
> Original message follows.
>
> Received: from host-62-16-0-165.soborka.net [62.16.0.165] by 
> automation.com.cn
>  (SMTPD32-7.13) id A6AB10A800B8; Sun, 18 Nov 2007 20:57:15 +0800
> X-Originating-IP: [29.53.88.2]
> Return-Path: <Angelita at qojv.us>
> Received: (qmail 5682 by uid 480); Sun, 18 Nov 2007 03:00:44 +0200
> Message-Id: <20071118050044.5684.qmail at host-62-16-0-165.soborka.net>
> To: <hsc at automation.com.cn>
> Subject: Great Holiday Gifts
> From: <hsc at automation.com.cn>
> MIME-Version: 1.0
> Content-Type: text/html; charset=windows-1252"
> Content-Transfer-Encoding: 8bit
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
>
> <html>
> <head>
> </head>
>
> <script><body style="FONT-SIZE: 10pt; FONT-FAMILY: MS Sans Serif" 
> text="#000000" alink="#000000" link="#000000" vlink="#000000">
>
> <center>
>    <table width="600" border="0" cellspacing="0" cellpadding="0">
>      <tr>
>      <td width="600" colspan="2"><br><center>
> <font face="arial, helvetica, verdana, sans-serif" size="1" 
> color="000000">This message contains images. If you don't see images, 
> <a 
> href="http://lyris.scrippsnetworksnewsletters.com/t/2325622/178999062/25927/0/">click 
> here</a> to view.</font></center>
> </td>
>    </tr>
>    <tr>
>      <td width="600" colspan="2"><a 
> href="http://lyris.scrippsnetworksnewsletters.com/t/2325622/178999062/25928/0/"><img 
> src="http://images.foodnetwork.com/webfood/images/newsletter/thanksgiving/2007/tdaypostcard1.jpg" 
> width="600" height="50" alt="Thanksgiving Recipes" border="0"></a></td>
>    </tr>
>    <tr>
>      <td width="93"><a 
> href="http://lyris.scrippsnetworksnewsletters.com/t/2325622/178999062/25928/0/"><img 
> src="http://images.foodnetwork.com/webfood/images/newsletter/thanksgiving/2007/tdaypostcard2.jpg" 
> width="93" height="56" alt="Thanksgiving Recipes" border="0"></a></td>
>    <td width="507" valign="top" 
> background="http://images.foodnetwork.com/webfood/images/newsletter/thanksgiving/2007/tdaypostcard3.jpg"><font 
> face="arial, helvetica, verdana, sans-serif" size="2" 
> color="#ffffff">Let us help you prepare for the ultimate holiday 
> feast! From <a href="http://lyris.scr
> [message truncated]
>
> Can someone translate this for me? And how did I get this? Also, it 
> may be coincidental, but the To: email address contains my initials 
> (hsc at automation.com.cn).
>
> Any responses would be greatly appreciated.
> Signed the extreme paranoid.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale