Can you Help me, my daily spam problem plz. <contains mild language>

Hi Guys,

I am having trouble with frequent spam or hourly spam, I think it's the same person, I have blocked several email addresses from sending me email and blocked these messages every time they come through but -not surprisingly- none of this works, can I track the email origin of the email? or what's your advice?

Here is my daily dose of e-mail spam, some of this is confusing and I am hoping someone can help me out and decipher this crap and even tell me the purpose or intent of the sender:

note I have deleted the http:// as I don't want to send you there either and replaced the language content,

about 30 minutes ago :

Head line : Dad ??????? Alluring Daughter

hardcoore family bangging!

superstoryguide.info/cbfamilynig.htm

Return-Path: <btepry@btowers.com>Received: from 216-12-28-77.dmt.ntelos.net ([216.12.28.77]) by imta08sl.mx.bigpond.com with SMTP id <20060420150558.HNPL5233.imta08sl.mx.bigpond.com@216-12-28-77.dmt.ntelos.net> for ; Thu, 20 Apr 2006 15:05:58 +0000Received: from mail.btowers.com (mail.btowers.com [66.14.252.250]) by 216-12-28-77.dmt.ntelos.net (8.12.11/8.12.11) with ESMTP id Zhh8r7dSiLsdjB for ; Thu, 20 Apr 2006 11:06:19 -0400Received: from ilvyifgccvo (141.151.89.94) by mail.btowers.com (Postfix) with ESMTP id 0aZoby7SHsga for ; Thu, 20 Apr 2006 11:06:19 -0400Reply-To: "Chauncey Schaefer" <btepry@btowers.com>From: "Chauncey" <btepry@btowers.com>Message-ID: <8820563208.979239378717@btowers.com>Date: Thu, 20 Apr 2006 11:06:19 -0400To: Subject: Dad~~~~~~ alluring daughter!MIME-Version: 1.0Content-Type: text/plain; charset="iso-8859-1"Content-Transfer-Encoding: 7bit

Above are the details I do apologise for the language.

Feel free to comment or decipher or retaliate <maybe I shouldn't say that> to this spammer.

Spammer frequency : Hourly.

So what should I do, any suggestions ?

thanks from Jason.

First you have to contact your ISP, but this propably wont help as spammers can easilly hide themselves.

If you want a piece of advice, look up where you give your email adress, and allways have a secondary account for sites that makes you feel unsafe ;)

I run Spam Assasign on my server and I'm very happy with it. I get very few spam mail now and I have had my primary email address since 1997.

Then I also have two email accounts (I actually have more..). One email address is used on all kinds of sites and I change it about every six months or so, and the other one is the email address I have printed on my business cards.

Hi Bylla,

I am really going to need to do something about it, I have other email accounts that are safe or safer, that I filter, but unfortunately this address is my main email address, I was going to get my isp to reset and start a new one, but then I will need to reset my emails to all my subscriptions and I am a bit scared of turning up my filters as I may block important emails coming through, I know I can white list them, but that will take ages.

But what I really am digging for is there details so I can report them to there providers or get them in strife, or there motives as when I run a search for there apparent sites they can't be found?

One search I ran for there actual/or fake address wound up at a school.
I am hoping someone with knowledge in this field can track it for me with the details I provide in the forum,

Another one I receive ends with this:

This email is sent in compliance with our strict anti-abuse regulations. You have received this email because you posted to an ad on one of my FFA pages that sent an email to this address. If you do not wish to receive any mail from our servers you may permanently block your email address by replying to this message with "REMOVE" in the subject line. (Please be advised by blocking your email you will not have access to over 900 domains and the thousands of users and services they represent). Thank you, The Postmaster.

But they provide no opt out link, no business details and even try the lame threat of blocking me from 900 domains. I have not ever posted or blasted to FFA pages.

thanks from Jason

p.s. I like the way they say "This email is sent in compliance with our strict anti-abuse regulations"
the keyword being our, obviously they/or he have no regulations.

This is spam and that's why they write something like this at the end. If you click on unsubscribe  links in the spam you get you will only make the problem worse.

Many spammers use trojans on other peoples computers to send spam so just reporting all the pam you get will not reduce the amount of spam you get. You need a spam-filter to reduce your spam.

The funniest unsubscribe page that I saw, had a php error, and I am sure that those guys made this on purpose.

Jason, it is obvious that your ISP don't use any spam filter, because even the simplest anti spam filter cut off emails with phrases like those you mention.

Maybe you should try to install some antispam software in your pc.

Hi, Jason.

There are several suggestions I can make:

1) Find all the places on the Internet where your e-mail address is posted. If you have a website, and your e-mail address is a live link created with the mailto: code that is the worst. That is exactly what e-mail address harvesting spiders look for and 99% of all spam somes from these robots. Replace such live links with static text, Javascript obfuscation, a graphical image, or a good-quality form. Human readers will have to read your address and type it into their e-mail client, but it should cut down on the amount of spam you receive from spiders.

Do a Google search for your e-mail address: youremailaddress  at  domain.com
I did this once and was surprised to see the places my e-mail address was posted. If it is posted on other sites, contact the webmaster of those sites and ask to have it removed or to obfuscate it somehow.

Do you have a resume posted online? Some scrapers will take it from there. Alternately, is your website domain registered with your e-mail address in the contact info? Some scrapers will harvest it from there too. Edit it to a dummy e-mail address, replace it with a webmail address, or simply ask your domain registrar if they can hide your whois info. Some companies will charge a little more for this service, but it might be worthwhile to eliminate another potential source of spam.

2) It sounds like you may already be in somebody's database, so the above methods might not work for this particular case.

You can track spam by looking at the headers of the e-mail and finding the very last "Received From" IP address. (E-mail addresses are easy to fake; IP addresses not so easy) For example, if you look back at the trail, you should see something like the following:

"Received From"
"Received From"
"Received From"
. . .

Sometimes the list can get pretty long, but you want the very last one--the one that started it all. Looking at your headers, it looks like the e-mail first came from IP address 141.151.89.94. There are several online utilities that provide information about sites based on their IP address, for example, samspade.org
If you enter this IP address, you should find that the sender's ISP is Verizon. Or you could enter the other IP address: 66.14.252.250
This IP address also belongs to Verizon, and Verizon's abuse e-mail address is provided:
abuse at  verizon.net
It shouldn't matter if the spammer is using Hotmail, Yahoo!, Gmail, etc. his IP address won't change and now you know his ISP.
This procedure should work with ANY spam e-mail. Track down their ISP and contact the abuse department. If they find out their services are being used for spamming, they will terminate his account immediately.
When reporting abuse, make sure to include full headers.

3) As mentioned already, use some anti-spam software. Most of it is pretty good and offers a variety of options: whitelisting, blacklisting, etc. And these options can often be set not only by e-mail address, but by IP as well. So, if all your spam is coming from the same IP address, you could block by that IP address. Or if all your spam is coming from China, you could block a range of IP addresses that you know belong to a Chinese ISP.

Hope this helps.


Duncan