Jump to content


Photo
- - - - -

Should I be worried?


  • Please log in to reply
21 replies to this topic

#1 barcrest junky

barcrest junky

    Senior Member

  • Moderators
  • 843 posts

Posted 20 December 2016 - 07:05 PM

Hopefully one of you technical gurus on here might be able to tell me if I need to be concerned about this.

 

For years I was with Talk Talk and operated from a TalkTalk email address.  However, over the last year I have been replacing this TalkTalk email address with a GMail one, and finally last month I switched my internet provider to BT, no longer concerned that I had any important stuff connected to the TalkTalk email.

 

Now, I do still receive the occasional email from that TalkTalk address, mainly shopping websites with offers I have signed up to in the past.  However today when I logged in I had 4 email undeliverable failures in my TalkTalk inbox.  The 2 files attached to each seem to make it clear that someone is sending emails using my TalkTalk email address, but that someone isn't me and where the recipient doesn't exist I am getting the bounce back.  Should I be concerned or not?

 

This is the contents of one of the attachments - with my email address highlighted and anonymised.

 

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=talktalk.net; s=1605;
    t=1482214583; bh=HqagavVSzrZECdfgc8DnUrUSRAqe+iYcA4WiDsV5aA4=;
    h=To:From:Subject:Date;
    b=N+eq+KdeFiiBx3s/kUo57J3bqzfLbA+E98uBmxtvP3NDDHDUEsgedIFagrTy5uyl0
     XJkYAgWHMEMzRHWE9FveIcJUqK2cLs+uh38ZKkls5f6By5Bsun5Sggv711abY/qR4D
     BqI8R8zkSqTn+QKvtlji7oq868JIZmy9FcZvPvlE=
X-Originating-IP: [220.225.67.161]
X-Spam: 0
X-OAuthority: v=2.2 cv=dsCZMBo4 c=1 sm=1 tr=0 a=bS5kECQT/4hWnO6No4G+Pg==:117
 a=bS5kECQT/4hWnO6No4G+Pg==:17 a=9DvhAHx2yrWFMPxQWpQA:9 a=tBO0zlWvAAAA:20
 a=Vi7OhBLYd79qlJLEUYUA:9 a=QEXdDO2ut3YA:10 a=_z7da1v7p6UA:10
 a=Zc0611wEWO4A:10 a=WzAvSX0RKd4A:10 a=ddZT45GQ4RAA:10 a=AqFz3o5iRhsA:10
 a=DMibb7HDAAAA:20 a=CyvJgaER28gA:10 a=b6rSoi0j7tMA:10 a=gW4sBiH6o7YA:10
 a=ROAbuluwDIwA:10
MIME-Version: 1.0
To: nortek@carolina.rr.com
From: "Lauren" <xxxxxxxxxx@talktalk.net>
Subject: Fw: Re: r ofl Times ar e changing
Date: Tue, 20 Dec 2016 00:16:23 -0600
Importance: normal
X-Priority: 3
Content-Type: multipart/alternative;
 boundary="_CF4E6779-A236-2C7D-82DD-BB598632B916_"
Message-ID: <eksqlkv-42z7pp-F5@talktalk.net>
X-CMAE-Envelope: MS4wfF0O587BRerg/MqUNTz6q7Ew9cF9Kx9BJQalF1ZiIT9TIfvBbwCbJfwCCvy34b2pQA/kdWpqtQ5mYY11L3diw8qPnIXT7dZC3VmTDROWeJEuWSOXG8CF
 6MkNrTI22vfum9rRxagEHV0sbFm3IaGDiCGvI0FyqzepSq3J3LVHW+/9TjwSD5RD00z4JX/+ZNpgZg==

 

 

And here is the contents of the other file attached to the failure notification email from mailer-daemon@talktalk.net

 

Reporting-MTA: dns; cm5nec [10.103.251.5]
Received-From-MTA: dns; [127.0.0.1] [220.225.67.161]
Arrival-Date: Tue, 20 Dec 2016 06:16:23 +0000


Final-recipient: rfc822; nortek@carolina.rr.com
Diagnostic-Code: smtp; 554 Invalid mailbox: nortek@carolina.rr.com

Last-attempt-Date: Tue, 20 Dec 2016 06:16:27 +0000


As I said, I haven't got a clue on this stuff, so don't know whether to pursue or ignore

 

Cheers
 



#2 altharic

altharic

    Advanced Member

  • Regulars
  • 447 posts

Posted 20 December 2016 - 08:36 PM

I have a theory on this its a spam email quite a good one the 220 ip adress resolves to a smoothwall  login box.

 

could well be running malware from a school server somewhere.



#3 aaamusements

aaamusements

    Admin

  • Administrators
  • PipPipPipPipPip
  • 3508 posts

Posted 20 December 2016 - 09:01 PM

Or someone is spoofing your address - using it as the apparent sender of spam that they are sending out themselves.

#4 Reg

Reg

    DONE AND FINISHED

  • Layout Creator
  • PipPip
  • 697 posts

Donator

Posted 20 December 2016 - 09:26 PM

Change your password on that account straight away.



#5 uya

uya

    Newbie

  • Regulars
  • 123 posts

Posted 21 December 2016 - 12:01 AM

Dito REG, ALWAYS USE A 20 CHARACTER PASSWORD,WITH RANDOM CHARACTERS TRY OUT KEEPASS IT'S FREE SO YOU CAN KEEP TRACK OF THEM, AND ONLY NEED ONE PASSWORD TO GET IN. SORRY FOR SHOUTING BUT I'M A BIT SINGLE FISHED, AND COULDN'T BE ARSED USING THE CAPS LOCK.
Posted Image

#6 unclechicken

unclechicken

    Professional Slacker

  • Regulars
  • 346 posts

Posted 21 December 2016 - 12:26 AM

It's located in Mumbai, India. I could only get this information from the server.

 

SonicWall
VPN (IKE NAT-T)

Initiator SPI: e5f858a0876af576
Responder SPI: e951e580cd468dea
Next Payload: Security Association (SA)
Version: 1.0
Exchange Type: Identity Protection
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 00000000
Length: 92


#7 unclechicken

unclechicken

    Professional Slacker

  • Regulars
  • 346 posts

Posted 21 December 2016 - 12:49 AM

Change your password to something like 7vrKQa00iIiIzx!1!ff



#8 fruitman69

fruitman69

    Layout Designer

  • Layout Creator
  • PipPipPip
  • 1098 posts

Posted 21 December 2016 - 12:17 PM

Change your password to something like 7vrKQa00iIiIzx!1!ff

 

How dare you suggest people use my exact password ;)  lol


Follow us on facebook http://www.facebook....131728946893342
www.reelsoffun.co.uk

#9 richy1976

richy1976

    The furniture

  • Regulars
  • 2601 posts

Donator

Posted 21 December 2016 - 02:47 PM


It's located in Mumbai, India. I could only get this information from the server.

Could be anywhere vpn
  SonicWall

VPN (IKE NAT-T)

Initiator SPI: e5f858a0876af576
Responder SPI: e951e580cd468dea
Next Payload: Security Association (SA)
Version: 1.0
Exchange Type: Identity Protection
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 00000000
Length: 92

Could be anywhere vpn

#10 stardust

stardust

    Daryl

  • Regulars
  • 720 posts

Posted 21 December 2016 - 05:22 PM

I've had something similar in the past with my Outlook (Live) account...

 

I kept getting this spam email, so I went to block it - only to find out it was me who was sending it and couldn't block my own email account!  :bigeyes19:

 

Needless to say, I changed my Microsoft Password and security and haven't had an issue since.



#11 altharic

altharic

    Advanced Member

  • Regulars
  • 447 posts

Posted 21 December 2016 - 05:50 PM

I've read all his emails anyway they are all shite.

#12 barcrest junky

barcrest junky

    Senior Member

  • Moderators
  • 843 posts

Posted 21 December 2016 - 10:31 PM

Thanks for the replies guys.  I don't really need the account, but just in case they use it as an access point to find anything further the password has been changed.



#13 chasnbons

chasnbons

    Junior Member

  • Regulars
  • 1282 posts

Posted 22 December 2016 - 07:47 AM

In answer to the thread title, it would seem, not as much as you should be if I was standing behind you ;)  :biglaugh:



#14 stardust

stardust

    Daryl

  • Regulars
  • 720 posts

Posted 23 December 2016 - 12:01 AM

In answer to the thread title, it would seem, not as much as you should be if I was standing behind you ;)  :biglaugh:

 

Don't frighten him... He was quite pasty at the last Mecca meet we all went too with all us 'Queens of Orient Are' there... :p 



#15 barcrest junky

barcrest junky

    Senior Member

  • Moderators
  • 843 posts

Posted 23 December 2016 - 08:58 AM

In answer to the thread title, it would seem, not as much as you should be if I was standing behind you ;)  :biglaugh:

 

Panto season is upon us :p



#16 barcrest junky

barcrest junky

    Senior Member

  • Moderators
  • 843 posts

Posted 23 December 2016 - 09:03 AM

 

Don't frighten him... He was quite pasty at the last Mecca meet we all went too with all us 'Queens of Orient Are' there... :p

 

 

Don't frighten him... He was quite pasty at the last Mecca meet we all went too with all us 'Queens of Orient Are' there... :p

 

There were at least 4 of you there.  :biglaugh:



#17 stardust

stardust

    Daryl

  • Regulars
  • 720 posts

Posted 23 December 2016 - 01:50 PM

There were at least 4 of you there.  :biglaugh:


Great stuff... at least we made the Queens for a pack of playing cards... no doubt I was the 'spade'! :p

#18 altharic

altharic

    Advanced Member

  • Regulars
  • 447 posts

Posted 23 December 2016 - 03:17 PM

:o

Attached Files



#19 chasnbons

chasnbons

    Junior Member

  • Regulars
  • 1282 posts

Posted 23 December 2016 - 06:16 PM

Great stuff... at least we made the Queens for a pack of playing cards... no doubt I was the 'spade'! :p

 

I deffo wasn't and still aren't the Queen of hearts  :p



#20 stardust

stardust

    Daryl

  • Regulars
  • 720 posts

Posted 23 December 2016 - 08:01 PM

I think we better stop chas... or some will be saying that the gays are taking over the village again!  :bigeyes19: lol






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users