[Dshield] SMTP question

Paul Marsh pmarsh at nmefdn.org
Wed Mar 19 14:09:17 GMT 2003


This morning I noticed the following in my Exchange logs.  It's happening ever 30 minutes and started last night around 10:00.   

2003-03-19 12:54:00 66.73.93.182 - SMTPSVC1 OPUS xxx.xxx.xxx.xxx 0 HELO - +. 501 0 27 6 16 SMTP - - - -
2003-03-19 12:54:00 66.73.93.182 - SMTPSVC1 OPUS xxx.xxx.xxx.xxx 0 QUIT - - 0 110 27 6 63 SMTP - - - -

2003-03-19 13:23:50 66.73.93.182 - SMTPSVC1 BANANA-JR-6K xxx.xxx.xxx.xxx 0 HELO - +. 501 0 27 6 0 SMTP - - - -
2003-03-19 13:23:50 66.73.93.182 - SMTPSVC1 BANANA-JR-6K xxx.xxx.xxx.xxx 0 QUIT - - 0 109 27 6 47 SMTP - - - -

66.73.93.182 resolves out to an adsl user on ameritech.net

adsl-66-73-93-182.dsl.chcgil.ameritech.net

I did a quick scan and found port 25 and 110 open so I'm hoping this is just a home user that's installed a mailserver on his/her machine to play with?  

Thanx, Paul 



More information about the list mailing list