[Dshield] SMTP Problems!

Bo Nordgren bo at nordgren.net
Wed Jan 19 17:30:52 GMT 2005


I've seen the exact same IP but it doesn't give a lot of more information.

Anyone caught this in a honeypot.

----- Original Message ----- 
From: "Michael Thompson" <mike at thompsonmike.co.uk>
To: "General DShield Discussion List" <list at lists.dshield.org>
Sent: Wednesday, January 19, 2005 10:17 AM
Subject: [Dshield] SMTP Problems!


> For the past hour I have just watched over 200 dialup machines from all 
> over the world attemp to connect to my Mailserver
>
> They were all rejected like the following
>
> Jan 19 09:05:07 polaris postfix/smtpd[24494]: warning: Illegal address 
> syntax from host195-202.pool82191.interbusiness.it[82.191.202.195] in MAIL 
> command: @
>
> This lasted for about a hour. All I can think of is that I was picked on 
> by some script/virus/Trojan looking to spam.
>
> Any Views?
>
>
>
> -- 
>
>
> Mike
>
> http://www.thompsonmike.co.uk
> -------------- Sponsor Message ------------------------------------
> SANS Intrusion Immersion Training: Orlando, FL, February 3-9th
> http://www.sans.org/orlando05
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 





More information about the list mailing list