[Dshield] SMTP Problems!

Hernan Bugallo hernan_bugallo at yahoo.com.ar
Fri Jan 21 04:58:06 GMT 2005


I see an increment in the number of emails whit no sender address (mail
from: <> )... maybe it can help.
Regards

----- Original Message ----- 
From: "Bo Nordgren" <bo at nordgren.net>
To: "General DShield Discussion List" <list at lists.dshield.org>
Sent: Wednesday, January 19, 2005 2:30 PM
Subject: Re: [Dshield] SMTP Problems!


> I've seen the exact same IP but it doesn't give a lot of more information.
>
> Anyone caught this in a honeypot.
>
> ----- Original Message ----- 
> From: "Michael Thompson" <mike at thompsonmike.co.uk>
> To: "General DShield Discussion List" <list at lists.dshield.org>
> Sent: Wednesday, January 19, 2005 10:17 AM
> Subject: [Dshield] SMTP Problems!
>
>
> > For the past hour I have just watched over 200 dialup machines from all
> > over the world attemp to connect to my Mailserver
> >
> > They were all rejected like the following
> >
> > Jan 19 09:05:07 polaris postfix/smtpd[24494]: warning: Illegal address
> > syntax from host195-202.pool82191.interbusiness.it[82.191.202.195] in
MAIL
> > command: @
> >
> > This lasted for about a hour. All I can think of is that I was picked on
> > by some script/virus/Trojan looking to spam.
> >
> > Any Views?
> >
> >
> >
> > -- 
> >
> >
> > Mike
> >
> > http://www.thompsonmike.co.uk
> > -------------- Sponsor Message ------------------------------------
> > SANS Intrusion Immersion Training: Orlando, FL, February 3-9th
> > http://www.sans.org/orlando05
> >
> > _______________________________________________
> > send all posts to list at lists.dshield.org
> > To change your subscription options (or unsubscribe), see:
> > http://www.dshield.org/mailman/listinfo/list
> >
>
>
> -------------- Sponsor Message ------------------------------------
> SANS Intrusion Immersion Training: Orlando, FL, February 3-9th
> http://www.sans.org/orlando05
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list