a new variant of bombh + whitelisted = loop

mail from a very large italian provider with IP in my global whitelist used 
for
Don't do Black Box for these IPs*
Don't Delay these IPs*
ISP/Secondary MX Servers*
+
blacklisted domain
=
loop

found 100 matching lines, searched in 1 log file (4824 lines)
Feb-8-07 06:32:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 06:37:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 06:42:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 06:47:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 06:52:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 06:57:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:02:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:07:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:12:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:17:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:22:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:27:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:32:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:37:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:42:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:47:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:52:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 07:57:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:02:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:07:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:12:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:17:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:22:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:27:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:32:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:37:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:42:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:47:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:52:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 08:57:22 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:02:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:07:33 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:17:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:22:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:27:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:37:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:42:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:47:36 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:52:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 09:57:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:02:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:07:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:17:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:22:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:27:26 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:37:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:42:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:47:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:52:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 10:57:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:02:45 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:07:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:17:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:22:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:27:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:37:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:42:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:47:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:52:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 11:57:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:02:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:07:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:17:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:22:54 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:27:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:37:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:42:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:47:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:52:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 12:57:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:02:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:07:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:17:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:22:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:27:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:37:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:42:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:47:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:52:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 13:57:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:02:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:07:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:12:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:17:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:22:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:27:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:32:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:37:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:42:25 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain
Feb-8-07 14:47:24 12.34.56.78 <[EMAIL PROTECTED]> to: 
[EMAIL PROTECTED] has blacklisted domain

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to