For three days now we've been getting these emails addressed to random
strings every few minutes.  IPs keep changing.  Sometimes one mail per IP,
sometimes several.  What is this?  Zombie computers?  Forged IPs?  And how
many hits are you going to get with random strings?

09:21 00:00 SMTPD(54FA0120) [10.0.0.109] connect 216.167.161.91 port 34112
09:21 00:00 SMTPD(54FA0120) [216.167.161.91] EHLO pop3.nts-online.net
09:21 00:00 SMTPD(54FA0120) [216.167.161.91] MAIL FROM:<>
09:21 00:00 SMTPD(54FA0120) [216.167.161.91] RCPT
TO:<[EMAIL PROTECTED]>
09:21 00:00 SMTPD(54FA0120) [216.167.161.91] ERR mdchildcare.org invalid
user <[EMAIL PROTECTED]
09:21 00:01 SMTPD(56180120) [10.0.0.109] connect 131.103.218.79 port 20368
09:21 00:01 SMTPD(56180120) [131.103.218.79] HELO mail15a.boca15-verio.com
09:21 00:01 SMTPD(56180120) [131.103.218.79] MAIL FROM:<>
09:21 00:01 SMTPD(56180120) [131.103.218.79] RCPT
TO:<[EMAIL PROTECTED]>
09:21 00:01 SMTPD(56180120) [131.103.218.79] ERR mdchildcare.org invalid
user <[EMAIL PROTECTED]
09:21 00:14 SMTPD(6B9E0124) [10.0.0.109] connect 64.29.144.72 port 49234
09:21 00:14 SMTPD(6B9E0124) [64.29.144.72] EHLO mx305.megamailservers.com
09:21 00:14 SMTPD(6B9E0124) [64.29.144.72] MAIL From:<>
09:21 00:14 SMTPD(6B9E0124) [64.29.144.72] RCPT To:<[EMAIL PROTECTED]>
09:21 00:14 SMTPD(6B9E0124) [64.29.144.72] ERR mdchildcare.org invalid user
<[EMAIL PROTECTED]
09:21 00:14 SMTPD(6BB80124) [10.0.0.109] connect 206.190.36.133 port 20018
09:21 00:14 SMTPD(6BB80124) [206.190.36.133] HELO mta137.mail.re2.yahoo.com
09:21 00:14 SMTPD(6BB80124) [206.190.36.133] MAIL FROM:<>
09:21 00:14 SMTPD(6BB80124) [206.190.36.133] RCPT
TO:<[EMAIL PROTECTED]>
09:21 00:14 SMTPD(6BB80124) [206.190.36.133] ERR mdchildcare.org invalid
user <[EMAIL PROTECTED]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to