Very High volume SMTP Auth type attacks, but either a broken bot, or an attempt at Denial of Service..

Range,  192.241.227.0/24
Naming Convention: zg-0626-70.stretchoid.com

It's a 'fast talker' attack, sending EHLO before waiting for the CONNECT string..

Just in case anyone else is encountering this attack..

And if there is a DO guy onlist with a heart, he can pull the plug on those..

And if the hacker is on this list, fix your bot! It isn't going to get far if you are trying an AUTH attack, as a fast talker ;)

Just an annoyance..






--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to