[PLUG] (forw) smtp attack from 208.187.215.242
Aj Lavin
aj at haightmail.org
Wed Jun 26 03:55:10 UTC 2002
On Mon, Jun 24, 2002 at 09:37:47PM -0700, Sandy Herring wrote:
> I had gotten used to seeing virtually nothing but probes to port 1433 -
> until today. Anyone else getting hammered with smtp probes?
$ dig -x 208.187.215.242
;; ANSWER SECTION:
242.215.187.208.in-addr.arpa. 39674 IN PTR q7.q7.com.
Searching my PLUG folder for q7.com:
From: Sean Lewis <seant at q7.com>
Maybe Sean Lewis is just trying to send you email.
- Aj
> whois.arin.net lists you as the Coordinator for GDC, which owns the
> netblock within which 208.187.215.242 falls. If you're not the right
> person to field this question, I'd appreciate a redirect.
>
> Monday, June 24, 2002 09:41:36 - Unrecognized access from
> 208.187.215.242:45238 to TCP port 25 ( 2002/06/24 - 16:41:36 GMT )
More information about the PLUG
mailing list