[PLUG] (forw) smtp attack from 208.187.215.242

Aj Lavin aj at haightmail.org
Wed Jun 26 03:55:10 UTC 2002


On Mon, Jun 24, 2002 at 09:37:47PM -0700, Sandy Herring wrote:
> I had gotten used to seeing virtually nothing but probes to port 1433 -
> until today. Anyone else getting hammered with smtp probes?

$ dig -x 208.187.215.242

;; ANSWER SECTION:
242.215.187.208.in-addr.arpa. 39674 IN  PTR     q7.q7.com.

Searching my PLUG folder for q7.com:

From: Sean Lewis <seant at q7.com>

Maybe Sean Lewis is just trying to send you email.

- Aj

> whois.arin.net lists you as the Coordinator for GDC, which owns the
> netblock within which 208.187.215.242 falls. If you're not the right
> person to field this question, I'd appreciate a redirect.  
>
> Monday, June 24, 2002 09:41:36 - Unrecognized access from
> 208.187.215.242:45238 to TCP port 25 ( 2002/06/24 - 16:41:36 GMT )




More information about the PLUG mailing list