Displaying 1 result from an estimated 1 matches for "b648f3800008d".
2013 Oct 05
2
SMTP Auth Spam Mail Attack
...e following.
Oct 5 15:17:58 www sendmail[6982]: r95EHqoc006972:
to=<qqueenllouise at aol.com>, ctladdr=<jon at xxxxxxxx.co.uk> (516/100),
delay=00:00:05, xdelay=00:00:02, mailer=esmtp, pri=300552,
relay=mailin-03.mx.aol.com. [205.188.156.193], dsn=2.0.0, stat=Sent (2.0.0
Ok: queued as B648F3800008D)
Now there seem to be 2 user names that appear in the logs with the authid=
one is jon as above and the other is jon at xxxxx.co.uk (obviously I have
replaced the real domain with xxxxx)
Now the interesting thing is that there are only a handful of sites on the
server and they are set up so the...