OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Postfix Archives: Exploit attempt or spammer?

Exploit attempt or spammer?

Subject: Exploit attempt or spammer?
From: Joe Laffey (joelaffeycomputer.com)
Date: Mon Jan 24 2000 - 08:07:12 CST

Hi,

Does the report below look like someone trying to do a buffer overflow and
gain access, or what? Is the line "BUFFER OVERFLOW through:" generated by
Postfix, or has the person typed that in or what? I would appreciate any
insight...

Thanks,

Joe laffey

Transcript of session follows.

 Out: 220 mail2.laffeycomputer.com ESMTP Postfix
 In: HELO
     xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 Out: 250 mail2.laffeycomputer.com
 In: MAIL FROM:<mickeymouseyahoo.com>
 Out: 250 Ok
 In: RCPT TO:<jahoopadupajahoopa.com>
 Out: 550 <jahoopadupajahoopa.com>: Relay access denied
 In: DATA
 Out: 503 Error: need RCPT command
 In: To: jahoopadupajahoopa.com
 Out: 502 Error: command not implemented
 In: From: mickeymouseyahoo.com
 Out: 502 Error: command not implemented
 In: Subject: Test work
 Out: 502 Error: command not implemented
 In:
 Out: 500 Error: bad syntax
 In: BUFFER OVERFLOW through:
 Out: 502 Error: command not implemented
 In: 209.74.129.137
 Out: 502 Error: command not implemented
 In: .
 Out: 502 Error: command not implemented
 In: QUIT
 Out: 221 Bye

No message was collected successfully.

This archive was generated by hypermail 2b27 : Mon Jan 24 2000 - 08:26:01 CST