[Snort-users] RE: smtp scans

Dr SuSE drsuse at ...748...
Thu Nov 30 10:27:59 EST 2000


And this years Darwin award goes to..... 
hehe, oh well atleast now you can sleep tonight since you know what was
causing the traffic

Dr SuSE

"Microsoft ist nicht installiert"

On Thu, 30 Nov 2000, Marcus Nelson wrote:

> Ok, figured it out.
> 
> Dshield.org and portscan.cablemodem.com are affiliated.  I was testing the
> Dshield firewall reporting script on my IDS box.  Due to a perl script
> error, I sent a test message without a return address.  The MailServer at
> 206.34.203.20 handles mail for both sites.  It attempted to respond to my
> message based on my IP address, hence the smtp attempts.
> 
> Sorry for the confusion.
> 
> Thanks,
> 
> Marcus
> 
> 




More information about the Snort-users mailing list