[nos-bbs] Strange messages

[Glenn Thomas]

Ray -

Could this be a probe from someone looking for a potential spam relay? 
k888.tw is invalid per http://www.twnic.net.tw/English/Index.htm. YMMV.

73 de Glenn WB6W

On 12/3/2011 9:14 AM, Raymond Quinn wrote:
> Over the last two days, I have noticed some apparant attempts to send 
> mail. This is one example  in /jnos/spool/mail/check.txt.
>
> They appear to be from the same Hotmail address, but the IP addresses 
> and the "received from" address and domain are always different. The 
> Subject and the To: address are always the same along with the 
> "Content-Type:" information. Here is the latest, with my IP addresses 
> removed.
>
>> From fdyrdyr898 at hotmail.com Fri Dec  2 04:56:05 2011
> Received: from 71.130.72.53 by w6ray.ampr.org (JNOS2.0i) with SMTP
>        id AA13775 ; Fri, 02 Dec 2011 04:56:05 PST
> Received: from  ([186.124.100.28])
>        by xx.xx.xx.xx with SMTP;
>        Fri, 02 Dec 2011 06:47:55 -0600
> Message-ID: <uly3n1q55c3$$$--64r0-w at 91d5ch3>
> From: "" <fdyrdyr898 at hotmail.com>
> To: <smtp at k888.tw>
> Subject: BC_xx.xx.xx.xx
> Date: Fri, 02 Dec 11 06:47:55 GMT
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>        boundary="----=_NextPart_000_000D_01C2CC60.49F4EC70"
>
> The Subject is my public IP address preceded with BC_.
>
> Is this something I should worry about? The IP addresses in question 
> are from all over the world and some of the oomains don't even exist. 
> This example doesn't even include the domain in the "Received: from" 
> line.
>
> 73 de Ray W6RAY
> Visalia, CA
> SJVBBS
>
>
> _______________________________________________
> nos-bbs mailing list
> nos-bbs at tapr.org
> https://www.tapr.org/cgi-bin/mailman/listinfo/nos-bbs
>
>