[nos-bbs] Strange messages

kd6oat kd6oat at gmail.com
Sun Dec 4 17:50:09 EST 2011


I also get these from time to time. I'd be interested if anyone has a
definitive answer to how these messages originate.

On Sat, Dec 3, 2011 at 12:05 PM, Glenn Thomas <glennt at gbis.com> wrote:

> Ray -
>
> Could this be a probe from someone looking for a potential spam relay?
> k888.tw is invalid per http://www.twnic.net.tw/**English/Index.htm<http://www.twnic.net.tw/English/Index.htm>.
> YMMV.
>
> 73 de Glenn WB6W
>
>
> On 12/3/2011 9:14 AM, Raymond Quinn wrote:
>
>> Over the last two days, I have noticed some apparant attempts to send
>> mail. This is one example  in /jnos/spool/mail/check.txt.
>>
>> They appear to be from the same Hotmail address, but the IP addresses and
>> the "received from" address and domain are always different. The Subject
>> and the To: address are always the same along with the "Content-Type:"
>> information. Here is the latest, with my IP addresses removed.
>>
>>  From fdyrdyr898 at hotmail.com Fri Dec  2 04:56:05 2011
>>>
>> Received: from 71.130.72.53 by w6ray.ampr.org (JNOS2.0i) with SMTP
>>       id AA13775 ; Fri, 02 Dec 2011 04:56:05 PST
>> Received: from  ([186.124.100.28])
>>       by xx.xx.xx.xx with SMTP;
>>       Fri, 02 Dec 2011 06:47:55 -0600
>> Message-ID: <uly3n1q55c3$$$--64r0-w@**91d5ch3>
>> From: "" <fdyrdyr898 at hotmail.com>
>> To: <smtp at k888.tw>
>> Subject: BC_xx.xx.xx.xx
>> Date: Fri, 02 Dec 11 06:47:55 GMT
>> MIME-Version: 1.0
>> Content-Type: multipart/alternative;
>>       boundary="----=_NextPart_000_**000D_01C2CC60.49F4EC70"
>>
>> The Subject is my public IP address preceded with BC_.
>>
>> Is this something I should worry about? The IP addresses in question are
>> from all over the world and some of the oomains don't even exist. This
>> example doesn't even include the domain in the "Received: from" line.
>>
>> 73 de Ray W6RAY
>> Visalia, CA
>> SJVBBS
>>
>>
>> ______________________________**_________________
>> nos-bbs mailing list
>> nos-bbs at tapr.org
>> https://www.tapr.org/cgi-bin/**mailman/listinfo/nos-bbs<https://www.tapr.org/cgi-bin/mailman/listinfo/nos-bbs>
>>
>>
>>
> ______________________________**_________________
> nos-bbs mailing list
> nos-bbs at tapr.org
> https://www.tapr.org/cgi-bin/**mailman/listinfo/nos-bbs<https://www.tapr.org/cgi-bin/mailman/listinfo/nos-bbs>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.tapr.org/pipermail/nos-bbs_lists.tapr.org/attachments/20111204/a09ad395/attachment.html>


More information about the nos-bbs mailing list