[ On Tuesday, January 28, 2003 at 17:00:41 (-0500), Johnson, Michael wrote: ]
> Subject: [Exim] Attack
>
> What do you guys make of this?
>
> 2003-01-28 15:07:24 rejected EHLO from [210.101.59.78]: syntactically
> invalid argument(s): \300\251\265\265\277\354
> 2003-01-28 15:08:49 rejected HELO from [210.101.59.78]: syntactically
> invalid argument(s): \300\251\265\265\277\354
It's not likely an attack (though it may be a spammer or an open relay).
It's more likely some idiot software that allowed a poor naive system
administrator to set a hostname using non-ASCII characters or maybe some
other idiot software which then proceded to try to use that hostname in
the SMTP transaction.
--
Greg A. Woods
+1 416 218-0098; <g.a.woods@???>; <woods@???>
Planix, Inc. <woods@???>; VE3TCP; Secrets of the Weird <woods@???>
