Suspicious SMTP server client activity - non-ASCII queries

Published: 11/07/2019
Suspicious SMTP server client activity - non-ASCII queries
Source: SECURITY.STACKEXCHANGE.COM

I've noticed some strange activities from some remote host connected to our SMTP mail server. Queries contains non-ASCII characters, below is the copy of one of them (to each query our server responded with "command not implemented"): ..._)....pz4.H.T7.&...4..rШ./.+.... .. The hex representation is: 20 00 00 00 5F 29 00 00 00 00 70 7A 34 00 48 00 54 37 00 26 00 00 00 34 00 00 72 D8 00 2F 00

Read more
Related news
Comment
FACEBOOK