Reply to comment
bitterpenguin.com, who are you and why are all the bots relaying email to you?
Submitted by schettino on April 23, 2009 - 11:54amRun your own email server (or admin one for work?) I'm willing to bet you too get hundreds of relay attempts daily from zombies. What's the point of these?
My own logs have variations on this theme over and over:
Apr 23 11:01:32 schettino postfix/smtpd[5183]: NOQUEUE: reject: RCPT from unknown[82.193.209.166]: 554 5.7.1 <e@bitterpenguin.com>: Relay access denied; from=<impatience795@seaor.com> to=<e@bitterpenguin.com> proto=ESMTP helo=<KBSNRAK>
The pattern is the same, only the sources vary, meaning this is a standard attack, scripted attack, or botnet thing. But what is it trying to accomplish (I know its attempting to relay - I'm not THAT dense) by blasting bitterpenguin.com with email?
Anyone else seeing this?
