1. Forum
  2. FIDONET
  3. SYNCHRONET

  • Weird log entry

    From poindexter FORTRAN@1:103/705 to All on Fri Oct 9 18:04:46 2026
    Looks like a script kiddie tried running an HTTP exploit over my SMTP port?

    10/9 05:34:40p 3416 SMTP [69.5.169.203] Connection accepted on 192.168.1.7 port 940 from port 14418
    10/9 05:34:40p 3416 SMTP [69.5.169.203] Hostname: 69-5-169-203.infrawat.ch
    10/9 05:34:41p 3416 SMTP DNSBL Query: 203.169.5.69.dnsbl-1.uceprotect.net resolved to: 127.0.0.2
    10/9 05:34:41p 3416 SMTP [69.5.169.203] BLACKLISTED SERVER on dnsbl-1.uceprotect.net: 69-5-169-203.infrawat.ch = 127.0.0.2
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'GET / HTTP/1.1')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'Host: 71.204.139.119')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'Accept: */*')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'Accept-Encoding: gzip')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'Connection: close')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: '')
    10/9 05:34:41p 3416 SMTP Connection reset by peer on receive

    ---
    þ Synchronet þ .: realitycheckbbs.org :: scientia potentia est :.
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to poindexter FORTRAN on Sat Oct 10 13:24:33 2026
    Re: Weird log entry
    By: poindexter FORTRAN to All on Fri Oct 09 2026 06:04 pm

    Looks like a script kiddie tried running an HTTP exploit over my SMTP port? > 10/9 05:34:40p 3416 SMTP [69.5.169.203] Connection accepted on 192.168.1.7 > port 940 from port 14418
    10/9 05:34:40p 3416 SMTP [69.5.169.203] Hostname: 69-5-169-203.infrawat.ch
    10/9 05:34:41p 3416 SMTP DNSBL Query: 203.169.5.69.dnsbl-1.uceprotect.net resolved to: 127.0.0.2
    10/9 05:34:41p 3416 SMTP [69.5.169.203] BLACKLISTED SERVER on dnsbl-1.uceprotect.net: 69-5-169-203.infrawat.ch = 127.0.0.2
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'GET / HTTP/1.1')
    10/9 05:34:41p 3416 SMTP [69.5.169.203] !MISSING 'HELO' command (Received: 'Host: 71.204.139.119')


    You're on the internet.

    --
    https://i.imgur.com/MNKA5U0.png
    President of BBS Sysop's Union +++ https://bbses.info/union
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)