[Full-Disclosure] HTTP request with SMTP message

Tiago Halm thalm at netcabo.pt
Mon Nov 24 16:25:30 GMT 2003


It's not the first time, but I gave up trying to figure it out.
My IIS (port 80) received this HTTP request from x.x.x.x.

Any thoughts ?

----------------------------------------------------------------------------
----------
POST http://x.x.x.x:25/ HTTP/1.1
Content-type: application/octet-stream
Content-length: 540
Host: x.x.x.x

HELO ps.com
MAIL FROM:<vsuhfbovuhs at socal.rr.com>
RCPT TO: <looc_si_maps at yahoo.ie>
DATA
Message-ID:
<080083058050049051046050050046055052046050052052058052058056048 at ps.com>
To: <looc_si_maps at yahoo.ie>
From:vsuhfbovuhs at socal.rr.com
Subject: no doubt homie
Date: Sat, 22 Nov 2003 10:06:34 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook Express 5.00.3018.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.3018.1300

Message Body
.
QUIT
----------------------------------------------------------------------------
----------

Tiago Halm
http://www.kodeit.org




Full-Disclosure is hosted and sponsored by Secunia.