🚀 go-pugleaf

Hallo leute

hab heute dieses (siehe unten) mail in meinem postmaster konto
gefunden... kann mir da jemand weiterhelfen? komm nicht ganz draus.
sieht irgendwie nach trojaner aus?

ein paar infos zu meinem system:

der hermes.hoffeld.ch is unser wg server (hoffeld.ch is nirgends
eingetragen nur intern...) mit linux suse 6.3. dran haengen ein paar
kisten mit windows und linux im 192.168.1.x netz...

Besten Dank f�r jeden Hinweis...

chregu

und hier das mail:

From root@hermes.hoffeld.ch  Wed Feb  9 20:21:46 2000
Return-Path: <root>
Received: from localhost (localhost)
	by hermes.hoffeld.ch (8.9.3/8.8.8) with internal id UAA15932;
	Wed, 9 Feb 2000 20:21:46 +0100
Date: Wed, 9 Feb 2000 20:21:46 +0100
From: Mail Delivery Subsystem <root@hermes.hoffeld.ch>
Message-Id: <200002091921.UAA15932@hermes.hoffeld.ch>
To: postmaster@hermes.hoffeld.ch
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="UAA15932.950124106/hermes.hoffeld.ch"
Subject: Postmaster notify: User unknown
Auto-Submitted: auto-generated (postmaster-notification)
Status: RO
X-Status: 
X-Keywords:                 
X-UID: 99

This is a MIME-encapsulated message

--UAA15932.950124106/hermes.hoffeld.ch

The original message was received at Wed, 9 Feb 2000 19:59:40 +0100
from ns1.delta.ch [194.209.77.2]

   ----- The following addresses had permanent fatal errors -----
<none@[194.230.227.8]>

   ----- Transcript of session follows -----
550 <none@[194.230.227.8]>... User unknown

--UAA15932.950124106/hermes.hoffeld.ch
Content-Type: message/delivery-status

Reporting-MTA: dns; hermes.hoffeld.ch
Arrival-Date: Wed, 9 Feb 2000 19:59:40 +0100

Final-Recipient: RFC822; <none@[194.230.227.8]>
Action: failed
Status: 5.1.1
Last-Attempt-Date: Wed, 9 Feb 2000 20:21:46 +0100

--UAA15932.950124106/hermes.hoffeld.ch
Content-Type: message/rfc822

Return-Path: <>
Received: from saturn.delta.ch (ns1.delta.ch [194.209.77.2])
	by hermes.hoffeld.ch (8.9.3/8.8.8) with ESMTP id TAA15510
	for <none@[194.230.227.8]>; Wed, 9 Feb 2000 19:59:40 +0100
Received: from saturn.delta.ch by [194.230.227.8] at Tue, 8 Feb 2000
19:24:00 +0000
From: "PostMaster@delta.ch" <PostMaster@delta.ch>
To: "none@[194.230.227.8]" <none@hermes.hoffeld.ch>
Subject: Failed mail
Date: Tue, 8 Feb 2000 19:24:00 +0000
Message-Id: <18240060919145@delta.ch>
X-Mailer: NTMail v4.20.0009
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="==_18240060919147@[194.230.227.8]==_"

This is a MIME-encapsulated message

--==_18240060919147@[194.230.227.8]==_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Your message to mail-intake-1.mail.com was rejected.
I said:
    MAIL From:<none@[194.230.227.8]>
And mail-intake-1.mail.com responded with
    501 <none@[194.230.227.8]>... Sender domain must exist


--==_18240060919147@[194.230.227.8]==_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

The message headers and first 50 lines of message body follow:


--==_18240060919147@[194.230.227.8]==_
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline; filename="ofgzbaaa.mbx"

Received: from [194.230.227.8] by saturn.microsoft.ch (NTMail
4.20.0009/NT5398.00.8a4001c1) with ESMTP id ofgzbaaa for
<email@mail.com>; Tue, 8 Feb 2000 19:23:53 +0000
From: SubSevenServer<none>
To: email@mail.com
CC: 
Subject: Current Local IP is: 194.230.227.8
X-Mailer: sssmtp
Mime-Version: 1.0
Content-Type: text/plain;                        charset=us-ascii
Date: Tue, 8 Feb 2000 19:23:53 +0000
Message-Id: <18235357812822@[194.230.227.8]>


user is online!
[port=1243]-[ip=194.230.227.8]-[victim=Petoia]-[version=2.0]-[password=no]

--==_18240060919147@[194.230.227.8]==_--


--UAA15932.950124106/hermes.hoffeld.ch--