Add Mail-SMTP-Honeypot

referefref · May 11, 2024 · 07ae3c2 · 07ae3c2
1 parent 68fc672
commit 07ae3c2
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/signatures.yaml b/signatures.yaml
@@ -361,3 +361,16 @@ signatures:
        invert_match: false
     confidence: "High"
     comment: "Typographic error in error message when sending double-quote"
+
+   - name: "Mail-SMTP-Honeypot"
+    id: 29
+    port: 25
+    proto: TCP
+    steps:
+     - input_type: string
+       input: 'DATA'
+       output_match_type: string
+       output: "421 Service not available, closing transmission channel"
+       invert_match: false
+    confidence: "High"
+    comment: "Deliberate 421 error when DATA command provided. Ref: https://metacpan.org/pod/Mail::SMTP::Honeypot"