Smtp Body Localip Probe Marker

SMTP message body contained the string t_Smtp.LocalIP, a pattern commonly used by automated relay-testing tools to verify message delivery or identify the responding server’s local IP during open-relay validation. In honeypot environments, this marker typically indicates scripted testing rather than legitimate email content and is often associated with spam bot or relay-probe activity.