[SLE] mail logs, constant connect/disconnect from one site

From: Patrick Shanahan (WideGlide_at_SpeedyMail.Org)
Date: 08/30/03

  • Next message: Ben Rosenberg: "[SLE] For or against ..Hyperthreading." 
    Date: Fri, 29 Aug 2003 22:48:40 -0500
To: suse-linux-e@suse.com

    After disabling relays.osirusoft.com (DNSRBL), I was checking my mail
    logs and found hundreds of:

    wahoo postfix/smtpd[21655]: connect from unknown[61.248.137.183]
    wahoo postfix/smtpd[21655]: disconnect from unknown[61.248.137.183]

    Parsing input: 61.248.137.183
    host 61.248.137.183 (getting name) no name

    Reporting addresses:
    spamrelay@certcc.or.kr
    postmaster@shinbiro.com
    abuse@shinbiro.com

    and [pls forgive long lines]

    wahoo postfix/smtpd[7629]: connect from CPE0050f2c347af-CM400026310183.cpe.net.cable.rogers.com[65.48.226.202]
    wahoo postfix/smtpd[7629]: disconnect from CPE0050f2c347af-CM400026310183.cpe.net.cable.rogers.com[65.48.226.202]

    and several others over the last 4/5 days.

    The first listed, 61.248.137.183, tried for 3 solid hours 3 and 4 times
    per second.

    Are they trying to relay mail thru me, or what ???

    tks, 

    -- 
Patrick Shanahan                        Registered Linux User #207535
http://wahoo.no-ip.org                        @ http://counter.li.org
-- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
  • Next message: Ben Rosenberg: "[SLE] For or against ..Hyperthreading."

    Relevant Pages