Below are two samples from my log for today. Anyone else seing this? IPs that connect and send "HELO local" and that's it? Perhaps I need verbose logging on to see more, but I'm curious if anyone is getting hammered like this? These 2 IPs tried hundreds of times to connect to me today. The first IP 203.232.18.211 this morning and now 67.85.27.143 has been hitting me all afternoon. Weird no?
-Josh 20030816 051925 127.0.0.1 SMTPD (03020036) [203.232.18.211] HELO local 20030816 051927 127.0.0.1 SMTPD (03030036) [64.81.214.120] connect 203.232.18.211 port 4628 20030816 051927 127.0.0.1 SMTPD (03030036) [203.232.18.211] HELO local 20030816 051929 127.0.0.1 SMTPD (03040036) [64.81.214.120] connect 203.232.18.211 port 4633 20030816 051929 127.0.0.1 SMTPD (03040036) [203.232.18.211] HELO local 20030816 051931 127.0.0.1 SMTPD (03050036) [64.81.214.120] connect 203.232.18.211 port 4637 20030816 051931 127.0.0.1 SMTPD (03050036) [203.232.18.211] HELO local 20030816 051933 127.0.0.1 SMTPD (03060036) [64.81.214.120] connect 203.232.18.211 port 4640 20030816 051933 127.0.0.1 SMTPD (03060036) [203.232.18.211] HELO local 20030816 051935 127.0.0.1 SMTPD (03070036) [64.81.214.120] connect 203.232.18.211 port 4643 20030816 051935 127.0.0.1 SMTPD (03070036) [203.232.18.211] HELO local 20030816 051937 127.0.0.1 SMTPD (03080036) [64.81.214.120] connect 203.232.18.211 port 4647 20030816 051938 127.0.0.1 SMTPD (03080036) [203.232.18.211] HELO local 20030816 051939 127.0.0.1 SMTPD (03090036) [64.81.214.120] connect 203.232.18.211 port 4651 20030816 051940 127.0.0.1 SMTPD (03090036) [203.232.18.211] HELO local 20030816 051941 127.0.0.1 SMTPD (030A0036) [64.81.214.120] connect 203.232.18.211 port 4655 20030816 051942 127.0.0.1 SMTPD (030A0036) [203.232.18.211] HELO local 20030816 051943 127.0.0.1 SMTPD (030B0036) [64.81.214.120] connect 203.232.18.211 port 4658 20030816 051944 127.0.0.1 SMTPD (030B0036) [203.232.18.211] HELO local 20030816 051946 127.0.0.1 SMTPD (030C0036) [64.81.214.120] connect 203.232.18.211 port 4661 20030816 051946 127.0.0.1 SMTPD (030C0036) [203.232.18.211] HELO local 20030816 142759 127.0.0.1 SMTPD (2B3C00BC) [64.81.214.120] connect 67.85.27.143 port 3029 20030816 142759 127.0.0.1 SMTPD (2B3C00BC) [67.85.27.143] HELO local 20030816 142800 127.0.0.1 SMTPD (2B3D00BC) [64.81.214.120] connect 67.85.27.143 port 3042 20030816 142800 127.0.0.1 SMTPD (2B3D00BC) [67.85.27.143] HELO local 20030816 142801 127.0.0.1 SMTPD (2B3E00BC) [64.81.214.120] connect 67.85.27.143 port 3055 20030816 142801 127.0.0.1 SMTPD (2B3E00BC) [67.85.27.143] HELO local 20030816 142802 127.0.0.1 SMTPD (2B3F00BC) [64.81.214.120] connect 67.85.27.143 port 3066 20030816 142802 127.0.0.1 SMTPD (2B3F00BC) [67.85.27.143] HELO local 20030816 142803 127.0.0.1 SMTPD (2B4000BC) [64.81.214.120] connect 67.85.27.143 port 3078 20030816 142803 127.0.0.1 SMTPD (2B4000BC) [67.85.27.143] HELO local 20030816 142804 127.0.0.1 SMTPD (2B4100BC) [64.81.214.120] connect 67.85.27.143 port 3098 20030816 142804 127.0.0.1 SMTPD (2B4100BC) [67.85.27.143] HELO local 20030816 142805 127.0.0.1 SMTPD (2B4200BC) [64.81.214.120] connect 67.85.27.143 port 3113 20030816 142805 127.0.0.1 SMTPD (2B4200BC) [67.85.27.143] HELO local To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
