Hi,
Is anyone else seeing an increase in the number of connects to the mail server that immediately disconnect? From the smtp log this morning:
06/05/2005 08:45:28 AM [002] 201.8.70.149 [201.8.70.149] Connected (1 total)
06/05/2005 08:45:35 AM [002] 201.8.70.149 [201.8.70.149] Disconnected (1 total)
06/05/2005 08:45:36 AM [002] 24.128.139.55 [24.128.139.55] Connected (1 total)
06/05/2005 08:45:37 AM [002] 24.128.139.55 [24.128.139.55] Disconnected (1 total)
06/05/2005 08:45:38 AM [003] 24.128.178.101 [24.128.178.101] Connected (1 total)
06/05/2005 08:45:39 AM [003] 24.128.178.101 [24.128.178.101] Disconnected (1 total)
06/05/2005 08:45:39 AM [006] 24.147.167.89 [24.147.167.89] Connected (1 total)
06/05/2005 08:45:40 AM [006] 24.147.167.89 [24.147.167.89] Disconnected (1 total)
06/05/2005 09:14:46 AM [002] 68.38.39.25 [68.38.39.25] Connected (1 total)
06/05/2005 09:14:51 AM [002] 68.38.39.25 [68.38.39.25] Disconnected (1 total)
06/05/2005 09:15:32 AM [002] 68.51.69.126 [68.51.69.126] Connected (1 total)
06/05/2005 09:15:33 AM [002] 68.51.69.126 [68.51.69.126] Disconnected (1 total)
06/05/2005 09:15:33 AM [004] 67.172.23.241 [67.172.23.241] Connected (1 total)
06/05/2005 09:15:34 AM [004] 67.172.23.241 [67.172.23.241] Disconnected (1 total)
06/05/2005 09:15:46 AM [004] 67.174.213.185 [67.174.213.185] Connected (1 total)
06/05/2005 09:15:47 AM [004] 67.174.213.185 [67.174.213.185] Disconnected (1 total)
06/05/2005 09:16:38 AM [001] 202.172.118.207 [202.172.118.207] Connected (1 total)
06/05/2005 09:16:40 AM [001] 202.172.118.207 [202.172.118.207] Disconnected (1 total)
06/05/2005 09:17:25 AM [018] 68.115.135.239 [68.115.135.239] Connected (1 total)
06/05/2005 09:17:26 AM [018] 68.115.135.239 [68.115.135.239] Disconnected (1 total)
06/05/2005 09:17:49 AM [001] 24.60.46.227 [24.60.46.227] Connected (1 total)
06/05/2005 09:17:50 AM [001] 24.60.46.227 [24.60.46.227] Disconnected (1 total)
06/05/2005 09:18:06 AM [001] 201.1.179.196 [201.1.179.196] Connected (1 total)
06/05/2005 09:18:11 AM [001] 201.1.179.196 [201.1.179.196] Disconnected (1 total)
06/05/2005 09:18:13 AM [032] 200.141.124.185 [200.141.124.185] Connected (1 total)
06/05/2005 09:18:16 AM [032] 200.141.124.185 [200.141.124.185] Disconnected (1 total)
I've also seen an increase in the amount of virus activity and I'm concerned that this connect-disconnect activity is some kind of polling or research activity.
Perhaps I'm being paranoid but I'm hoping you guys can provide a reality check or can compare what you are seeing at the moment...
Thanks,
Brett B)
-- Brett Payne-Rhodes Eaglehawk Computing t: +61 (0)8 9371-0471 f: +61 (0)8 9371-0470 m: +61 (0)414 371 047 e: [EMAIL PROTECTED] w: www.ehc.net.au ==^======================================================= This list server is Powered by iMS "The Swiss Army Knife of Mail Servers" -------------------------------------------------------------------------------------- This list is provided as a free service. Although we will try to address issues in a timely manner, support via this list is not guaranteed. If you require expedited support then a support contract is required. Support may be purchased from http://www.coolfusion.com/commerce. Details regarding support options may be reviewed at: http://www.coolfusion.com/SupportOptions.cfm -------------------------------------------------------------------------------------- To leave this list please complete the form at http://www.coolfusion.com/Support/ Need an iMS Developer license? Sign up for a free license here: http://www.coolfusion.com/Developers/ List archives: http://www.coolfusion.com/cfbb/ Note: You are subscribed as archive_jab_org / [email protected] ==^=======================================================
