anti-spam vs network abuse
Roger Marquis
marquis at roble.com
Fri Feb 28 23:29:24 UTC 2003
> As a result the ISP must either A) purchase more RAM, faster CPUs,
> and additional servers, or B) run the risk of complaints and lost
> customer goodwill. All of this costs time and money.
Looks like both a netscan and a portscan, and clearly not designed
to limit damages to innocent third parties. Come on njabl.org,
this isn't rocket science. Turn down that scan rate by a factor
of at least 50, please.
--
Roger Marquis
Roble Systems Consulting
http://www.roble.com/
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
15:17:40 PST Connection attempt to TCP IP.IP.IP.IP:25 from 209.208.0.15:57753
15:16:51 PST postfix/smtpd[94021]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:51 PST postfix/smtpd[94021]: lost connection after CONNECT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:51 PST postfix/smtpd[94021]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:51 PST postfix/smtpd[94026]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:51 PST postfix/smtpd[94026]: E3914DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:52 PST postfix/smtpd[94026]: E3914DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest at rr.njabl.org>: Relay access denied; from=<relaytestsend at rt.njabl.org> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest at rr.njabl.org>: Relay access denied; from=<relaytestsend at victim.com> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest at rr.njabl.org>: Relay access denied; from=<relaytestsend at rt.njabl.org@victim.com> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 504 <relaytestsend>: Sender address rejected: need fully-qualified address; from=<relaytestsend> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 450 <relaytestsend at localhost>: Sender address rejected: Domain not found; from=<relaytestsend at localhost> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest at rr.njabl.org>: Relay access denied; from=<> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <relaytest at rr.njabl.org>: Relay access denied; from=<relaytestsend@[IP.IP.IP.IP]> to=<relaytest at rr.njabl.org> proto=ESMTP helo=<rt.njabl.org>
15:17:09 PST postfix/smtpd[94026]: too many errors after RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
15:17:09 PST postfix/smtpd[94026]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
...
More information about the NANOG
mailing list