I noticed that several of these appeared in our log file today...
 
<snip>
01:04 03:24 SMTPD(10D4008A) [0.0.0.0] connect 210.91.16.2 port 8681
01:04 03:24 SMTPD(10D4008A) send error 10054
</snip> ...
 
<snip>
01:04 12:08 SMTPD(1314008A) [0.0.0.0] connect 210.91.16.2 port 20946
01:04 12:08 SMTPD(1314008A) send error 10054
</snip> ...
 
all from the same IP, rdns revealed 210.91.16.2 = mail.sgt.co.kr.  !!!
Is this someone trying to spam via our server ???
 
TIA
Kevin

Reply via email to