Below is a clip of our log today. I notice traffic like this yesterday as well. I IP is were email from a REP for our company is sending email to us. SO I can't block the IP. Any Ideas?
11:05 00:00 SMTPD(07E70222) [208.187.38.5] connect 67.97.255.113 port 2915 11:05 00:00 SMTPD(07E70222) [67.97.255.113] EHLO astro 11:05 00:02 SMTPD(0B050214) [208.187.38.5] connect 67.97.255.113 port 2963 11:05 00:02 SMTPD(0B050214) [67.97.255.113] EHLO astro 11:05 00:02 SMTPD(0B0C0214) [208.187.38.5] connect 67.97.255.113 port 3005 11:05 00:02 SMTPD(0B0C0214) [67.97.255.113] EHLO astro 11:05 00:03 SMTPD(0B200214) [208.187.38.5] connect 67.97.255.113 port 3062 11:05 00:03 SMTPD(0B200214) [67.97.255.113] EHLO astro 11:05 00:03 SMTPD(0B270214) [208.187.38.5] connect 67.97.255.113 port 3098 11:05 00:03 SMTPD(0B270214) [67.97.255.113] EHLO astro 11:05 00:03 SMTPD(0B2E0214) [208.187.38.5] connect 67.97.255.113 port 3142 11:05 00:03 SMTPD(0B2E0214) [67.97.255.113] EHLO astro 11:05 00:03 SMTPD(2EFF0090) [208.187.38.5] connect 208.187.38.5 port 3279 11:05 00:03 SMTPD(0B3B0214) [208.187.38.5] connect 67.97.255.113 port 3188 11:05 00:03 SMTPD(0B3B0214) [67.97.255.113] EHLO astro 11:05 00:04 SMTPD(81D5024A) [208.187.38.5] connect 67.97.255.113 port 3235 11:05 00:04 SMTPD(81D5024A) [67.97.255.113] EHLO astro 11:05 00:05 SMTPD(81E2024A) [208.187.38.5] connect 67.97.255.113 port 3284 11:05 00:05 SMTPD(81E2024A) [67.97.255.113] EHLO astro 11:05 00:12 SMTPD(17500256) [208.187.38.5] connect 67.97.255.113 port 3339 11:05 00:12 SMTPD(17500256) [67.97.255.113] EHLO astro 11:05 00:12 SMTPD(17700256) [208.187.38.5] connect 67.97.255.113 port 3397 11:05 00:12 SMTPD(17700256) [67.97.255.113] EHLO astro 11:05 00:12 SMTPD(17710256) [208.187.38.5] connect 67.97.255.113 port 3438 11:05 00:12 SMTPD(17710256) [67.97.255.113] EHLO astro 11:05 00:13 SMTPD(2F130090) [208.187.38.5] connect 208.187.38.5 port 3426 Jerry Freund Information Systems Supervisor Phoenix Gold Int'l Inc. tel. 503.286.9300 ext. 530 fax. 503.978.8531 WWW.PHOENIXGOLD.COM WWW.CARVERPRO.COM WWW.AUDIOSOURCE.NET ***** This E-mail scanned for viruses by Declude Virus ***** =============================================================== The information contained in this e-mail and all attachments is confidential and is for the sole use of its intended recipient. It may not be disclosed to or used by anyone other than the addressee. If received in error, please contact the sender by return e-mail and delete this e-mail and all attachments from your system. Thank you. =============================================================== To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
