Your description sounds like a spammer, but it's hard to tell. Check your /var/log/maillog and see what's going on. That IP resolves to callisto.hmdnsgroup.com.
HTH, Nick > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 23, 2003 10:31 AM > To: [EMAIL PROTECTED] Com > Subject: Netstat -an readings > > > I was running the netstat -an command and I noticed that I > have multiple > connections to port 25 on my server. My mail sending has been > slow, so I > am guessing this is the reason. What I don't understand is why this IP > has multiple connections established to my port 25. In total there are > 13 connections. Is this a DOS attack or is this normal? I > compared this > to our company mail server and there is nothing like this on it. > > > tcp 0 0 192.168.0.2:25 63.247.132.19:52355 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:52129 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:49572 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:52410 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:53274 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:52184 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:50527 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:51408 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:53012 > ESTABLISHED > tcp 0 0 192.168.0.2:25 63.247.132.19:50805 > ESTABLISHED > > Richard Humphrey > > > -- > redhat-list mailing list > unsubscribe mailto:[EMAIL PROTECTED] > https://www.redhat.com/mailman/listinfo/redhat-list > This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. My views or opinions presented are solely those of the author (Nick [EMAIL PROTECTED]) and do not necessarily represent those of the company. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
