I was running in major overloads on my box and I kept noticing entries such as these
enewsletter11.ru.2500 TIME_WAIT enewsletter11.ru.2353 ESTABLISHED enewsletter11.ru.2371 TIME_WAIT enewsletter11.ru.2350 ESTABLISHED half of them would eventually time out- SMTP command timeout on connection from enewsletter11.ruceci.com (enewsletter.ruceci.com) [208.74.102.200] others made it through and I checked the messages that made it through- they are definitely UCE I did trace it back to this IP enewsletter11.ruceci.com (enewsletter.ruceci.com) [208.74.102.200] which is a datacenter in KS Arsalon Technologies LLC I'm not sure what is going on but why are they stuck to my server- Is it safe to blacklist the IP - if so I don't recall seeing info on blacklist IP's By the way how can I get more data on why it timed out ? Thanks
