Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 816 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange Connections on Sophos SMTP Proxy

HansiMüller
Hello, there is traffic allt the time to our smtp from one ip adress in vietnam. Tried to set up a Reject Rule for the vietnam IP but there entries are sill logged. How can i stop this? thank you
2021:03:19-12:07:24 gateway-2 exim-in[8223]: 2021-03-19 12:07:24 SMTP connection from (7eo1PQ5) [103.147.184.80]:52434 lost
2021:03:19-12:07:24 gateway-2 exim-in[11603]: 2021-03-19 12:07:24 SMTP connection from [103.147.184.80]:58554 (TCP/IP connection count = 1)
2021:03:19-12:07:25 gateway-2 exim-in[8225]: 2021-03-19 12:07:25 SMTP connection from (LS2Ag32Y) [103.147.184.80]:58554 lost
2021:03:19-12:07:25 gateway-2 exim-in[11603]: 2021-03-19 12:07:25 SMTP connection from [103.147.184.80]:53216 (TCP/IP connection count = 1)
2021:03:19-12:07:25 gateway-2 exim-in[8226]: 2021-03-19 12:07:25 SMTP connection from (e4WjbcOEy) [103.147.184.80]:53216 lost
2021:03:19-12:07:26 gateway-2 exim-in[11603]: 2021-03-19 12:07:26 SMTP connection from [103.147.184.80]:56949 (TCP/IP connection count = 1)
2021:03:19-12:07:26 gateway-2 exim-in[8231]: 2021-03-19 12:07:26 SMTP connection from (HqEUv1v) [103.147.184.80]:56949 lost
2021:03:19-12:07:26 gateway-2 exim-in[11603]: 2021-03-19 12:07:26 SMTP connection from [103.147.184.80]:60478 (TCP/IP connection count = 1)
2021:03:19-12:07:27 gateway-2 exim-in[8232]: 2021-03-19 12:07:27 SMTP connection from (W8usWmRLaa) [103.147.184.80]:60478 lost
2021:03:19-12:07:27 gateway-2 exim-in[11603]: 2021-03-19 12:07:27 SMTP connection from [103.147.184.80]:60306 (TCP/IP connection count = 1)
2021:03:19-12:07:28 gateway-2 exim-in[8233]: 2021-03-19 12:07:28 SMTP connection from (1edaAQPc) [103.147.184.80]:60306 lost
2021:03:19-12:07:28 gateway-2 exim-in[11603]: 2021-03-19 12:07:28 SMTP connection from [103.147.184.80]:54660 (TCP/IP connection count = 1)
2021:03:19-12:07:29 gateway-2 exim-in[8235]: 2021-03-19 12:07:29 SMTP connection from (xDM129Yo2P) [103.147.184.80]:54660 lost
2021:03:19-12:07:29 gateway-2 exim-in[11603]: 2021-03-19 12:07:29 SMTP connection from [103.147.184.80]:54404 (TCP/IP connection count = 1)
2021:03:19-12:07:30 gateway-2 exim-in[8237]: 2021-03-19 12:07:30 SMTP connection from (nVErWBvA) [103.147.184.80]:54404 lost
2021:03:19-12:07:30 gateway-2 exim-in[11603]: 2021-03-19 12:07:30 SMTP connection from [103.147.184.80]:53147 (TCP/IP connection count = 1)
2021:03:19-12:07:31 gateway-2 exim-in[8238]: 2021-03-19 12:07:31 SMTP connection from (YAprmoWT) [103.147.184.80]:53147 lost
2021:03:19-12:07:31 gateway-2 exim-in[11603]: 2021-03-19 12:07:31 SMTP connection from [103.147.184.80]:64054 (TCP/IP connection count = 1)
2021:03:19-12:07:32 gateway-2 exim-in[8240]: 2021-03-19 12:07:32 SMTP connection from (Cr2lkWas) [103.147.184.80]:64054 lost
2021:03:19-12:07:32 gateway-2 exim-in[11603]: 2021-03-19 12:07:32 SMTP connection from [103.147.184.80]:54093 (TCP/IP connection count = 1)
2021:03:19-12:07:33 gateway-2 exim-in[8241]: 2021-03-19 12:07:33 SMTP connection from (o4RUGuO2HE) [103.147.184.80]:54093 lost
2021:03:19-12:07:33 gateway-2 exim-in[11603]: 2021-03-19 12:07:33 SMTP connection from [103.147.184.80]:58547 (TCP/IP connection count = 1)
2021:03:19-12:07:34 gateway-2 exim-in[8242]: 2021-03-19 12:07:34 SMTP connection from (JZHTA3K) [103.147.184.80]:58547 lost
2021:03:19-12:07:34 gateway-2 exim-in[11603]: 2021-03-19 12:07:34 SMTP connection from [103.147.184.80]:52057 (TCP/IP connection count = 1)
2021:03:19-12:07:35 gateway-2 exim-in[8244]: 2021-03-19 12:07:35 SMTP connection from (jT0rwX) [103.147.184.80]:52057 lost
2021:03:19-12:07:35 gateway-2 exim-in[11603]: 2021-03-19 12:07:35 SMTP connection from [103.147.184.80]:52588 (TCP/IP connection count = 1)
2021:03:19-12:07:35 gateway-2 exim-in[8246]: 2021-03-19 12:07:35 SMTP connection from (wvGNBdJZQ) [103.147.184.80]:52588 lost
2021:03:19-12:07:36 gateway-2 exim-in[11603]: 2021-03-19 12:07:36 SMTP connection from [103.147.184.80]:53713 (TCP/IP connection count = 1)
2021:03:19-12:07:36 gateway-2 exim-in[8247]: 2021-03-19 12:07:36 SMTP connection from (uzyK8ED8) [103.147.184.80]:53713 lost
2021:03:19-12:07:37 gateway-2 exim-in[11603]: 2021-03-19 12:07:37 SMTP connection from [103.147.184.80]:51758 (TCP/IP connection count = 1)
2021:03:19-12:07:37 gateway-2 exim-in[8248]: 2021-03-19 12:07:37 SMTP connection from (NhDjF4zHSz) [103.147.184.80]:51758 lost
2021:03:19-12:07:37 gateway-2 exim-in[11603]: 2021-03-19 12:07:37 SMTP connection from [103.147.184.80]:52393 (TCP/IP connection count = 1)
2021:03:19-12:07:38 gateway-2 exim-in[8256]: 2021-03-19 12:07:38 SMTP connection from (tgpP9Lk5J) [103.147.184.80]:52393 lost
2021:03:19-12:07:38 gateway-2 exim-in[11603]: 2021-03-19 12:07:38 SMTP connection from [103.147.184.80]:64141 (TCP/IP connection count = 1)
2021:03:19-12:07:39 gateway-2 exim-in[8258]: 2021-03-19 12:07:39 SMTP connection from (tdhNSc) [103.147.184.80]:64141 lost
2021:03:19-12:07:39 gateway-2 exim-in[11603]: 2021-03-19 12:07:39 SMTP connection from [103.147.184.80]:56854 (TCP/IP connection count = 1)
2021:03:19-12:07:40 gateway-2 exim-in[8259]: 2021-03-19 12:07:40 SMTP connection from (hj6F3ykd) [103.147.184.80]:56854 lost
2021:03:19-12:07:40 gateway-2 exim-in[11603]: 2021-03-19 12:07:40 SMTP connection from [103.147.184.80]:59431 (TCP/IP connection count = 1)
2021:03:19-12:07:41 gateway-2 exim-in[8260]: 2021-03-19 12:07:41 SMTP connection from (2lTkwb9i) [103.147.184.80]:59431 lost
2021:03:19-12:07:41 gateway-2 exim-in[11603]: 2021-03-19 12:07:41 SMTP connection from [103.147.184.80]:63106 (TCP/IP connection count = 1)
2021:03:19-12:07:42 gateway-2 exim-in[8262]: 2021-03-19 12:07:42 SMTP connection from (WV6D9Ads4N) [103.147.184.80]:63106 lost
2021:03:19-12:07:42 gateway-2 exim-in[11603]: 2021-03-19 12:07:42 SMTP connection from [103.147.184.80]:54372 (TCP/IP connection count = 1)
2021:03:19-12:07:42 gateway-2 exim-in[8263]: 2021-03-19 12:07:42 SMTP connection from (OnZjY1DqsZ) [103.147.184.80]:54372 lost
2021:03:19-12:07:43 gateway-2 exim-in[11603]: 2021-03-19 12:07:43 SMTP connection from [103.147.184.80]:54235 (TCP/IP connection count = 1)
2021:03:19-12:07:43 gateway-2 exim-in[8264]: 2021-03-19 12:07:43 SMTP connection from (7gpQyU) [103.147.184.80]:54235 lost
2021:03:19-12:07:44 gateway-2 exim-in[11603]: 2021-03-19 12:07:44 SMTP connection from [103.147.184.80]:56583 (TCP/IP connection count = 1)
2021:03:19-12:07:44 gateway-2 exim-in[8266]: 2021-03-19 12:07:44 SMTP connection from (arg4P2Ao) [103.147.184.80]:56583 lost
2021:03:19-12:07:44 gateway-2 exim-in[11603]: 2021-03-19 12:07:44 SMTP connection from [103.147.184.80]:52370 (TCP/IP connection count = 1)
2021:03:19-12:07:45 gateway-2 exim-in[8267]: 2021-03-19 12:07:45 SMTP connection from (Y5xLlo3APc) [103.147.184.80]:52370 lost
2021:03:19-12:07:45 gateway-2 exim-in[11603]: 2021-03-19 12:07:45 SMTP connection from [103.147.184.80]:63643 (TCP/IP connection count = 1)
2021:03:19-12:07:46 gateway-2 exim-in[8268]: 2021-03-19 12:07:46 SMTP connection from (7PxiSsH) [103.147.184.80]:63643 lost
2021:03:19-12:07:46 gateway-2 exim-in[11603]: 2021-03-19 12:07:46 SMTP connection from [103.147.184.80]:61484 (TCP/IP connection count = 1)
2021:03:19-12:07:47 gateway-2 exim-in[8269]: 2021-03-19 12:07:47 SMTP connection from (DynLTvUyE) [103.147.184.80]:61484 lost
2021:03:19-12:07:47 gateway-2 exim-in[11603]: 2021-03-19 12:07:47 SMTP connection from [103.147.184.80]:63094 (TCP/IP connection count = 1)
2021:03:19-12:07:48 gateway-2 exim-in[8272]: 2021-03-19 12:07:48 SMTP connection from (3nhtrPNQW) [103.147.184.80]:63094 lost
2021:03:19-12:07:48 gateway-2 exim-in[11603]: 2021-03-19 12:07:48 SMTP connection from [103.147.184.80]:63173 (TCP/IP connection count = 1)
2021:03:19-12:07:49 gateway-2 exim-in[8273]: 2021-03-19 12:07:49 SMTP connection from (kkxIihb) [103.147.184.80]:63173 lost
2021:03:19-12:07:49 gateway-2 exim-in[11603]: 2021-03-19 12:07:49 SMTP connection from [103.147.184.80]:62556 (TCP/IP connection count = 1)
2021:03:19-12:07:50 gateway-2 exim-in[8274]: 2021-03-19 12:07:50 SMTP connection from (4cBGDHxn) [103.147.184.80]:62556 lost
2021:03:19-12:07:50 gateway-2 exim-in[11603]: 2021-03-19 12:07:50 SMTP connection from [103.147.184.80]:54780 (TCP/IP connection count = 1)
2021:03:19-12:07:51 gateway-2 exim-in[8276]: 2021-03-19 12:07:51 SMTP connection from (8dFZLk) [103.147.184.80]:54780 lost
2021:03:19-12:07:51 gateway-2 exim-in[11603]: 2021-03-19 12:07:51 SMTP connection from [103.147.184.80]:62441 (TCP/IP connection count = 1)
2021:03:19-12:07:51 gateway-2 exim-in[8277]: 2021-03-19 12:07:51 SMTP connection from (4f8ey9olKE) [103.147.184.80]:62441 lost
2021:03:19-12:07:52 gateway-2 exim-in[11603]: 2021-03-19 12:07:52 SMTP connection from [103.147.184.80]:63426 (TCP/IP connection count = 1)


This thread was automatically locked due to age.
Parents Reply Children
No Data
Unfiltered HTML