Print Page | Close Window

Why disconnects for no reason?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5103
Printed Date: 30 April 2025 at 12:51pm


Topic: Why disconnects for no reason?
Posted By: chinabee
Subject: Why disconnects for no reason?
Date Posted: 16 March 2005 at 10:02am

I only banned Korea and Chile

 

03/15/05 21:19:56:828 -- (2168) EMail from mailto:steve@process-news.com - steve@process-news.com to mailto:chrisl@mycompany.com - chrisl@mycompany.com   was forwarded to 192.168.1.80:25
03/15/05 21:19:58:406 -- (2176) Disconnect
03/15/05 21:20:12:389 -- (2176) Connection from: 200.112.87.86  -  Originating country : Chile
03/15/05 21:20:18:233 -- (2176) Disconnect
03/15/05 21:20:35:372 -- (1560) Disconnect
03/15/05 21:20:57:559 -- (2240) Connection from: 200.72.148.125  -  Originating country : Chile
03/15/05 21:20:57:590 -- (2240) Disconnect
03/15/05 21:21:21:854 -- (2240) Connection from: 12.223.163.176  -  Originating country : United States
03/15/05 21:21:22:042 -- (2240) Disconnect
03/15/05 21:21:22:183 -- (2240) Connection from: 24.6.41.154  -  Originating country : United States
03/15/05 21:21:22:448 -- (2240) Disconnect
03/15/05 21:21:23:120 -- (2240) Connection from: 201.2.210.199  -  Originating country : Brazil
03/15/05 21:21:23:964 -- (2176) Connection from: 65.29.43.238  -  Originating country : United States
03/15/05 21:21:24:104 -- (2176) Disconnect
03/15/05 21:21:24:120 -- (2240) Disconnect
03/15/05 21:21:25:026 -- (2240) Connection from: 222.112.75.238  -  Originating country : Korea, Republic of
03/15/05 21:21:26:214 -- (2176) Connection from: 64.69.93.250  -  Originating country : Canada
03/15/05 21:21:26:292 -- (2240) Disconnect
03/15/05 21:21:26:479 -- (2176) Disconnect
03/15/05 21:21:42:994 -- (2220) Connection from: 69.203.129.178  -  Originating country : N/A
03/15/05 21:21:43:213 -- (2220) Disconnect
03/15/05 21:21:54:697 -- (2220) Connection from: 200.104.29.21  -  Originating country : Chile
03/15/05 21:21:58:259 -- (2220) Disconnect
03/15/05 21:22:16:258 -- (2220) Connection from: 69.182.119.210  -  Originating country : United States
03/15/05 21:22:16:508 -- (2220) Disconnect
03/15/05 21:22:20:398 -- (2220) Connection from: 24.127.50.80  -  Originating country : United States
03/15/05 21:22:23:258 -- (2136) Connection from: 69.133.80.203  -  Originating country : United States
03/15/05 21:22:23:554 -- (2136) Disconnect
03/15/05 21:22:24:633 -- (2136) Connection from: 24.23.97.216  -  Originating country : United States
03/15/05 21:22:24:929 -- (2136) Disconnect
03/15/05 21:22:24:976 -- (2136) Connection from: 67.163.186.44  -  Originating country : United States
03/15/05 21:22:25:179 -- (2136) Disconnect
03/15/05 21:22:26:289 -- (2220) Disconnect
03/15/05 21:22:36:523 -- (2220) Connection from: 203.86.65.36  -  Originating country : China
03/15/05 21:22:50:334 -- (2220) Disconnect
03/15/05 21:22:51:834 -- (2220) Connection from: 68.36.218.44  -  Originating country : United States
03/15/05 21:22:52:069 -- (2220) Disconnect
03/15/05 21:22:54:756 -- (2220) Connection from: 220.46.181.54  -  Originating country : Japan
03/15/05 21:22:55:725 -- (2220) Disconnect
03/15/05 21:22:59:506 -- (2220) Connection from: 60.42.189.9  -  Originating country : Japan
03/15/05 21:23:00:224 -- (2220) Disconnect
03/15/05 21:23:06:490 -- (2220) Connection from: 200.76.180.239  -  Originating country : Mexico
03/15/05 21:23:10:958 -- (2136) Connection from: 24.58.205.36  -  Originating country : United States
03/15/05 21:23:11:271 -- (2136) Disconnect
03/15/05 21:23:11:427 -- (2220) Disconnect
03/15/05 21:23:11:646 -- (2220) Connection from: 24.19.250.42  -  Originating country : United States
03/15/05 21:23:11:943 -- (2220) Disconnect
03/15/05 21:23:16:052 -- (2220) Connection from: 67.166.58.185  -  Originating country : United States
03/15/05 21:23:16:224 -- (2220) Disconnect
03/15/05 21:23:29:832 -- (2220) Connection from: 221.126.86.209  -  Originating country : Hong Kong
03/15/05 21:23:31:270 -- (2220) Disconnect
03/15/05 21:23:32:582 -- (2220) Connection from: 218.52.84.160  -  Originating country : Korea, Republic of
03/15/05 21:23:35:723 -- (2220) Resolving 218.52.84.160 - Not found
03/15/05 21:23:35:723 -- (2220) - IP address is from a blacklisted country...
03/15/05 21:23:35:723 -- (2220) 218.52.84.160 - Mail from: mailto:wen@dehumidifier.com - wen@dehumidifier.com To: mailto:sushant.roy@mycompany.com - sushant.roy@mycompany.com will be disconnected
03/15/05 21:23:35:723 -- (2220) Disconnect
03/15/05 21:23:36:457 -- (2220) Connection from: 69.182.164.193  -  Originating country : United States
03/15/05 21:23:36:644 -- (2220) Disconnect
03/15/05 21:23:40:660 -- (2220) Connection from: 211.33.83.222  -  Originating country : Korea, Republic of
03/15/05 21:23:41:754 -- (2136) Connection from: 69.79.57.22  -  Originating country : Colombia
03/15/05 21:23:42:238 -- (2136) Disconnect
03/15/05 21:23:47:488 -- (2136) Connection from: 82.229.194.1  -  Originating country : France
03/15/05 21:23:47:488 -- (2220) Disconnect
03/15/05 21:23:53:956 -- (2136) Disconnect
03/15/05 21:26:37:323 -- (2136) Connection from: 202.99.125.19  -  Originating country : China
03/15/05 21:26:37:323 -- (2136) Disconnect
03/15/05 21:26:37:995 -- (2136) Connection from: 64.32.172.73  -  Originating country : United States
03/15/05 21:26:38:260 -- (2136) Disconnect
03/15/05 21:26:39:651 -- (2136) Connection from: 210.108.102.232  -  Originating country : Korea, Republic of
03/15/05 21:26:40:916 -- (2136) Disconnect
03/15/05 21:26:56:431 -- (2136) Connection from: 24.30.135.130  -  Originating country : United States
03/15/05 21:26:56:775 -- (2136) Disconnect
03/15/05 21:26:57:431 -- (2136) Connection from: 61.255.215.4  -  Originating country : Korea, Republic of
03/15/05 21:27:01:118 -- (2136) Disconnect
03/15/05 21:27:08:805 -- (2136) Connection from: 211.247.247.254  -  Originating country : Korea, Republic of
03/15/05 21:27:12:571 -- (2136) Disconnect
03/15/05 21:27:16:336 -- (2136) Connection from: 24.4.33.71  -  Originating country : United States
03/15/05 21:27:16:336 -- (2136) Disconnect
03/15/05 21:27:18:321 -- (2136) Connection from: 69.86.137.71  -  Originating country : United States
03/15/05 21:27:18:336 -- (2136) Disconnect
03/15/05 21:27:24:477 -- (2140) Connection from: 24.12.235.89  -  Originating country : United States
03/15/05 21:27:24:477 -- (2140) Disconnect
03/15/05 21:27:41:038 -- (2140) Connection from: 69.86.137.71  -  Originating country : United States
03/15/05 21:27:41:054 -- (2140) Disconnect


Replies:
Posted By: LogSat
Date Posted: 16 March 2005 at 4:01pm
At first glance they look like probes scanning your system. SpamFilter will log the fact that a connection is being disconnected for some reason. Most of the ones in your log appear to be disconnecting themselves, which is typical of probes.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Desperado
Date Posted: 16 March 2005 at 6:57pm

Here is an exaqmple of a "Probe".  I have a monitor that makes a connection and if it gets the banner, it disconnects with a "Pass" to the monitor system.  This is "Normal"

03/16/05 18:02:09:806 -- (8856) Connection from: 66.181.200.5  -  Originating country : United States
03/16/05 18:02:09:806 -- (8856) Disconnect

Regards,

 



-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com


Print Page | Close Window