Re: [Exim] was this an attack?

Top Page
Delete this message
Reply to this message
Author: George
Date:  
To: exim-users
Subject: Re: [Exim] was this an attack?
>At 10:45 am -0800 2004/01/02, George wrote:
>>Was this an attack? It certainly froze up my computer. (OSX Server)
>
>what do you mean by "froze up"?


At 7:45 restart Exim started working again. Was Exim stuck in the
"too many connections" mode and refused everything?


>
>[...]
>>or look at this section where the ip is obviously from the same place...
>>
>>2004-01-02 04:22:34 Connection from 209.216.53.147 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.146 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.145 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.144 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.143 refused: too many
>>
>
>for these IPs I would contact:
>
>OrgAbuseHandle: XCNV-ARIN
>OrgAbuseName: XO Communications, Network Violations
>OrgAbusePhone: +1-866-285-6208
>OrgAbuseEmail: abuse@???



If you glance over my log (http://maxo.captainnet.net/exim_main.txt)
you'll see dozens of series of ip's . Does that mean you would report
all to their respective abuse department? XO or Comcast for example
does not give a hoot about any report.


>Giuliano
>--
>H U M P H
>    || |||
>  software

>
>Java & C++ Server/Client/Human Interface applications on MacOS - MacOS X
>http://www.humph.com/
>
>--
>
>## List details at http://www.exim.org/mailman/listinfo/exim-users
>Exim details at http://www.exim.org/ ##