Looks to me like someone with a couple of server farms tried to use you
as a relay.
Did you check other activity in your logs from those ips? You may have
something on your box open.
On Jan 2, 2004, at 1:45 PM, George wrote:
> Was this an attack? It certainly froze up my computer. (OSX Server)
>
>
> From midnight until 7:45 am (that is when I restarted my server) all
> I have in my logs are lines that look like this:
>
> 2004-01-02 04:18:29 Connection from 12.129.205.75 refused: too many
> connections
> 2004-01-02 04:18:36 Connection from 66.77.108.70 refused: too many
> connections
> 2004-01-02 04:18:49 Connection from 64.156.187.155 refused: too many
> connections
> 2004-01-02 04:18:51 Connection from 66.55.169.93 refused: too many
> connections
> 2004-01-02 04:19:35 Connection from 12.129.205.83 refused: too many
> connections
> 2004-01-02 04:20:00 Connection from 64.253.206.210 refused: too many
> connections
> 2004-01-02 04:20:51 Connection from 66.55.169.93 refused: too many
> connections
> 2004-01-02 04:20:54 Connection from 205.188.157.40 refused: too many
> connections
> 2004-01-02 04:21:13 Connection from 66.63.169.46 refused: too many
> connections
>
>
> or look at this section where the ip is obviously from the same
> place...
>
> 2004-01-02 04:22:34 Connection from 209.216.53.147 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.146 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.145 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.144 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.143 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.142 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.141 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.140 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.139 refused: too many
> connections
> 2004-01-02 04:22:34 Connection from 209.216.53.138 refused: too many
> connections
>
>
> http://maxo.captainnet.net/exim_main.txt
>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users
> Exim details at http://www.exim.org/ ##
>
