1. Forum
  2. DOVE-Net
  3. Synchronet Discussion

  • smtp question

    From KnightMare@VERT/TELEGRAP to Rixter on Sat Aug 17 13:17:56 2024
    Re: smtp question
    By: Rixter to all on Wed Aug 14 2024 04:39 pm

    I have two ip's attempting to use my smtp server every 2 minutes. 80.94.95.209 attempting send mail to guy@synchro.net and 80.94.95.248 attempting to send mail to shop@synchro.net I finally banned their ips in
    [Cut to save space...]

    Could it be your provider just doing a port scan?

    ---
    þ Synchronet þ Telegraph BBS - Fayette Co, OH USA
  • From Rixter@VERT/RICKSBBS to KnightMare on Sat Aug 17 17:12:32 2024
    Re: smtp question
    By: Rixter to all on Wed Aug 14 2024 04:39 pm

    [Cut to save space...]

    Could it be your provider just doing a port scan?
    I used ip lookup and it was traced back to England. Each time I unblock the ip it starts trying to send mail to my bbs using bad recipients.
    ---
    � Synchronet � Telegraph BBS - Fayette Co, OH USA

    ---
    ï¿­ Synchronet ï¿­ Ricks BBS - RICKSBBS.SYNCHRO.NET
  • From Rampage@VERT/SESTAR to Rixter on Sun Aug 18 12:20:37 2024
    Re: smtp question
    By: Rixter to all on Wed Aug 14 2024 16:39:28

    I have two ip's attempting to use my smtp server every 2 minutes. 80.94.95.209 attempting send mail to guy@synchro.net and 80.94.95.248 attempting to send mail to shop@synchro.net I finally banned their
    ips in the silent list. Is this a good procedure. It goes on all day
    and nite unless I do. Does this happen to anyone else? Thank you and
    have a good day.

    block that entire subnet...it is a hosting site and if they have one bad client, they're likely to have others, too...

    80.94.95.0/24

    FWIW: plug those IPs into uncle google and take a look at the results...


    )\/(ark

    ---
    þ Synchronet þ The SouthEast Star Mail HUB - SESTAR
  • From Rampage@VERT/SESTAR to KnightMare on Sun Aug 18 12:25:21 2024
    Re: smtp question
    By: KnightMare to Rixter on Sat Aug 17 2024 08:17:56

    I have two ip's attempting to use my smtp server every 2
    minutes. 80.94.95.209 attempting send mail to guy@synchro.net
    and 80.94.95.248 attempting to send mail to shop@synchro.net
    I finally banned
    their ips in
    [Cut to save space...]

    Could it be your provider just doing a port scan?

    portscans do not involved trying to send email to @synchro.net
    addresses ;)



    )\/(ark

    ---
    þ Synchronet þ The SouthEast Star Mail HUB - SESTAR
  • From Dumas Walker@VERT/CAPCITY2 to RIXTER on Sun Aug 18 14:37:00 2024
    I have two ip's attempting to use my smtp server every 2 minutes. 80.94.95.209 attempting send mail to guy@synchro.net and 80.94.95.248 attempting to send mail to shop@synchro.net I finally banned their ips in

    Those IPAs belong to "Unmanaged, LTD," which appears to be linked to Bunea Telecom. If they are giving you grief, I'd see no issue adding them to the ip-silent.can file.


    * SLMR 2.1a * A problem can be found for almost every solution.
    ---
    þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
  • From Rixter@VERT/RICKSBBS to Dumas Walker on Sun Aug 18 20:10:31 2024
    Those IPAs belong to "Unmanaged, LTD," which appears to be linked to Bunea Telecom. If they are giving you grief, I'd see no issue adding them to the ip-silent.can file.

    * SLMR 2.1a * A problem can be found for almost every solution.
    ---
    � Synchronet � CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP


    thanks! I did. thank you all.

    ---
    ï¿­ Synchronet ï¿­ Ricks BBS - RICKSBBS.SYNCHRO.NET