North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: anti-spam vs network abuse

  • From: Roger Marquis
  • Date: Fri Feb 28 18:34:14 2003

> As a result the ISP must either A) purchase more RAM, faster CPUs,
> and additional servers, or B) run the risk of complaints and lost
> customer goodwill.  All of this costs time and money.

Looks like both a netscan and a portscan, and clearly not designed
to limit damages to innocent third parties.  Come on njabl.org,
this isn't rocket science.  Turn down that scan rate by a factor
of at least 50, please.

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/


  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:21 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:24 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:16:30 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55571
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55572
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:55573
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:55574
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55575
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55576
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55577
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55578
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55579
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55580
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55581
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55583
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55584
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:55585
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:55586
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:55587
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:55588
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:55589
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:55590
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:55591
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:55594
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:55592
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:55593
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:55595
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:55596
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:55597
  15:16:42 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:55599
  15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:55600
  15:16:43 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:55601
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:10 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:11 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:13 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:14 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:19 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:20 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57091
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57092
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1080 from 209.208.0.15:57093
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57095
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1180 from 209.208.0.15:57094
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57096
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57097
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57098
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57099
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57100
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57101
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57103
  15:17:31 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57104
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:7033 from 209.208.0.15:57105
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8085 from 209.208.0.15:57106
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8095 from 209.208.0.15:57107
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8100 from 209.208.0.15:57108
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8110 from 209.208.0.15:57110
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8105 from 209.208.0.15:57109
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:80 from 209.208.0.15:57111
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:81 from 209.208.0.15:57112
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:4480 from 209.208.0.15:57115
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1182 from 209.208.0.15:57113
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:3128 from 209.208.0.15:57114
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:6588 from 209.208.0.15:57116
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8000 from 209.208.0.15:57117
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8081 from 209.208.0.15:57119
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:8090 from 209.208.0.15:57120
  15:17:32 PST Connection attempt to TCP IP.IP.IP.IP:1181 from 209.208.0.15:57121
  15:17:40 PST Connection attempt to TCP IP.IP.IP.IP:25 from 209.208.0.15:57753
  15:16:51 PST postfix/smtpd[94021]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94021]: lost connection after CONNECT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94021]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94026]: connect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:51 PST postfix/smtpd[94026]: E3914DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:52 PST postfix/smtpd[94026]: E3914DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:53 PST postfix/smtpd[94026]: 71C6ADAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:54 PST postfix/smtpd[94026]: B4DD5DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <[email protected]>: Relay access denied; from=<[email protected]@victim.com> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:56 PST postfix/smtpd[94026]: 0492BDAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 504 <relaytestsend>: Sender address rejected: need fully-qualified address; from=<relaytestsend> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:57 PST postfix/smtpd[94026]: 47B66DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 450 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:58 PST postfix/smtpd[94026]: 8B9C9DAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <[email protected]>: Relay access denied; from=<> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: client=before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:16:59 PST postfix/smtpd[94026]: CDA4EDAD3D: reject: RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]: 554 <[email protected]>: Relay access denied; from=<[email protected][IP.IP.IP.IP]> to=<[email protected]> proto=ESMTP helo=<rt.njabl.org>
  15:17:09 PST postfix/smtpd[94026]: too many errors after RCPT from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
  15:17:09 PST postfix/smtpd[94026]: disconnect from before-reporting-as-abuse-please-see-www.njabl.org[209.208.0.15]
 ...