Hello,

I am wondering what is the purpose of connections like these:

  postfix/smtpd[5147]:  connect from unknown[193.56.28.121]
  postfix/smtpd[5147]:  disconnect from unknown[193.56.28.121] ehlo=1
auth=0/1 rset=1 quit=1 commands=3/4

I have lots of these in my logs, from different IP addresses.

What is the goal of these agents ? I mean, they don't try to do
anything. They don't try to deliver spam, they don't try to use my
postfix as relay. They just connect and disconnect.

What are they after ?

I am just curious.

Also, judging by the fact that IP does not resolve to hostname, I assume
these are not mail servers. Are these just some bots that are scanning
the Internet for mailservers ?

thanks,

Reply via email to