Hello, I am wondering what is the purpose of connections like these:
postfix/smtpd[5147]: connect from unknown[193.56.28.121] postfix/smtpd[5147]: disconnect from unknown[193.56.28.121] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 I have lots of these in my logs, from different IP addresses. What is the goal of these agents ? I mean, they don't try to do anything. They don't try to deliver spam, they don't try to use my postfix as relay. They just connect and disconnect. What are they after ? I am just curious. Also, judging by the fact that IP does not resolve to hostname, I assume these are not mail servers. Are these just some bots that are scanning the Internet for mailservers ? thanks,