No Data Received error |
Post Reply 
|
| Author | |
meatboy 
Newbie 
Joined: 26 June 2006 Status: Offline Points: 18 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: No Data Received errorPosted: 25 June 2014 at 7:46pm |
|
Hi,
We are running Spamfilter v4.5.1.98. I am continually, (maybe on every 20 seconds) receiving this entry below in the log. I've tried SF-ISP on another PC in our network and am getting the same message. IP 192.168.1.104 is the address that SF-ISP is running on. ------------- 06/26/14 07:29:25:163 -- (52922384) Detected TCP Connection: 192.168.1.104 06/26/14 07:29:25:178 -- (52922384) Connection from: 192.168.1.104 - Originating country : N/A 06/26/14 07:29:25:288 -- (52922384) No Data Received 06/26/14 07:29:25:303 -- (52922384) Disconnect ------------- Any ideas what is happening here? or how to find out? I am concerned there is some rogue software on our network but we have done a sweep of all PCs. If I look in Country: N/A there is a large count. I would add to this that email is being delivered and spam quarantined while this is going on. Thanks Edited by meatboy - 25 June 2014 at 8:44pm |
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 25 June 2014 at 9:20pm |
|
The logs indicate that the IP 192.168.1.104 (a private IP within your network - not a public IP on the internet) is probing port 25 on your SpamFilter server to see if it's open. It not sending any emails, as the line with the "No Data Received" indicates, rather it's just checking to see if the SMTP port is open.
If the interval is fairly regular, it's likely this is being done by an application within your network that is performing a monitoring/scanning of the network to see what servers are up and what services they are running. Applications like Solar Winds, NetIQ or IP Monitor are some of the ones that come to mind. As a side-note, private IPs in the ranges: 10.0.0.0 - 10.255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192.168.255.255 will show up in SpamFilter with a country code of "N/A" as they are not public IP addresses, and thus they cannot be matched to any country. |
|
|
|
|
meatboy
Newbie
Joined: 26 June 2006 Status: Offline Points: 18 |
Post Options
Thanks(0)
Quote Reply
Posted: 26 June 2014 at 1:54am |
|
Thanks for the info Roberto, I now have a challenge to find out who, what or where its coming from.
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.117 seconds.