I am trying to determine what kind of traffic this is: 22:09:42 66.196.82.7 - - 0 22:09:42 66.196.82.7 EHLO - 0 22:09:42 66.196.82.7 - - 0 22:09:42 66.196.82.7 MAIL - 0 22:09:42 66.196.82.7 - - 0 22:09:42 66.196.82.7 RCPT - 0 22:09:42 66.196.82.7 - - 0 22:09:42 66.196.82.7 DATA - 0 22:09:42 66.196.82.7 - - 0 22:09:45 66.196.82.7 - - 0 22:09:45 66.196.82.7 QUIT - 0 22:09:45 66.196.82.7 - - 0 This was a test message from another server that looks completely differant: 22:09:14 68.15.88.200 EHLO - 250 22:09:14 68.15.88.200 MAIL - 250 22:09:21 68.15.88.200 RCPT - 250 22:09:21 68.15.88.200 DATA - 250 22:09:21 68.15.88.200 QUIT - 240 Are the logs just from a differant type of server or is this from SPAMMER or attacker TIA, Steve