<div>
Sounds like someone is trying to perform some sort of denial of service attack. It sounds like Exchange is your first hop. Do you have any kind of message hygiene software, appliance or cloud service in front of your Exchange server? If not, I'd recommend it.
</div>


Sounds like someone is trying to perform some sort of denial of service attack. It sounds like Exchange is your first hop. Do you have any kind of message hygiene software, appliance or cloud service in front of your Exchange server? If not, I'd recommend it.

<div>
Thanks Gareth. We currently do not have a service in front of our email server apart from our corporate firewall. Am looking at some security for email security etc. Is there something I can do hardware the server in the meanwhile? They seem to be connecting on port 25.
</div>


Thanks Gareth. We currently do not have a service in front of our email server apart from our corporate firewall. Am looking at some security for email security etc. Is there something I can do hardware the server in the meanwhile? They seem to be connecting on port 25.

<div>
<div class="content wysiwyg-content">
Hi.<br />
I am getting the following warning in my exchange 2013 error logs:<br />
<br />
<i>Receive connector Internet Connector HFC-EKHAT rejected an incoming <br />
connection from IP address 1xx.2xx.1xx.1xx. <br />
The maximum number of connections per source (20) <br />
for this connector has been reached by this source IP address.</i><br />
<br />
This appears constantly in the logs. &nbsp;This is incoming from a country that we don't usually send or receive mails from often. <br />
<br />
Is this normal or could this point to something more sinister?<br />
<br />
Thanks.
</div>
</div>


Hi.
I am getting the following warning in my exchange 2013 error logs:

Receive connector Internet Connector HFC-EKHAT rejected an incoming 
connection from IP address 1xx.2xx.1xx.1xx. 
The maximum number of connections per source (20) 
for this connector has been reached by this source IP address.

This appears constantly in the logs.  This is incoming from a country that we don't usually send or receive mails from often. 

Is this normal or could this point to something more sinister?

Thanks.

exchange 2013 receive connector reject

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Within Internet message handling services (MHS), a message transfer agent or mail transfer agent (MTA) or mail relay is software that transfers electronic mail messages from one computer to another using a client–server application architecture. A MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol (SMTP). The terms mail server, mail exchanger, and MX host may also refer to a computer performing the MTA function. The Domain Name System (DNS) associates a mail server to a domain with mail exchanger (MX) resource records containing the domain name of a host providing MTA services.