Port 25 connection refused

Hi Greg,

Yes, the IP address is the local IP address of my EC2 instance. So does this imply it's probably not a bot?

Yeah, that does make it seem less likely. The next two primary possibilities are: 1) The site configuration is not working correctly and CMSB is attempting to send out on port 25, 2) there's something elsewhere attempting to send contrary to the CMSB settings, such as a custom script, or hosting panel alerts as Steve99 mentioned.

Are you able to receive any email from your site? E.g. you mentioned that it's set up to notify you about error messages - do you receive these? You can also set the Outgoing Mail setting to "Send & Log" and check the Outgoing Mail log to see if there are any emails going out that you were unaware of. If CMSB is able to successfully send mail, then that generally rules out #1.

If it looks like #2, you'll have to decide whether further troubleshooting is worth the hassle, as it's a bit of an open-ended question. Unknown local SMTP connections could be anything from "hijacked script trying to send spam" to "server notification service", though I'd lean towards the latter. Since it's being blocked, there's not much ongoing harm either way. It may be worth researching how to parse your email log to see if you can glean any more details, such as to/from address, though if the connection is being rejected outright it may not record anything like that.

Let me know if you're able to make any progress, or have any more questions! This may be getting outside the realm of CMSB support, but I will still try to assist as I'm able.

Thanks,