Analysis
of the webserver log, where I encountered the CONNECT attempts, showed it as been tried for some time, but then ceased. The last weird access was on 04-Dec-2006:
209.104.198.4 – – [04/Dec/2006:06:34:10 +0100] “- -” 0 0
and just one address retried to CONNECT to it’s own mailaddress, one a 30 minutes or so, and that was found to fail time after time again, starting on 08-Dec-2006 around midnight:
66.185.126.163 – – [08/Dec/2006:00:40:46 +0100] “CONNECT 66.185.126.163:25 HTTP/1.0” 403 860
trying it each 30 minutes or so, until the last attempt some hours later:
66.185.126.163 – – [08/Dec/2006:08:45:29 +0100] “CONNECT 66.185.126.163:25 HTTP/1.0” 403 860
I checked the log of a week later – and that shown no more attempts.