I'd like to second that query.
I get new ones every 20 seconds or so. As far as I can tell from Googling somebody (in Per's case: 64.146.105.180) is trying to establish an SMTP connection to a mailserver (65.54.253.230) through Apache.
There are corresponding "Lame server" entries in the message log. One every 20 secs.
My "attacks" are rotated:
www.faithful.dk 170.215.248.147 - - [12/Dec/2002:11:59:55 +0100] "CONNECT mailin-03.mx.aol.com:25 HTTP/1.0" 200 43491 "-" "-"
www.faithful.dk 170.215.248.147 - - [12/Dec/2002:12:00:15 +0100] "CONNECT mx2.hotmail.com:25 HTTP/1.0" 200 43491 "-" "-"
www.faithful.dk 170.215.248.147 - - [12/Dec/2002:12:00:35 +0100] "CONNECT smtp-gw-4.msn.com:25 HTTP/1.0" 200 43491 "-" "-"
www.faithful.dk 170.215.248.147 - - [12/Dec/2002:12:00:55 +0100] "CONNECT mx4.mail.yahoo.com:25 HTTP/1.0" 200 3765 "-" "-"
Looks like somebody wants to overwhelm aol, hotmail, msn, and yahoo? (I assume they are using more than my server).
Cheers,
Jens