I have this ongoing problem where someone is running a program that does
this:
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
<[EMAIL PROTECTED]
When we find it happening- by chance, we block the IP address.
Is there any we can stop this ie when an ip address tries to login X number
of times it gets automatically blocked, or be alerted when it is happening
so we can block it.
I am not sure what they are trying to accomplish.
Sincerely,
David Kaleky
www.FLORIDA.com
Tel: 407-647-4445
FAX: 408-907-5550
PS- Come by http://florida.com for all your Florida needs!!
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
