The company that owns the mail server, finally blocked the entire IP String. and have never seen an email from them since.
But we was getting in about atleast 25 a day from the IP String to the list.
(Not on my mail server) Might be of best interest to block the IP String.
Wayne
Howdy
I did a search for IP address 210.21.10.158 listed in your log and it
belongs to:
Query the APNIC Whois DatabaseNeed help?
General search help
Help tracking spam and hacking
% [whois.apnic.net node-1]
% How to use this server http://www.apnic.net/db/
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 210.21.10.128 - 210.21.10.191
netname: guangzhou-huifeng-tuiwu-corp
country: cn
descr: guangzhou city
admin-c: JL1058-AP
tech-c: JL1058-AP
status: ASSIGNED NON-PORTABLE
changed: [EMAIL PROTECTED] 20021010
mnt-by: MAINT-CN-LJ28
source: APNIC
person: jia li
nic-hdl: JL1058-AP
e-mail: [EMAIL PROTECTED]
address: china netcom
address: guangzhou
phone: +86-020-87324888
country: CN
changed: [EMAIL PROTECTED] 20020906
mnt-by: MAINT-CN-ZM28
source: APNIC
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
