I've noticed a LOT of entries like the following in my SMTP logs. Anyone
else seen similar?

01:21 11:12 SMTPD(1DF7010E) [200.181.163.2] MAIL From: <[EMAIL PROTECTED]>
01:21 11:12 SMTPD(1DF7010E) [200.181.163.2] RCPT To:<[EMAIL PROTECTED]>
01:21 11:12 SMTPD(1DF7010E) [200.181.163.2] ERR mail.2khiway.net invalid
user <[EMAIL PROTECTED]

continues for about 20 addresses, for about a minute, spread out over the
day.

The JOHN@ is common in all these attempts, the name after changes each time,
as does the IP. It's a pain in the butt to put it lightly, you'ld think he'd
get tired of rejection, but he must not. How do you guys handle this stuff?
I list the IPs from foreign servers <mostly China> in the control access,
but since he changes all the time, I don't know how effective that will be.
I've contacted the few US servers but don't expect anything to come of that
either.

Ideas? Suggestions?

Paul


---
[This E-mail scanned for viruses by Declude Virus]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to