I am curious if anybody else has seen this.  I have a customer that
subscribed to spamrival.  He wanted to combat spam.  I understand that, but
spamrival logs in to his account about every 20 seconds.  I feel that is a
very high number.  I have thought about blocking the IP address, but I don't
want to just make the guy overly upset.  I am looking for anybody's thoughts
on what they would consider excessive.  Maybe I am being a little crazy, I
am tired of the log filling up - LOL.

 

Here is a snippet from the logs:

 

Feb 27 20:27:39 mail vpopmail[8218]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:27:59 mail vpopmail[8226]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:28:20 mail vpopmail[8229]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:28:39 mail vpopmail[8232]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:28:56 mail vpopmail[8237]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:29:15 mail vpopmail[8242]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:29:33 mail vpopmail[8245]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:29:49 mail vpopmail[8250]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Feb 27 20:30:17 mail vpopmail[8331]: vchkpw-pop3: (PLAIN) login success
v...@magicwisp.com:63.131.139.146

Reply via email to