>I would not be surprised if all (or at least many) of those IP addresses >are actually open relays. The actual harvesting program need not >directly >contact your mail server as long as it gets the reject messages relayed >back.
In which case an RBL might shut them down quite nicely. As for the two that were posted though, Osirusoft's hits are: (127.0.0.2) 216.153.153.186 is DNSbl listed. by spamguard.leadmon.net Dial-Up/Cable/DSL IP Range - Use your providers SMTP Gateway[http://www.leadmon.net/spamguard/] (127.0.0.9) 61.188.250.8 is DNSbl listed. by relays.osirusoft.com (2002/06/04) Open Proxy: socks v5(1080) socks v4(1080) http(8080) (127.0.0.2) 61.188.250.8 is DNSbl listed. by orbs.dorkslayers.com 61.188.250.8 is listed by dorkslayers.com (127.0.0.2) 61.188.250.8 is DNSbl listed. by bl.spamcop.net Blocked - see http://spamcop.net/bl.shtml?61.188.250.8 (127.0.0.2) 61.188.250.8 is DNSbl listed. by blackholes.five-ten-sg.com added 2001-04-19; china does not seem to care about spam (127.0.0.2) 61.188.250.8 is DNSbl listed. by blackholes.wirehub.net Blacklisted temporarily by Wirehub! Internet DNSBL - http://doema.wirehub.nl/error/errors.html#blackholes (127.0.0.2) 61.188.250.8 is DNSbl listed. by bl.reynolds.net.au 61.188.250.8/32 is a Open Wingate Proxy Server (127.0.0.1) 61.188.250.8 is DNSbl listed. by proxies.relays.monkeys.com BLOCKED: See http://www.monkeys.com/anti-spam/filtering/proxies.html ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
