I've attached a small snippet of our log file. My question is... is this a spam attempt? Our log file size hasn't significantly increased but we have seen the same entries for a couple days. It attempts to send to multiple ips on the imail box without success. By the way, the ip address for jdedwards.com is 208.249.49.37 when checking whois, NOT 63.69.25.118 as displayed in the log file. Thanks for you help! Craig
07:29 21:45 SMTPD(121402A4) [209.149.46.171] connect 63.69.25.118 port 3555 07:29 21:45 SMTPD(121402A4) [63.69.25.118] HELO JONSTP 07:29 21:45 SMTPD(121402A4) [63.69.25.118] MAIL FROM: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121402A4) [63.69.25.118] RCPT TO: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121402A4) [63.69.25.118] ERR mail.dashsystems.com invalid user <[EMAIL PROTECTED] 07:29 21:45 SMTPD(121502A4) [209.149.46.174] connect 63.69.25.118 port 3556 07:29 21:45 SMTPD(121502A4) [63.69.25.118] HELO JONSTP 07:29 21:45 SMTPD(121502A4) [63.69.25.118] MAIL FROM: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121502A4) [63.69.25.118] RCPT TO: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121502A4) [63.69.25.118] ERR mail.dashsystems.com invalid user <[EMAIL PROTECTED] 07:29 21:45 SMTPD(121602A4) [209.149.46.175] connect 63.69.25.118 port 3557 07:29 21:45 SMTPD(121602A4) [63.69.25.118] HELO JONSTP 07:29 21:45 SMTPD(121602A4) [63.69.25.118] MAIL FROM: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121602A4) [63.69.25.118] RCPT TO: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121602A4) [63.69.25.118] ERR mail.dashsystems.com invalid user <[EMAIL PROTECTED] 07:29 21:45 SMTPD(121702A4) [209.149.46.172] connect 63.69.25.118 port 3559 07:29 21:45 SMTPD(121702A4) [63.69.25.118] HELO JONSTP 07:29 21:45 SMTPD(121702A4) [63.69.25.118] MAIL FROM: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121702A4) [63.69.25.118] RCPT TO: <[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121702A4) [63.69.25.118] ERR mail.dashsystems.com invalid user <[EMAIL PROTECTED] 07:29 21:45 SMTPD(121802A4) [209.149.46.171] connect 209.149.46.173 port 2615 07:29 21:45 SMTPD(121802A4) [209.149.46.173] HELO homer 07:29 21:45 SMTPD(121802A4) [209.149.46.173] MAIL FROM:<[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121802A4) [209.149.46.173] RCPT TO:<[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121802A4) [209.149.46.173] RCPT TO:<[EMAIL PROTECTED]> 07:29 21:45 SMTPD(121802A4) [209.149.46.173] D:\IMAIL\spool\D03c92a4.SMD 748
