Need more of the logs. If this mail is actually going out, then you need to find out which account has been compromised. If they are sending out mail and you are set to no mail relay then there is an account that has a password that was cracked.
Travis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of dkaleky Sent: Saturday, January 21, 2006 5:55 PM To: [email protected] Subject: [IMail Forum] Need logs deciphered We are set to no relay and our ip address is 209.208.92.70 Whats going on w/ ip 85.182.50.86 ? 01:20 07:43 SMTP-(daf8009900004eed) finished d:\IMAIL\spool\Qdaf8009900004eed.SMD status=1 01:20 07:44 SMTPD(db3d009200004eef) [209.208.92.70] connect 85.182.50.86 port 3967 01:20 07:44 SMTPD(db3d07e900004ef0) [209.208.92.70] connect 85.182.50.86 port 3968 01:20 07:44 SMTPD(db3d07e200004ef1) [209.208.92.70] connect 85.182.50.86 port 3969 01:20 07:44 SMTPD(db3d009900004ef2) [209.208.92.70] connect 85.182.50.86 port 3970 01:20 07:44 SMTPD(db3d00a100004ef3) [209.208.92.70] connect 85.182.50.86 port 3971 01:20 07:44 SMTPD(db3d009200004eef) [85.182.50.86] EHLO rudy.u61da.ameritech.net 01:20 07:44 SMTPD(db3d07e900004ef0) [85.182.50.86] EHLO irivd.37neej35.rr.com 01:20 07:44 SMTPD(db3d009200004eef) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:44 SMTPD(db3d07e900004ef0) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:44 SMTPD(db3d07e200004ef1) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L.habf7b.org 01:20 07:45 SMTPD(db3d07e200004ef1) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:45 SMTPD(db5c009200004ef4) [209.208.92.70] connect 85.182.50.86 port 4080 01:20 07:45 SMTPD(db5c07e900004ef5) [209.208.92.70] connect 85.182.50.86 port 4082 01:20 07:45 SMTPD(db5c009900004ef6) [209.208.92.70] connect 85.182.50.86 port 4084 01:20 07:45 SMTPD(db5c00a100004ef7) [209.208.92.70] connect 85.182.50.86 port 4086 01:20 07:45 SMTPD(db5c009200004ef4) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L 01:20 07:45 SMTPD(db5c07e900004ef5) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L 01:20 07:45 SMTPD(db5c009200004ef4) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:45 SMTPD(db5c07e900004ef5) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:45 SMTPD(db6800a700004ef8) [209.208.92.70] connect 209.208.92.70 port 4533 01:20 07:45 SMTPD(db7700a700004ef9) [209.208.92.70] connect 85.182.50.86 port 4193 01:20 07:45 SMTPD(db7700a700004ef9) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L 01:20 07:45 SMTPD(db7700a700004ef9) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:45 SMTPD(db7907e200004efa) [209.208.92.70] connect 85.182.50.86 port 4204 01:20 07:45 SMTPD(db79009900004efb) [209.208.92.70] connect 85.182.50.86 port 4206 01:20 07:45 SMTPD(db7a00a100004efc) [209.208.92.70] connect 85.182.50.86 port 4208 01:20 07:45 SMTPD(db7a009200004efd) [209.208.92.70] connect 85.182.50.86 port 4209 01:20 07:45 SMTPD(db7a00a100004efc) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L.uo2uzfry.net 01:20 07:45 SMTPD(db7a009200004efd) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L.hgj6abx.net 01:20 07:45 SMTPD(db7a00a100004efc) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:45 SMTPD(db7a009200004efd) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:46 SMTPD(db7907e200004efa) [85.182.50.86] EHLO arynuo.cfae.ameritech.net 01:20 07:46 SMTPD(db7907e200004efa) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:46 SMTPD(db79009900004efb) [85.182.50.86] EHLO 94a1a.toefoeea.cox.net 01:20 07:46 SMTPD(db79009900004efb) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> 01:20 07:46 SMTPD(dba007e900004efe) [209.208.92.70] connect 85.182.50.86 port 4345 01:20 07:46 SMTPD(dba000a700004eff) [209.208.92.70] connect 85.182.50.86 port 4363 01:20 07:46 SMTPD(dba000a100004f00) [209.208.92.70] connect 85.182.50.86 port 4365 01:20 07:46 SMTPD(dba000a700004eff) [85.182.50.86] EHLO BOCKI-YMZ85PJ0L.ieu5ef.org 01:20 07:46 SMTPD(dba000a100004f00) [85.182.50.86] EHLO e3g86i.emmi9ie.verizon.net 01:20 07:46 SMTPD(dba000a700004eff) [85.182.50.86] MAIL FROM: <[EMAIL PROTECTED]> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
