Flood here too, but IMGate stops them cold -- put "oldartero.com" in an SMTP header filter and HELO filter and your iMail server will never even know it's happening.
Jeff Hitchcock - [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Gordon Sent: Monday, November 13, 2006 9:43 AM To: [email protected] Subject: [IMail Forum] Zomibe bots Hey Everyone... I have seen this constantly in my logs for days now. I can start including the IP's in my block list but they are all over the board. Have any of you seen this pattern and if so, can you give me some advice on what it is and the best way to stop it? Here is a log segment... 20061113 091747 127.0.0.1 SMTPD (7e8ba54000bea330) [88.154.146.126] EHLO |http://mail.oldartero.com:8889/cgi-bin/put 20061113 091752 127.0.0.1 SMTPD (7e90800a011ea346) [88.154.193.252] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 091800 127.0.0.1 SMTPD (7e98d92c0042a36e) [88.153.32.76] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 091802 127.0.0.1 SMTPD (7e9ad92d0042a374) [207.30.225.10] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 091833 127.0.0.1 SMTPD (7eb56b580118a3cc) [41.242.166.67] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 091911 127.0.0.1 SMTPD (7edfc81000b2a44c) [84.37.18.121] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 092017 127.0.0.1 SMTPD (7f214114005ca4f1) [81.252.9.150] EHLO |http://mail.oldartero.com:8889/cgi-bin/put 20061113 092041 127.0.0.1 SMTPD (7f39ed400064a539) [84.244.73.130] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 092246 127.0.0.1 SMTPD (7fb5ed540064a73e) [81.211.54.218] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 092423 127.0.0.1 SMTPD (8017abbf0048a87a) [87.126.122.49] EHLO |http://mail.oldartero.com:8889/cgi-bin/put 20061113 092450 127.0.0.1 SMTPD (8032fc2b002ca8d7) [86.212.151.249] EHLO |http://mail.oldartero.com:8889/cgi-bin/put 20061113 092553 127.0.0.1 SMTPD (80716e4700bca9ae) [24.241.5.155] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093221 127.0.0.1 SMTPD (81f55569012cae9c) [81.5.6.24] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093512 127.0.0.1 SMTPD (82a03c2300b4b093) [87.126.206.254] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093524 127.0.0.1 SMTPD (82ac5d1f00f2b0be) [85.207.11.86] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093527 127.0.0.1 SMTPD (82af5d2200f2b0c6) [84.94.30.211] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093604 127.0.0.1 SMTPD (82d426230060b135) [88.146.167.108] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093651 127.0.0.1 SMTPD (83035d2d00f2b1ce) [192.191.254.58] EHLO http://mail.oldartero.com:8888/cgi-bin/put 20061113 093802 127.0.0.1 SMTPD (8349950000b0b2ac) [89.0.23.100] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093831 127.0.0.1 SMTPD (83676bf2010eb30f) [88.153.54.189] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093905 127.0.0.1 SMTPD (83896e6c010cb371) [89.0.235.219] EHLO |http://mail.oldartero.com:8889/cgi-bin/put 20061113 093907 127.0.0.1 SMTPD (838a6cfd0134b378) [85.204.150.49] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 093946 127.0.0.1 SMTPD (83b27ea400c2b419) [195.91.199.219] EHLO |http://mail.oldartero.com:8888/cgi-bin/put 20061113 094033 127.0.0.1 SMTPD (83e16e77010cb48c) [212.50.8.10] EHLO |http://mail.oldartero.com:8888/cgi-bin/put To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
