We have someone trying to send email through our service. The logs are below. How do I block that IP address from getting access and with the logs below, which IP address do I block? 85.141.173.226 or 89.79.92.147
[85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0aef162101265d10) [89.79.92.147] EHLO alusia.chello.pl 06:27 00:00 SMTPD(0aed087701505d0e) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed087701505d0e) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0aed087701505d0e) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed087701505d0e) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0aef162101265d10) [89.79.92.147] MAIL FROM:<[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0aed11ee00d45d0f) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0af211ef00d45d11) [64.7.202.222] connect 89.139.133.234 port 4085 06:27 00:00 SMTPD(0af211f000d45d12) [64.7.202.222] connect 85.141.173.226 port 2534 06:27 00:00 SMTPD(0aef162101265d10) [89.79.92.147] RCPT TO:<[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0af211f000d45d12) [85.141.173.226] HELO fyorv 06:27 00:00 SMTPD(0af211f000d45d12) [85.141.173.226] MAIL FROM: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0af3087801505d13) [64.7.202.222] connect 213.22.68.9 port 4542 06:27 00:00 SMTPD(0af211f000d45d12) [85.141.173.226] RCPT TO: <[EMAIL PROTECTED]> 06:27 00:00 SMTPD(0af211f000d45d12) [85.141.173.226] ERR ltccw.com invalid user <[EMAIL PROTECTED] 06:27 00:00 SMTPD(0af306da00f45d14) [64.7.202.222] connect 76.100.6.86 port 12919 06:27 00:00 SMTPD(0af3141100525d15) [64.7.202.222] connect 62.123.101.18 port 10190 06:27 00:00 SMTPD(0af3087801505d13) [213.22.68.9] EHLO Cosmos.netcabo.pt 06:27 00:00 SMTPD(0af306da00f45d14) [76.100.6.86] EHLO your-d137mzmhow.hsd1.md.comcast.net. 06:27 00:00 SMTPD(0aef162101265d10) [89.79.92.147] RCPT TO:<[EMAIL PROTECTED]>
