This is your standard dictionary attack. It would appear as if someone is abusing mx.interworld.net to send out these messages. If you are looking to block them just add their IP address.
Darrell ------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. ----- Original Message ----- From: "Internet Relations" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Thursday, February 17, 2005 9:24 PM Subject: [IMail Forum] help with header IPs > Can someone explain to me what in the world went on with this header? This > guy evidently scanned the Imail server and got all the addresses below. > Which IP's / IP should be blocked? Looks like a relay of some sort? > > Thanks, > Bryan > > > Received: from mx.interworld.net [207.151.152.2] by mail.fitscape.com with > ESMTP > (SMTPD32-7.07) id AEFB41600A4; Thu, 17 Feb 2005 18:12:11 -0800 > Received: from 97.Red-83-36-16.pooles.rima-tde.net > (97.Red-83-36-16.pooles.rima-tde.net [83.36.16.97]) > by mx.interworld.net (8.12.11/8.12.8) with SMTP id j1I25ebt026304; > Thu, 17 Feb 2005 18:05:42 -0800 (PST) > Received: from covariant. despicable.harelip.volstead.es ([38.56.247.130] > helo=lamp.mail.desty.org) > by smtp1.desty.org with esmtp > id 6A526j-0491FN-00; Fri, 18 Feb 2005 03:02:42 +0100 > Message-Id: <[EMAIL PROTECTED]> > Sender: [EMAIL PROTECTED] > Date: Fri, 18 Feb 2005 08:02:42 +0600 > In-Reply-To: Your message of "Fri, 18 Feb 2005 08:01:42 +0600." > <[EMAIL PROTECTED]> > From: "Jamal Massey" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED] > Subject: Woww..8o-% 0ff Alfred > X-mxGuard-Info: Processed by mail.fitscape.com using mxGuard v1.6.1 > X-mxGuard-Spool-ID: 4efb041600a40706 > X-mxGuard-Sender: [EMAIL PROTECTED] > X-mxGuard-Native-PTR: Failed lookup [38.56.247.130] > X-mxGuard-Native-RelayCount: 3 > X-mxGuard-Spam-Score: 16 > X-mxGuard-Spam-Threshold: LEVEL10 > X-mxGuard-Spam-Probability: LOW > X-RCPT-TO: <[EMAIL PROTECTED]> > Status: U > X-UIDL: 293889112 > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
