I am being hit by a spammer doing a simple dictionary attack. I spotted him in my logs about a week ago and blacklisted him, but he won't go away (of course):
01:35:56 1 SMTP-009([68.15.153.169]) SPAM? Host is in the Blacklist, "You are running a dictionary attack go away"
01:35:57 1 SMTP-009([68.15.153.169]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "You are running a dictionary attack go away"
01:35:57 1 SMTP-010([68.15.153.169]) SPAM? Host is in the Blacklist, "You are running a dictionary attack go away"
01:35:57 1 SMTP-010([68.15.153.169]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "You are running a dictionary attack go away"
01:35:58 1 SMTP-011([68.15.153.169]) SPAM? Host is in the Blacklist, "You are running a dictionary attack go away"
01:35:58 1 SMTP-011([68.15.153.169]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "You are running a dictionary attack go away"
01:35:58 1 SMTP-012([68.15.153.169]) SPAM? Host is in the Blacklist, "You are running a dictionary attack go away"
01:35:59 1 SMTP-012([68.15.153.169]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "You are running a dictionary attack go away"
01:37:28 3 SYSTEM The current date is Saturday, February 7, 2004
I'm getting 200-300 of these hits a day. I can handle it but I'd like to complain to the ISP. What Mac tools are best for finding the responsible party?
Peter
------------ Peter E Jones Peter (at) thejonesfamily.org
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
