<http://openrbl.org/ip/68/15/153/169.htm>

Not sure if it is the best but it works.

Also <http://www.spamcop.net/> is good.

You might want to accept some of the spam so you have something for the ISP.

Lookup 68.15.153.169 (wsip-68-15-153-169.hr.hr.cox.net) in 20+11 Zones
�AS: 68.15.128.0/19 AS22773 Cox Communications, Inc. Atlanta Atlanta/Georgia
�Net 68.15.128-159 HRCBSHFC-68-15-128-0 Lake Hearn Drive, Georgia @cox.net


Michael


On Saturday, February 7, 2004, at 08:08 AM, Peter Jones wrote:


Ladies and gents:

I am being hit by a spammer doing a simple dictionary attack. I spotted him in my logs about a week ago and blacklisted him, but he won't go away (of course):

01:35:56 1 SMTP-009([68.15.153.169]) SPAM? Host is in the Blacklist, "You are running a dictionary attack go away"
01:35:57 1 SMTP-009([68.15.153.169]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "You are running a dictionary attack go away"


I'm getting 200-300 of these hits a day. I can handle it but I'd like to complain to the ISP. What Mac tools are best for finding the responsible party?

Peter


------------ Peter E Jones Peter (at) thejonesfamily.org


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



Reply via email to