[BlueOnyx:01648] Re: Slammed with Spammer

[Paul]

Michael/Jeff/Jim/Larry,

Many thanks to you all - Applied the iptables and /etc/hosts.deny and 
all has now stopped from that particular source.
Have also removed the "user" in question... Interestingly enough, on an 
unused site....

Many thanks for your prompt responses :)

Paul

Michael Stauber wrote:
> Hi Paul,
>
>   
>> I'm getting similar issues :(... here's a cat of the sendmail log...
>>
>> Jul 11 19:04:21 www sendmail[10386]: AUTH=server,
>> relay=p50988f93.dip0.t-ipconnect.de [80.152.143.147], authid=info,
>> mech=LOGIN, bits=0
>>     
>
> Do what Jeff said. Change the password for user "info", because it appears as 
> if the password for that account has been compromised.
>
>