[stomachmonkey]

If he is a scammer odds are he is spoofing the IP anyway.

I'm not a scammer but that is what I would do.

If you are not using at least an 8 character password that is a combination of letters and numbers you are asking for trouble.

Also you user name should be "unique".

I almost had one of my servers shut down a couple of months ago. One of the users changed her mail login and password to "diana" and obviously a simple password.

A bot out of Korea ran a dictionary attack on the mail port, got into her account and started blasting phising emails at the rate of 100,000 an hour.

A dictionary attack is just what it sounds like, the bot will start hitting the server requesting access using a first name and will try 5 or 6 passwords then move onto the next name in the alphabet. It will do this forever unless you catch it.

Scott