This user is spamming !!! I need to block it !!

Hello ALL,
Today I found that the user kleen on my server is spamming ..
here are some of the entries from exim_mainlog file..
There are thiusands of such entries ..

2004-08-01 04:34:27 1BrDff-0004cY-Ep => kleen <ingram@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:39 1BrDgo-0004d2-7K => kleen <ford@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:40 1BrDgq-0004d9-1w => kleen <williamson@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:43 1BrDgs-0004d4-5u => kleen <knight@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:43 1BrDgs-0004d2-Nb => kleen <jordan@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:46 1BrDgv-0004dT-JZ => kleen <guzman@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:47 1BrDgw-0004d9-I1 => kleen <bishop@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:50 1BrDgz-0004d4-IR => kleen <matthews@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:50 1BrDh0-0004d9-4q => kleen <stanley@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:53 1BrDh1-0004dg-Q3 => kleen <strickland@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:53 1BrDgz-0004d2-Iy => kleen <mcdonald@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:54 1BrDh2-0004dU-QV => kleen <fleming@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:54 1BrDh3-0004d2-Jc => kleen <hunter@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:54 1BrDh4-0004d4-0D => kleen <lane@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:55 1BrDh4-0004dT-74 => kleen <leonard@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:58 1BrDh7-0004d2-8X => kleen <mason@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:58 1BrDh7-0004d9-DW => kleen <reid@kleen.com> R=localuser T=local_delivery
2004-08-01 04:35:58 1BrDh7-0004d4-Ry => kleen <armstrong@kleen.com> R=localuser T=local_delivery
2004-08-01 04:36:02 1BrDhB-0004dg-1Y => kleen <goodman@kleen.com> R=localuser T=local_delivery
2004-08-01 04:36:02 1BrDhA-0004dT-SS => kleen <baldwin@kleen.com> R=localuser T=local_delivery

I have checked that demo mode is disable for this user ...
How do I disable it? We have RHE3 server with whm 9.4..
Thank you

 

 

 

 

Top