[cobalt-users] email attack?

["Paul Warner" <pwarner@xxxxxxxxxxxxxxxxxx>]

For the past few days we have seen a HUGE number of messages addressed to a
couple of bogus names on one domain:
lauren@xxxxxxxxxx
geraldine@xxxxxxxxxx
erin@xxxxxxxxxx
Each message seems to originate from a different relay, and with each
message a "No such user" is returned.  Is this part of a known exploit?
Should I create an account in one of these names to see what's in the
message?  Is there a better way to stop these since I can't use ipchains to
deny the 1000s of different relays on which these are arriving?

Paul

--
This message has been scanned with Norton Anti-Virus and is believed to be
virus free at the time of submission.