We have noticed that int he past couple weeks there has been an increase of blocked emails by reputation. While this is great that Ironport is doing what it's suppose to do, we are concerned that the increase from over 6000 emails blocked to over 40000 emails being blocked by reputation filtering in just 2 weeks is disconcerning. Should we be worried that we have so many emails trying to spam our Exchange but Ironport is blocking it like it suppose to. Is there a way to prevent so much emails trying to come to our Exchange server? I know it might be silly questions but I am new to this game and trying to figure out what's acceptable and what is not.
Just as an fyi, most of the emails we are recieving seems to be originating from a mirmoirr domain which we found is based in Korea but emails IP are from Tempe, AZ. Any advice would be appreciated. Thanks in advance!
