OT, but curious

[.rp]

> I built a script that puts spammer IPs in the firewall for a few days.
>
ooh,ooh, would you mind posting it?
 
> I noticed this morning in the firewall log that spam connect attempts
> seem to come in "quanta" of 9 tries (9, 18, 27...). Some don't, but by
> far most do -- or did yesterday, anyway. Anybody know why?
> 
I've noticed groups of 5. I think it is related to how many accounts are 
more sussepticle (sp?) to getting spammed. We had (note the 'had') 5 
addresses that were put out in plain text on our Web homepage.