Something tells me when you see a browser called "EmailSiphon" in your server logs, that's...um, not a good thing.