High spam volume on treasurer email alias

One of our officers is getting excessive amounts of spam being sent to the treasurer email alias.

The spammers email is often different so blacklisting each one as they arrive may not be the solution.

Is there anyway to determine if all the spam messages are coming from specific IP address where the spammer is always changing the From email address?

I have already asked the officer to perform a deep scan of malware, viruses and rootkits on their computer. The scan yielded no infections on the officers computer.

I am suspecting some bot that is generating high spam traffic to the treasurer email alias from a specific IP address.

Club 8684 - Manotick Toastmasters
Kent Spott - Club Admin

The original IP can be found in the raw internet  email header

Spam appears to be from 102.135.108.xxx

The spam rate from this IP block is very high and all messages are going to the treasurer email alias.

Attached are the original e-mail headers of 4 messages.

Thank you for that, that IP block is definately s serious spammer and they have been blocked at the IP level.

Appreciate the diligence.
 

The spam appeared to have stopped but we are getting many from 93.92.xxx.xxx IP block as well.

You will need to be more specific that covers way to many email addresses.