% awk '/PREGREET/ {print $NF}' /var/log/mail.log |sort | uniq -c | sort -n
emits
...
25 urhousecareer.info??
26 dmx1.bfi0.com??
104 freenet.de??
111 gmx.de??
113 t-online.de??
113 web.de??
But of course the client is never *.web.de, but always some kind of
dialup. maybe I'll whip up some gnuplot graphs...
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
In brightest day, in blackest night
no evil shall escape my sight!
for those that worship evil's might,
beware my power, green lantern's light!