Re: spamd greylisting not only wrong user, but also non-existent domain

2009-07-14 Thread Bob Beck
* Chris Bennett  [2009-07-14 10:40]:
> I have seen many emails for non-existent users greylisted.
> Never thought twice about it.
> 
> What I just saw is new (to me at least) are wrong domains:
> 
> GREY|71.160.113.232|ijoaje.com|||1247574936|1247589336|1247589336|1|0
> GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
> GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
> GREY|71.160.113.232|htaaei.com|||1247574949|1247589349|1247589349|1|0
> GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
> GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
> GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
> GREY|218.102.23.141|ymail02dat.netvigator.com|||1247578248|1247581591|1247592648|2|0
> GREY|218.102.23.48|ymail04dat.netvigator.com|||1247575526|1247584245|1247589926|2|0
> GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
> GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
> GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
> GREY|71.160.113.232|htaaei.com|||1247574951|1247589351|1247589351|1|0
> 
> I have bennettconstruction.biz, but the rest are nonsense for my server.
> 
> Is this something new? Or have I just never seen it before?
> 

Normal spew. looking for random addresses. see it all the time.

It's nice when you run something over the greylist and trap hosts 
mailing to invalid users.

-Bob



spamd greylisting not only wrong user, but also non-existent domain

2009-07-14 Thread Chris Bennett

I have seen many emails for non-existent users greylisted.
Never thought twice about it.

What I just saw is new (to me at least) are wrong domains:

GREY|71.160.113.232|ijoaje.com|||1247574936|1247589336|1247589336|1|0
GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
GREY|71.160.113.232|htaaei.com|||1247574949|1247589349|1247589349|1|0
GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
GREY|218.102.23.141|ymail02dat.netvigator.com|||1247578248|1247581591|1247592648|2|0
GREY|218.102.23.48|ymail04dat.netvigator.com|||1247575526|1247584245|1247589926|2|0
GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
GREY|71.160.113.232|ijoaje.com|||1247574937|1247589337|1247589337|1|0
GREY|71.160.113.232|htaaei.com|||1247574950|1247589350|1247589350|1|0
GREY|71.160.113.232|htaaei.com|||1247574951|1247589351|1247589351|1|0

I have bennettconstruction.biz, but the rest are nonsense for my server.

Is this something new? Or have I just never seen it before?

Chris Bennett