Smile for your weekend...
Trying to report a large scale dictionary attack from AWS..
(Part of the rejection headers below)
The original message was received at Fri, 5 May 2017 21:04:33 GMT
from pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194]
----- The following addresses had permanent fatal errors -----
abuse-autorespo...@mail-autoreply.amazon.com
(reason: 554 5.4.6 Too many hops)
(expanded from: abuse-autoresponse)
abuse-adm...@ant.amazon.com
(reason: 554 5.4.6 Too many hops)
(expanded from: abuse-admins)
Received: from EX13MTAUWA001.ant.amazon.com
(pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
by email-inbound-relay-62007.pdx2.amazon.com (8.14.7/8.14.7) with ESMTP
id v45L4V6e009969
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:04:33 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
Received: from EX13D03UWA003.ant.amazon.com (10.43.160.39) by
EX13MTAUWA001.ant.amazon.com (10.43.160.118) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:59 +0000
Received: from EX13MTAUEE001.ant.amazon.com (10.43.62.200) by
EX13D03UWA003.ant.amazon.com (10.43.160.39) with Microsoft SMTP Server
(TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:59 +0000
Received: from email-inbound-relay-71008.iad55.amazon.com (10.124.125.6) by
mail-relay.amazon.com (10.43.62.226) with Microsoft SMTP Server (TLS) id
15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:58 +0000
Received: from EX13MTAUWC001.ant.amazon.com
(iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162])
by email-inbound-relay-71008.iad55.amazon.com (8.14.7/8.14.7) with
ESMTP id v45L3mTM014062
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:53 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWC001.ant.amazon.com
Received: from EX13D03UWC002.ant.amazon.com (10.43.162.160) by
EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:53 +0000
Received: from EX13MTAUWC001.ant.amazon.com (10.43.162.135) by
EX13D03UWC002.ant.amazon.com (10.43.162.160) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:52 +0000
Received: from email-inbound-relay-60004.pdx1.amazon.com (10.25.10.214) by
mail-relay.amazon.com (10.43.162.232) with Microsoft SMTP Server (TLS) id
15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:52 +0000
Received: from EX13MTAUWA001.ant.amazon.com
(pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
by email-inbound-relay-60004.pdx1.amazon.com (8.14.7/8.14.7) with ESMTP
id v45L3krw028474
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:47 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server
(TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:46 +0000
Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:46 +0000
Received: from email-inbound-relay-71007.iad55.amazon.com (10.25.10.214) by
mail-relay.amazon.com (10.43.161.249) with Microsoft SMTP Server (TLS) id
15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:46 +0000
Received: from EX13MTAUWC001.ant.amazon.com
(iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162])
by email-inbound-relay-71007.iad55.amazon.com (8.14.7/8.14.7) with
ESMTP id v45L3dsH016918
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:39 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWC001.ant.amazon.com
Received: from EX13D03UWC003.ant.amazon.com (10.43.162.79) by
EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:39 +0000
Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
EX13D03UWC003.ant.amazon.com (10.43.162.79) with Microsoft SMTP Server
(TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:39 +0000
Received: from email-inbound-relay-62008.pdx2.amazon.com (10.25.10.214) by
mail-relay.amazon.com (10.43.161.249) with Microsoft SMTP Server (TLS) id
15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:39 +0000
Received: from EX13MTAUWA001.ant.amazon.com
(pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
by email-inbound-relay-62008.pdx2.amazon.com (8.14.7/8.14.7) with ESMTP
id v45L3Xkw003127
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:33 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server
(TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:32 +0000
Received: from EX13MTAUWA001.ant.amazon.com (10.43.160.58) by
EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:32 +0000
Received: from email-inbound-relay-64014.pdx4.amazon.com (10.25.10.214) by
mail-relay.amazon.com (10.43.160.118) with Microsoft SMTP Server (TLS) id
15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:32 +0000
Received: from EX13MTAUWA001.ant.amazon.com
(pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198])
by email-inbound-relay-64014.pdx4.amazon.com (8.14.7/8.14.7) with ESMTP
id v45L3Qfb029745
(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:26 GMT
X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server
(TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:26 +0000
Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP
Server (TLS)
id 15.0.1104.5; Fri, 5 May 2017 21:03:25 +0000
Received: from fireeye-57006.iad12 (10.31.56.59) by mail-relay.amazon.com
(10.43.161.249) with Microsoft SMTP Server (TLS) id 15.0.1104.5 via
Frontend
Transport; Fri, 5 May 2017 21:03:26 +0000
Received: from localhost.localdomain (localhost [127.0.0.1])
by fireeye-57006.iad12 (Postfix) with SMTP id 3wKPWK43ryz3m2gx
for <ab...@amazon.com>; Fri, 5 May 2017 21:03:25 +0000 (UTC)
Received: from smtp-border-fw-0102.sea3.amazon.com
(smtp-border-fw-0102.sea3.amazon.com [172.22.25.39])
by fireeye-57006.iad12 (Postfix) with ESMTP id 3wKPWK1ykHz3m2fF
for <ab...@amazon.com>; Fri, 5 May 2017 21:03:25 +0000 (UTC)
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop