Try: ab...@amazonaws.com

> On May 5, 2017, at 6:12 PM, Spam Auditor <spamaudi...@linuxmagic.com> wrote:
> 
> Smile for your weekend...
> 
> Trying to report a large scale dictionary attack from AWS..
> 
> (Part of the rejection headers below)
> 
> The original message was received at Fri, 5 May 2017 21:04:33 GMT
> from pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194]
> 
>   ----- The following addresses had permanent fatal errors -----
> abuse-autorespo...@mail-autoreply.amazon.com
>    (reason: 554 5.4.6 Too many hops)
>    (expanded from: abuse-autoresponse)
> abuse-adm...@ant.amazon.com
>    (reason: 554 5.4.6 Too many hops)
>    (expanded from: abuse-admins)
> 
> Received: from EX13MTAUWA001.ant.amazon.com 
> (pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
>       by email-inbound-relay-62007.pdx2.amazon.com (8.14.7/8.14.7) with ESMTP 
> id v45L4V6e009969
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:04:33 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
> Received: from EX13D03UWA003.ant.amazon.com (10.43.160.39) by
> EX13MTAUWA001.ant.amazon.com (10.43.160.118) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:59 +0000
> Received: from EX13MTAUEE001.ant.amazon.com (10.43.62.200) by
> EX13D03UWA003.ant.amazon.com (10.43.160.39) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:59 +0000
> Received: from email-inbound-relay-71008.iad55.amazon.com (10.124.125.6) by
> mail-relay.amazon.com (10.43.62.226) with Microsoft SMTP Server (TLS) id
> 15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:58 +0000
> Received: from EX13MTAUWC001.ant.amazon.com 
> (iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162])
>       by email-inbound-relay-71008.iad55.amazon.com (8.14.7/8.14.7) with 
> ESMTP id v45L3mTM014062
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:53 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWC001.ant.amazon.com
> Received: from EX13D03UWC002.ant.amazon.com (10.43.162.160) by
> EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:53 +0000
> Received: from EX13MTAUWC001.ant.amazon.com (10.43.162.135) by
> EX13D03UWC002.ant.amazon.com (10.43.162.160) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:52 +0000
> Received: from email-inbound-relay-60004.pdx1.amazon.com (10.25.10.214) by
> mail-relay.amazon.com (10.43.162.232) with Microsoft SMTP Server (TLS) id
> 15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:52 +0000
> Received: from EX13MTAUWA001.ant.amazon.com 
> (pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
>       by email-inbound-relay-60004.pdx1.amazon.com (8.14.7/8.14.7) with ESMTP 
> id v45L3krw028474
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:47 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
> Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
> EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:46 +0000
> Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
> EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:46 +0000
> Received: from email-inbound-relay-71007.iad55.amazon.com (10.25.10.214) by
> mail-relay.amazon.com (10.43.161.249) with Microsoft SMTP Server (TLS) id
> 15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:46 +0000
> Received: from EX13MTAUWC001.ant.amazon.com 
> (iad55-ws-svc-p15-lb9-vlan2.iad.amazon.com [10.40.159.162])
>       by email-inbound-relay-71007.iad55.amazon.com (8.14.7/8.14.7) with 
> ESMTP id v45L3dsH016918
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:39 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWC001.ant.amazon.com
> Received: from EX13D03UWC003.ant.amazon.com (10.43.162.79) by
> EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:39 +0000
> Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
> EX13D03UWC003.ant.amazon.com (10.43.162.79) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:39 +0000
> Received: from email-inbound-relay-62008.pdx2.amazon.com (10.25.10.214) by
> mail-relay.amazon.com (10.43.161.249) with Microsoft SMTP Server (TLS) id
> 15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:39 +0000
> Received: from EX13MTAUWA001.ant.amazon.com 
> (pdx1-ws-svc-p6-lb9-vlan2.pdx.amazon.com [10.236.137.194])
>       by email-inbound-relay-62008.pdx2.amazon.com (8.14.7/8.14.7) with ESMTP 
> id v45L3Xkw003127
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:33 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
> Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
> EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:32 +0000
> Received: from EX13MTAUWA001.ant.amazon.com (10.43.160.58) by
> EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:32 +0000
> Received: from email-inbound-relay-64014.pdx4.amazon.com (10.25.10.214) by
> mail-relay.amazon.com (10.43.160.118) with Microsoft SMTP Server (TLS) id
> 15.0.1104.5 via Frontend Transport; Fri, 5 May 2017 21:03:32 +0000
> Received: from EX13MTAUWA001.ant.amazon.com 
> (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198])
>       by email-inbound-relay-64014.pdx4.amazon.com (8.14.7/8.14.7) with ESMTP 
> id v45L3Qfb029745
>       (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL)
>       for <zzz-exchange-fwd-ab...@amazon.com>; Fri, 5 May 2017 21:03:26 GMT
> X-CrossPremisesHeadersFilteredBySendConnector: EX13MTAUWA001.ant.amazon.com
> Received: from EX13D03UWA002.ant.amazon.com (10.43.160.144) by
> EX13MTAUWA001.ant.amazon.com (10.43.160.58) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:26 +0000
> Received: from EX13MTAUWB001.ant.amazon.com (10.43.161.207) by
> EX13D03UWA002.ant.amazon.com (10.43.160.144) with Microsoft SMTP Server (TLS)
> id 15.0.1104.5; Fri, 5 May 2017 21:03:25 +0000
> Received: from fireeye-57006.iad12 (10.31.56.59) by mail-relay.amazon.com
> (10.43.161.249) with Microsoft SMTP Server (TLS) id 15.0.1104.5 via Frontend
> Transport; Fri, 5 May 2017 21:03:26 +0000
> Received: from localhost.localdomain (localhost [127.0.0.1])
>       by fireeye-57006.iad12 (Postfix) with SMTP id 3wKPWK43ryz3m2gx
>       for <ab...@amazon.com>; Fri,  5 May 2017 21:03:25 +0000 (UTC)
> Received: from smtp-border-fw-0102.sea3.amazon.com 
> (smtp-border-fw-0102.sea3.amazon.com [172.22.25.39])
>       by fireeye-57006.iad12 (Postfix) with ESMTP id 3wKPWK1ykHz3m2fF
>       for <ab...@amazon.com>; Fri,  5 May 2017 21:03:25 +0000 (UTC)
> 
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to