On 8 Apr 2016, at 11:22, /dev/rob0 wrote:
EHLO outbound-42.compuserv.com
Yes, compuserv is gone, but it's a nice illustration of how the
string, "user", can appear in a legitimate EHLO.
Tangent: CompuServe was indeed bought by AOL via WorldCom and eventually
(just a few years ago... ) all their distinct services were killed off,
but AOL maintains the registration and DNS for compuserve.com and there
are in fact operational (ish) *.compuserve.com hosts.
On the other hand, compuserv.com is a different story, in that it is
registered to a domain broker and seems to be available for sale. I
expect it is massively overpriced.