Every few hours I get bursts of these from random addresses -- always at
"poneytelecom.eu" (online.net)
Communicating with abuse@ online.net/poneytelecom.eu is a lost cause. They're
completely useless.
Is postscreen doing its "best" job here at reducing load? It's clearly not
passing the attempts through.
I'm just wondering if there's any throttling or something else to here?
Sep 6 03:22:20 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:53039 to [192.0.2.1]:25
Sep 6 03:22:20 cont03 postfix/dnsblog[35436]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:22:20 cont03 postfix/postscreen[35432]: PREGREET 14 after
0.14 from [62.210.140.7]:53039: EHLO mdb3Fue\r\n
Sep 6 03:22:20 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:53039
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:65108 to [192.0.2.1]:25
Sep 6 03:22:21 cont03 postfix/dnsblog[35434]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: PREGREET 14 after
0.15 from [62.210.140.7]:65108: EHLO lO0RVZU\r\n
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:65108
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:61166 to [192.0.2.1]:25
Sep 6 03:22:21 cont03 postfix/dnsblog[35437]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: PREGREET 15 after
0.16 from [62.210.140.7]:61166: EHLO w2z7WmCG\r\n
Sep 6 03:22:21 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:61166
Sep 6 03:22:22 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:62585 to [192.0.2.1]:25
Sep 6 03:22:22 cont03 postfix/dnsblog[35437]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:22:22 cont03 postfix/postscreen[35432]: PREGREET 16 after
0.15 from [62.210.140.7]:62585: EHLO dtcgZI6oA\r\n
Sep 6 03:22:22 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:62585
Sep 6 03:22:22 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:58322 to [192.0.2.1]:25
...
MANY HUNDREDS MORE
...
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: PREGREET 17 after
0.16 from [62.210.140.7]:65061: EHLO O0uHWZVJd5\r\n
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:65061
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:64305 to [192.0.2.1]:25
Sep 6 03:24:02 cont03 postfix/dnsblog[35433]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: PREGREET 16 after
0.14 from [62.210.140.7]:64305: EHLO FG3aXs6pz\r\n
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:64305
Sep 6 03:24:02 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:64252 to [192.0.2.1]:25
Sep 6 03:24:02 cont03 postfix/dnsblog[35438]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: PREGREET 15 after
0.15 from [62.210.140.7]:64252: EHLO cGD5sIof\r\n
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:64252
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:59911 to [192.0.2.1]:25
Sep 6 03:24:03 cont03 postfix/dnsblog[35436]: addr 62.210.140.7 listed
by domain zen.spamhaus.org as 127.0.0.4
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: PREGREET 16 after
0.15 from [62.210.140.7]:59911: EHLO 9D4ZAcsJk\r\n
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: DISCONNECT
[62.210.140.7]:59911
Sep 6 03:24:03 cont03 postfix/postscreen[35432]: CONNECT from
[62.210.140.7]:61102 to [192.0.2.1]:25
