I've been getting the same bad RCPT TO from 200.232.195.50 for the last 13 hours.
I've now got 3 hosts connected to me submitting the same bad address over and over. The address is the bogus one I use in the From line of newsgroup postings. (My real address appears in the Reply-to, which requires downloading the entire article instead of just the headers to scrape.)
200.199.184.238 201.12.11.93 200.140.109.223
Alas, they're filling my maillogs with the "no such user" message.
I can obviously firewall them off but for the long run it looks like I'll have to find some automated way to recognize this stupidity so I can automate the firewalling.
