postfix unmatched enties
Hugo van der Kooij <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi,
Here is a snapshot of unmatched entries.
**Unmatched Entries**
1 Aug 30 10:53:18 faramir postfix/smtpd[15413]: NOQUEUE: reject: RCPT from plc27-124.linzag.net[83.164.27.124]: 554 Service denied; Client host [83.164.27.124] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?83.164.27.124; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<plc27-124.linzag.net>
1 Aug 30 15:05:35 faramir postfix/smtpd[18184]: NOQUEUE: reject: RCPT from hide-102.maine.gov[198.182.163.102]: 554 Service denied; Client host [198.182.163.102] blocked using dnsbl.sorbs.net; Exploitable Server See: http://www.sorbs.net/lookup.shtml?198.182.163.102; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<hide-102.maine.gov>
1 Aug 30 21:44:03 faramir postfix/smtpd[22529]: NOQUEUE: reject: RCPT from pc148-152.kopnet.pl[195.140.152.148]: 554 Service denied; Client host [195.140.152.148] blocked using dnsbl.sorbs.net; Exploitable Server See: http://www.sorbs.net/lookup.shtml?195.140.152.148; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<kepner-tregoe.co.jp>
1 Aug 30 08:36:14 faramir postfix/smtpd[14161]: NOQUEUE: reject: RCPT from bze-dist-rou03-natpool38.btl.net[200.32.196.38]: 554 Service denied; Client host [200.32.196.38] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?200.32.196.38; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<bze-dist-rou03-natpool38.btl.net>
1 Aug 30 18:47:23 faramir postfix/smtpd[19966]: NOQUEUE: reject: RCPT from csknet-84-234-34-208.csk.pl[84.234.34.208]: 554 Service denied; Client host [84.234.34.208] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?84.234.34.208; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<csknet-84-234-34-208.csk.pl>
1 Aug 30 07:52:41 faramir postfix/smtpd[13187]: NOQUEUE: reject: RCPT from brest.ferimex.net[195.68.234.250]: 554 Service denied; Client host [195.68.234.250] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?195.68.234.250; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<brest.ferimex.net>
1 Aug 30 16:40:26 faramir postfix/smtpd[18581]: NOQUEUE: reject: RCPT from 226.98.181.58.dynamic.max.com.pk[58.181.98.226]: 554 Service denied; Client host [58.181.98.226] blocked using dnsbl.sorbs.net; Exploitable Server See: http://www.sorbs.net/lookup.shtml?58.181.98.226; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<226.98.181.58.dynamic.max.com.pk>
1 Aug 30 11:51:34 faramir postfix/smtpd[15413]: NOQUEUE: reject: RCPT from mail.toncelli.it[82.61.231.133]: 554 Service denied; Client host [82.61.231.133] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?82.61.231.133; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail.toncelli.it>
1 Aug 30 11:58:46 faramir postfix/smtpd[15900]: NOQUEUE: reject: RCPT from mail.toncelli.it[82.61.231.133]: 554 Service denied; Client host [82.61.231.133] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?82.61.231.133; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail.toncelli.it>
1 Aug 30 18:22:02 faramir postfix/smtpd[19966]: NOQUEUE: reject: RCPT from promtehsnab.galant.ru[85.21.13.240]: 554 Service denied; Client host [85.21.13.240] blocked using dnsbl.sorbs.net; Exploitable Server See: http://www.sorbs.net/lookup.shtml?85.21.13.240; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<promtehsnab.galant.ru>
1 Aug 30 21:20:38 faramir postfix/smtpd[22529]: NOQUEUE: reject: RCPT from wschod-117.tp.unicity.pl[217.98.25.117]: 554 Service denied; Client host [217.98.25.117] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?217.98.25.117; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<wschod-117.tp.unicity.pl>
1 Aug 30 21:10:19 faramir postfix/smtpd[22529]: NOQUEUE: reject: RCPT from srv.spcnet.cz[213.195.215.130]: 554 Service denied; Client host [213.195.215.130] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?213.195.215.130; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<srv.spcnet.cz>
1 Aug 30 04:05:59 faramir postfix/smtpd[9903]: NOQUEUE: reject: RCPT from bzq-80-66-154.dsl.bezeqint.net[82.80.66.154]: 554 Service denied; Client host [82.80.66.154] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?82.80.66.154; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<bzq-80-66-154.dsl.bezeqint.net>
1 Aug 30 14:51:01 faramir postfix/smtpd[17678]: NOQUEUE: reject: RCPT from 82-38-3-218.cable.ubr01.barn.blueyonder.co.uk[82.38.3.218]: 554 Service denied; Client host [82.38.3.218] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?82.38.3.218; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[82.38.3.218]>
1 Aug 30 10:53:26 faramir postfix/smtpd[15401]: NOQUEUE: reject: RCPT from m120.net195-132-241.noos.fr[195.132.241.120]: 554 Service denied; Client host [195.132.241.120] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?195.132.241.120; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<m120.net195-132-241.noos.fr>
1 Aug 30 17:03:01 faramir postfix/smtpd[18575]: NOQUEUE: reject: RCPT from mail.jengroup.co.za[196.211.32.50]: 554 Service denied; Client host [196.211.32.50] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?196.211.32.50; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<mail.jengroup.co.za>
---------------------- Postfix End -------------------------
I am sure I can write something if I really need to. But I found the
structure of the postfix parser not entirely straightforward. So if
someone feels (s)he can do a good job with it I will continue to
concentrate on other parts and send as much log files as are neede.
Regards,
Hugo.