02-Dec-2017

All the same
Once more, no surprises in the monthly maintenance job. The vast majority of mail has been rejected on explicit rules, or by the content:

PMAS statistics for November
Total messages    :   4463 = 100.0 o/o
DNS Blacklisted   :      0 =    .0 o/o (Files:  0)
Relay attempts    :    622 =  13.9 o/o (Files: 30)
Accepted by PMAS  :   3841 =  86.0 o/o (Files: 30)
  Handled by explicit rule
         Rejected :   3024 =  78.7 o/o (processed),  67.7 o/o (all)
         Accepted :    187 =   4.8 o/o (processed),   4.1 o/o (all)
  Handled by content
        Discarded :    423 =  11.0 o/o (processed),   9.4 o/o (all)
     Quarantained :    183 =   4.7 o/o (processed),   4.1 o/o (all)
        Delivered :     24 =    .6 o/o (processed),    .5 o/o (all)

The number of relay attemps have been larger this month, especially on 5th, 16th and 30th – all files contained almost 180 attempts, and I found the attempts originated from two networks, both leading to Hostwinds1 in Tulsa (US), trying a fake grootersnet.nl user sending to 1029mandaditos@gmail.com:

  • 5-NOV-2017 03:23:11.22 – 03:26:33.68 (175 attempts from 104.168.146.254)
  • 16-NOV-2017 20:04:23.00 – 20:12:07.85 (178 attempts from 23.254.164.233)
  • 30-NOV-2017 00:22:01.61 – 00:58:39.57 (187 attempts from 23.254.165.119)
  • Hostwinds.com has been notified of this, and the networks have been excluded for access – in the router – for some time. I’ll keep an eye on these addresses.

    Next WP update pending 🙂

    Leave a Reply

    This site uses Akismet to reduce spam. Learn how your comment data is processed.