[uanog] SPAM from .co.ua

[Oleksandr V. Typlyns'kyi]

Today Sep 11, 2018 at 16:11 Valentin Nechayev wrote:

> > > крім СПАМу, хтось знає (може назвати) корисний ресурс в зоні *.co.ua ?
> > > у мене з травня 2018 року ~500 спам-повідомленнь з доменів в цій зоні :(
> 
> Маловато :) до фильтра шло полсотни в день.

С тем же почерком летит от .biz.ua и .eu, который целиком блокировать уже не получится:

Sep 11 11:58:45 postfix/smtpd[89194]: NOQUEUE: reject: RCPT from mail.fizermo.biz.ua[5.9.28.196]: 450 4.7.1 <aqkojdh at fizermo.biz.ua>: Sender address rejected
Sep 11 11:59:46 postfix/smtpd[89344]: NOQUEUE: reject: RCPT from mail.intestell.co.ua[176.9.103.48]: 450 4.7.1 <yktinkj at intestell.co.ua>: Sender address rejected
Sep 11 12:52:55 postfix/smtpd[94293]: NOQUEUE: reject: RCPT from s1.intestell.co.ua[176.9.103.91]: 450 4.7.1 <yktinkj at intestell.co.ua>: Sender address rejected
Sep 11 13:43:26 postfix/smtpd[99091]: NOQUEUE: reject: RCPT from s1.airports.co.ua[78.46.40.157]: 450 4.7.1 <offosww at airports.co.ua>: Sender address rejected
Sep 11 13:48:47 postfix/smtpd[99582]: NOQUEUE: reject: RCPT from s1.intestell.co.ua[176.9.103.91]: 450 4.7.1 <yktinkj at intestell.co.ua>: Sender address rejected
Sep 11 14:43:19 postfix/smtpd[5164]: NOQUEUE: reject: RCPT from s1.interstello.co.ua[5.9.60.29]: 450 4.7.1 <oprarxv at interstello.co.ua>: Sender address rejected
Sep 11 14:56:44 postfix/smtpd[6526]: NOQUEUE: reject: RCPT from s1.fizermo.biz.ua[5.9.35.139]: 450 4.7.1 <aqkojdh at fizermo.biz.ua>: Sender address rejected
Sep 11 15:40:10 postfix/smtpd[10576]: NOQUEUE: reject: RCPT from s1.airports.co.ua[78.46.40.157]: 450 4.7.1 <offosww at airports.co.ua>: Sender address rejected
Sep 11 15:48:38 postfix/smtpd[11358]: NOQUEUE: reject: RCPT from s1.intestell.co.ua[176.9.103.91]: 450 4.7.1 <yktinkj at intestell.co.ua>: Sender address rejected
Sep 11 15:55:12 postfix/smtpd[11960]: NOQUEUE: reject: RCPT from mail.witersoe.biz.ua[176.9.112.42]: 450 4.7.1 <aqriybv at witersoe.biz.ua>: Sender address rejected
Sep 11 16:29:52 postfix/smtpd[15143]: NOQUEUE: reject: RCPT from mail.mideringes.eu[80.86.87.181]: 450 4.7.1 <yjdyfcd at mideringes.eu>: Sender address rejected
Sep 11 16:37:43 postfix/smtpd[15918]: NOQUEUE: reject: RCPT from s1.interstello.co.ua[5.9.60.29]: 450 4.7.1 <oprarxv at interstello.co.ua>: Sender address rejected
Sep 11 16:54:00 postfix/smtpd[17449]: NOQUEUE: reject: RCPT from mail.fizermo.biz.ua[5.9.28.196]: 450 4.7.1 <aqkojdh at fizermo.biz.ua>: Sender address rejected

Sep 10 10:03:49 postfix/smtpd[37317]: NOQUEUE: reject: RCPT from mail.informazion.eu[188.138.127.156]: 450 4.7.1 <emxulhb at informazion.eu>: Sender address rejected
Sep 10 10:22:03 postfix/smtpd[39022]: NOQUEUE: reject: RCPT from mail.excluzivem.eu[85.25.226.204]: 450 4.7.1 <unqinvs at excluzivem.eu>: Sender address rejected
Sep 10 14:28:32 postfix/smtpd[62888]: NOQUEUE: reject: RCPT from mail.excluzivem.eu[85.25.226.204]: 450 4.7.1 <unqinvs at excluzivem.eu>: Sender address rejected
Sep 10 15:12:56 postfix/smtpd[67262]: NOQUEUE: reject: RCPT from mail.informazion.eu[188.138.127.156]: 450 4.7.1 <emxulhb at informazion.eu>: Sender address rejected

-- 
WNGS-RIPE