Heho, yeah, the two versatel addr. also have vrfcanaclu01.rfcanalyzer.net- vrfcanaclu03.rfcanalyzer.net as fDNS. $database yielded a mix of Dutch gov/academia IPs and random ISP stuff under rfcanalyzer.net.
For me connections are either the same, or an IO-Error/Worst case the packet storm. However, i just get the v6 inbound. Let's see what their SOC says to this. With best regards, Tobias On Sat, 2023-03-11 at 20:34 -0600, Michael Rathbun via mailop wrote: > On Sun, 12 Mar 2023 02:54:56 +0100, Tobias Fiebig via mailop > <[email protected]> wrote: > > > So, has anyone else seen this in mail.logs/has an idea what that > > host > > is doing? > > The connections here attempt STARTTLS, which fails with SSL error > 0x80090331. > > These come from 87.215.108.211 and .212, in .nl. > > This behaviour has been exhibited by a number of other hosts, mostly > originating from OVH netblocks geolocated in .fr. > > mdr -- Dr.-Ing. Tobias Fiebig T +31 616 80 98 99 M [email protected] _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
