Afghanistan internet favourites

So another .af address (my blog) had a quick chat with the email server.

smtpd[*]: connect from unknown[117.55.207.29]
policyd-spf[*]: None; identity=helo; client-ip=117.55.207.29; helo=[117.55.207.4]; envelope-from=mfd@thezoo; receiver=user@thezoo
policyd-spf[*]: Fail; identity=mailfrom; client-ip=117.55.207.29; helo=[117.55.207.4]; envelope-from=mfd@thezoo; receiver=user@thezoo
smtpd[*]: NOQUEUE: reject: RCPT from unknown[117.55.207.29]: 554 5.7.1 Service unavailable; Client host [117.55.207.29] blocked using xbl.spamhaus.org; https://www.spamhaus.org/query/ip/117.55.207.29; from=<MFD@thezoo> to=<user@thezoo> proto=ESMTP helo=<[117.55.207.4]>
smtpd[*]: disconnect from unknown[117.55.207.29]

the man who became a pig

So lets say a big hello to

address: Neda Telecommunications 13, Esmat Muslim Street,Shar-e-Naw Kabul, Afghanistan
e-mail: abuse@neda.af

Oddly there pretending to be the zoo – Probably not pork product spam then.

The paradox of cavemen selling art

I wrote a geoip script (my blog) and if you mess about with various log formats it works with many output logs since they all differ to a certain extent and so i ran it aganust our email server.

So i got curious and wondered what Afghanistan was sending….

/smtpd[*]: connect from unknown[103.224.215.18]
policyd-spf[*]: Neutral; identity=mailfrom; client-ip=103.224.215.18; helo=[103.224.215.18]; envelope-from=*@billwatsonfineart.com; receiver=thezoo
/smtpd[*]: NOQUEUE: reject: RCPT from unknown[103.224.215.18]: 554 5.7.1 Service unavailable; Client host [103.224.215.18] blocked using xbl.spamhaus.org; 103.224.215.18; from=.215.18; from=<*@billwatsonfineart.com> to=<*@billwatsonfineart.com> to=<thezoo> proto=ESMTP helo=<[103.224.215.18]>
/smtpd[*]: disconnect from unknown[103.224.215.18]

No idea but Afganistan selling art sounds wrong based on this (my blog).  I am sure the domain owner would not be welcome in Kabul.

 103.224.214.1 - 103.224.215.254
 Giganor-BroadBand-wireless-customers
 H # 263, Shora Street 4, Cart e 3, Kabul Kabul
 AF
 abuse-mailbox:  support@giganor.com

This ‘Freedom’ seems wasted on Islamic believers, However i guess it might be drugs or something deemed moral after all it been already flagged as spam its certainly not bacon.

The moral to this story do not use godaddy (my blog) who our cavemen are using for a false identity.