Well it seems that spam in the form of non SMTP attempts on Mail servers, eminates from the following ranges on a daily basis. This has been logged on multiple Ips for more that a week. So one has to think, are these attempts on purpose, or are due to clueless / ignorance on the part of the user or the isp?
The attempts seem to be expanding from more Ips. Solution : Block the class until they are cleaned up / removed.
See the ranges below :
non-SMTP command from unknown[67.50.37.42]
non-SMTP command from unknown[67.50.37.45]
non-SMTP command from unknown[67.50.37.46]
non-SMTP command from unknown[67.50.37.47]
non-SMTP command from unknown[67.50.37.54]
non-SMTP command from unknown[67.50.37.57]
non-SMTP command from unknown[67.50.37.58]
non-SMTP command from unknown[67.50.37.59]
non-SMTP command from unknown[67.50.37.76]
non-SMTP command from unknown[67.50.37.78]
non-SMTP command from unknown[67.50.37.79]
non-SMTP command from unknown[67.50.37.80]
non-SMTP command from unknown[67.50.37.87]
non-SMTP command from unknown[67.50.37.90]
non-SMTP command from unknown[67.50.37.91]
non-SMTP command from unknown[67.50.37.92]
After Blocking, now NEW
from elkin136.fullmatrixmonster.com (elkin136.fullmatrixmonster.com [67.50.37.136])
from elkin137.fullmatrixmonster.com (elkin137.fullmatrixmonster.com [67.50.37.137])
from elkin154.fullmatrixmonster.com (elkin154.fullmatrixmonster.com [67.50.37.154])
from elkin156.fullmatrixmonster.com (elkin156.fullmatrixmonster.com [67.50.37.156])
from elkin135.fullmatrixmonster.com (elkin135.fullmatrixmonster.com [67.50.37.135]
from elkin138.fullmatrixmonster.com (elkin138.fullmatrixmonster.com [67.50.37.138]
from elkin139.fullmatrixmonster.com (elkin139.fullmatrixmonster.com [67.50.37.139]
from elkin140.fullmatrixmonster.com (elkin140.fullmatrixmonster.com [67.50.37.140]
from elkin147.fullmatrixmonster.com (elkin147.fullmatrixmonster.com [67.50.37.147]
from elkin148.fullmatrixmonster.com (elkin148.fullmatrixmonster.com [67.50.37.148]
from elkin151.fullmatrixmonster.com (elkin151.fullmatrixmonster.com [67.50.37.151]
from elkin155.fullmatrixmonster.com (elkin155.fullmatrixmonster.com [67.50.37.155]
NEW
non-SMTP command from unknown[67.50.37.41]
non-SMTP command from unknown[67.50.37.53]
non-SMTP command from unknown[67.50.37.75]
non-SMTP command from unknown[67.50.37.86]
non-SMTP command from unknown[174.138.174.215]
non-SMTP command from unknown[174.138.174.200]
non-SMTP command from unknown[79.143.181.100]
non-SMTP command from unknown[79.143.181.103]
non-SMTP command from unknown[79.143.181.105]
non-SMTP command from unknown[79.143.181.107]
non-SMTP command from unknown[79.143.181.110]
non-SMTP command from unknown[79.143.181.73]
non-SMTP command from unknown[79.143.181.77]
non-SMTP command from unknown[79.143.181.80]
non-SMTP command from unknown[79.143.181.84]
non-SMTP command from unknown[79.143.181.87]
non-SMTP command from unknown[79.143.181.90]
non-SMTP command from unknown[79.143.181.95]
non-SMTP command from 9f.d3.5646.static.theplanet.com[70.86.211.159]
non-SMTP command from aa.d3.5646.static.theplanet.com[70.86.211.170]
non-SMTP command from b8.d3.5646.static.theplanet.com[70.86.211.184]
non-SMTP command from 84.d3.5646.static.theplanet.com[70.86.211.132]
non-SMTP command from 8a.d3.5646.static.theplanet.com[70.86.211.138]
non-SMTP command from 8c.d3.5646.static.theplanet.com[70.86.211.140]
non-SMTP command from 8f.d3.5646.static.theplanet.com[70.86.211.143]
non-SMTP command from 96.d3.5646.static.theplanet.com[70.86.211.150]
non-SMTP command from 98.d3.5646.static.theplanet.com[70.86.211.152]
non-SMTP command from 9c.d3.5646.static.theplanet.com[70.86.211.156]
non-SMTP command from 9f.d3.5646.static.theplanet.com[70.86.211.159]
non-SMTP command from a1.d3.5646.static.theplanet.com[70.86.211.161]
non-SMTP command from a3.d3.5646.static.theplanet.com[70.86.211.163]
non-SMTP command from ad.d3.5646.static.theplanet.com[70.86.211.173]
non-SMTP command from bd.d3.5646.static.theplanet.com[70.86.211.189]
non-SMTP command from 173.192.43.216-static.reverse.softlayer.com[173.192.43.216]
non-SMTP command from 173.192.43.217-static.reverse.softlayer.com[173.192.43.217]
non-SMTP command from 173.192.43.218-static.reverse.softlayer.com[173.192.43.218]
non-SMTP command from 173.192.62.59-static.reverse.softlayer.com[173.192.62.59]
non-SMTP command from 173.192.62.57-static.reverse.softlayer.com[173.192.62.57]
non-SMTP command from 173.192.62.58-static.reverse.softlayer.com[173.192.62.58]
non-SMTP command from 173.192.62.56-static.reverse.softlayer.com[173.192.62.56]
non-SMTP command from 173.192.62.57-static.reverse.softlayer.com[173.192.62.57]
non-SMTP command from 173.192.62.58-static.reverse.softlayer.com[173.192.62.58]
NEW
non-SMTP command from 173.192.62.59-static.reverse.softlayer.com[173.192.62.59]
non-SMTP command from 173.192.62.60-static.reverse.softlayer.com[173.192.62.60]
non-SMTP command from 173.193.31.216-static.reverse.softlayer.com[173.193.31.216]
non-SMTP command from 173.193.31.217-static.reverse.softlayer.com[173.193.31.217]
non-SMTP command from 173.193.31.218-static.reverse.softlayer.com[173.193.31.218]
non-SMTP command from 173.193.31.219-static.reverse.softlayer.com[173.193.31.219]
non-SMTP command from 173.193.45.4-static.reverse.softlayer.com[173.193.45.4]
non-SMTP command from 173.193.45.5-static.reverse.softlayer.com[173.193.45.5]
non-SMTP command from 173.193.45.6-static.reverse.softlayer.com[173.193.45.6]
non-SMTP command from 173.193.45.7-static.reverse.softlayer.com[173.193.45.7]
non-SMTP command from 173.192.43.217-static.reverse.softlayer.com[173.192.43.217]
non-SMTP command from 173.192.43.218-static.reverse.softlayer.com[173.192.43.218]
NEW
non-SMTP command from 173.192.43.219-static.reverse.softlayer.com[173.192.43.219]
non-SMTP command from 173.192.43.220-static.reverse.softlayer.com[173.192.43.220]
non-SMTP command from unknown[174.138.174.197]
non-SMTP command from unknown[174.138.174.199]
non-SMTP command from unknown[174.138.174.204]
non-SMTP command from unknown[174.138.174.206]
non-SMTP command from unknown[174.138.174.209]
non-SMTP command from unknown[174.138.174.215]
non-SMTP command from 173.192.43.217-static.reverse.softlayer.com[173.192.43.217]
non-SMTP command from 173.192.43.218-static.reverse.softlayer.com[173.192.43.218]
NEW
non-SMTP command from 173.192.43.219-static.reverse.softlayer.com[173.192.43.219]
non-SMTP command from 174.37.176.203-static.reverse.softlayer.com[174.37.176.203]
non-SMTP command from 208.43.163.169-static.reverse.softlayer.com[208.43.163.169]
non-SMTP command from 208.43.163.171-static.reverse.softlayer.com[208.43.163.171]
non-SMTP command from 208.43.163.170-static.reverse.softlayer.com[208.43.163.170]
non-SMTP command from 208.43.171.218-static.reverse.softlayer.com[208.43.171.218]
non-SMTP command from 208.43.172.190-static.reverse.softlayer.com[208.43.172.190]
non-SMTP command from 174.37.176.202-static.reverse.softlayer.com[174.37.176.202]
non-SMTP command from a5.d3.5646.static.theplanet.com[70.86.211.165]
non-SMTP command from b6.d3.5646.static.theplanet.com[70.86.211.182]
non-SMTP command from unknown[208.98.29.105]
non-SMTP command from unknown[208.98.29.77]
non-SMTP command from unknown[208.98.29.89]
non-SMTP command from unknown[173.192.144.18]
non-SMTP command from unknown[69.43.248.15]
non-SMTP command from unknown[69.43.248.30]
non-SMTP command from unknown[69.43.248.47]
non-SMTP command from unknown[69.43.248.62]