Note the SMTP client a0-68.smtp-out.eu-west-1.amazonses.com wasn't whitelisted. It was naturally expired by spamd while still greylisted, due to not retrying in early 2016: Feb 17 00:06:26 teak spamd[12533]: 54.240.0.193: connected (2/1) Feb 17 00:08:01 teak spamd[326]: new entry 54.240.0.193 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-193.smtp-out.eu-west-1.amazonses.com Feb 17 00:08:01 teak spamd[12533]: 54.240.0.193: disconnected after 95 seconds. Feb 17 00:08:21 teak spamd[12533]: 54.240.0.193: connected (3/1) Feb 17 00:09:56 teak spamd[12533]: 54.240.0.193: disconnected after 95 seconds. Feb 17 00:11:03 teak ungrey-robins: 54.240.0.193 a0-193.smtp-out.eu-west-1.amazonses.com. scored 17 (granted grace) Feb 17 00:11:03 teak ungrey-robins: spamdb whitelisted: 54.240.0.193 Feb 17 00:16:57 teak spamd[12533]: 54.240.0.157: connected (1/0) Feb 17 00:18:28 teak spamd[326]: new entry 54.240.0.157 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-157.smtp-out.eu-west-1.amazonses.com Feb 17 00:18:28 teak spamd[12533]: 54.240.0.157: disconnected after 91 seconds. Feb 17 00:27:24 teak spamd[12533]: 54.240.0.105: connected (1/0) Feb 17 00:29:00 teak spamd[326]: new entry 54.240.0.105 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-105.smtp-out.eu-west-1.amazonses.com Feb 17 00:29:00 teak spamd[12533]: 54.240.0.105: disconnected after 96 seconds. Feb 17 01:13:24 teak spamd[12533]: 54.240.0.162: connected (1/0) Feb 17 01:14:59 teak spamd[326]: new entry 54.240.0.162 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-162.smtp-out.eu-west-1.amazonses.com Feb 17 01:14:59 teak spamd[12533]: 54.240.0.162: disconnected after 95 seconds. Feb 17 02:10:45 teak spamd[12533]: 54.240.0.127: connected (1/0) Feb 17 02:12:20 teak spamd[326]: new entry 54.240.0.127 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-127.smtp-out.eu-west-1.amazonses.com Feb 17 02:12:20 teak spamd[12533]: 54.240.0.127: disconnected after 95 seconds. Feb 17 03:32:48 teak spamd[12533]: 54.240.0.68: connected (1/0) Feb 17 03:34:19 teak spamd[326]: new entry 54.240.0.68 from <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> to , helo a0-68.smtp-out.eu-west-1.amazonses.com Feb 17 03:34:19 teak spamd[12533]: 54.240.0.68: disconnected after 91 seconds. Feb 17 04:08:03 teak spamd[18136]: queueing deletion of 54.240.0.193 a0-193.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> Feb 17 04:11:03 teak ungrey-robins: 54.240.0.157 a0-157.smtp-out.eu-west-1.amazonses.com. scored 17 (granted grace) Feb 17 04:11:03 teak ungrey-robins: 54.240.0.68 a0-68.smtp-out.eu-west-1.amazonses.com. scored 13 Feb 17 04:11:04 teak ungrey-robins: 54.240.0.105 a0-105.smtp-out.eu-west-1.amazonses.com. scored 17 (granted grace) Feb 17 04:11:05 teak ungrey-robins: 54.240.0.162 a0-162.smtp-out.eu-west-1.amazonses.com. scored 17 (granted grace) Feb 17 04:11:06 teak ungrey-robins: 54.240.0.127 a0-127.smtp-out.eu-west-1.amazonses.com. scored 16 (granted grace) Feb 17 04:11:06 teak ungrey-robins: spamdb whitelisted: 54.240.0.157 54.240.0.105 54.240.0.162 54.240.0.127 Feb 17 04:19:04 teak spamd[18136]: queueing deletion of 54.240.0.157 a0-157.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> Feb 17 04:29:05 teak spamd[18136]: queueing deletion of 54.240.0.105 a0-105.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> Feb 17 04:44:10 teak postfix/postscreen[30682]: CONNECT from [54.240.0.157]:53298 to [78.33.153.148]:25 Feb 17 04:44:11 teak spamlogd[12344]: inbound 54.240.0.157 Feb 17 04:44:11 teak postfix/dnsblog[24872]: addr 54.240.0.157 listed by domain hostkarma.junkemailfilter.com as 127.0.0.3 Feb 17 04:44:11 teak postfix/dnsblog[24872]: addr 54.240.0.157 listed by domain hostkarma.junkemailfilter.com as 127.0.1.1 Feb 17 04:44:11 teak postfix/dnsblog[8234]: addr 54.240.0.157 listed by domain list.dnswl.org as 127.0.3.1 Feb 17 04:44:11 teak postfix/dnsblog[30008]: addr 54.240.0.157 listed by domain rep.mailspike.net as 127.0.0.17 Feb 17 04:44:11 teak postfix/dnsblog[24671]: addr 54.240.0.157 listed by domain score.senderscore.com as 127.0.4.99 Feb 17 04:44:13 teak postfix/postscreen[30682]: PASS NEW [54.240.0.157]:53298 Feb 17 04:44:13 teak postfix/smtpd[22223]: connect from a0-157.smtp-out.eu-west-1.amazonses.com[54.240.0.157] Feb 17 04:44:14 teak postfix/smtpd[22223]: 3q4mly15ctzT0: client=a0-157.smtp-out.eu-west-1.amazonses.com[54.240.0.157] Feb 17 04:44:14 teak postfix/cleanup[24159]: 3q4mly15ctzT0: message-id=<00000152ec8ca289-b28a125c-8cb1-40be-800e-aa483dbaad38-000000@eu-west-1.amazonses.com> Feb 17 04:44:14 teak postfix/qmgr[26236]: 3q4mly15ctzT0: from=<20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk>, size=19958, nrcpt=1 (queue active) Feb 17 04:44:14 teak dovecot: lmtp(14178): Connect from local Feb 17 04:44:15 teak dovecot: lmtp(14178, redacted): 3rF+M576w1ZiNwAANm01jw: sieve: msgid=<00000152ec8ca289-b28a125c-8cb1-40be-800e-aa483dbaad38-000000@eu-west-1.amazonses.com>: stored mail into mailbox 'INBOX' Feb 17 04:44:15 teak dovecot: lmtp(14178): Disconnect from local: Successful quit Feb 17 04:44:15 teak postfix/lmtp[21618]: 3q4mly15ctzT0: to=, relay=teak.britvault.co.uk[private/dovecot-lmtp], delay=1.2, delays=0.3/0.06/0.52/0.32, dsn=2.0.0, status=sent (250 2.0.0 3rF+M576w1ZiNwAANm01jw Saved) Feb 17 04:44:15 teak postfix/qmgr[26236]: 3q4mly15ctzT0: removed Feb 17 04:44:36 teak postfix/smtpd[22223]: disconnect from a0-157.smtp-out.eu-west-1.amazonses.com[54.240.0.157] Feb 17 05:15:08 teak spamd[18136]: queueing deletion of 54.240.0.162 a0-162.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> Feb 17 06:13:12 teak spamd[18136]: queueing deletion of 54.240.0.127 a0-127.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk> Feb 17 07:35:18 teak spamd[18136]: queueing deletion of 54.240.0.68 a0-68.smtp-out.eu-west-1.amazonses.com <20160217000625750b484d7aae47eba535bb784670p0eu-C85WNG6XLX8SP@bounces.amazon.co.uk>