He doesn't run a spam filter and he's using a catch all, therefore any email sent to any address on his domain will get to him.
If someone was just trying things to see what worked he would see those emails.
If someone was just trying things to see what worked he would see those emails.
I could be wrong and it's possible that some filtering was happening on the ISPs side, but you'd think that of the thousands of spams that get through, there would be some that looked like guesses.