I have this regularly. My catch all gets emails from a bot that tries common first names at my domain, but sometimes really weird ones as well, seemingly random such as a23ssaaaa@example.com