> Am 09.09.2026 um 08:01 schrieb Ralf Hildebrandt via Postfix-users > <[email protected]>: > > > This very much looks like crap, but WTF is going on?
Same on my servers. It started with http requests for paths like .git, .env etc and has now hit my mail servers as well. Always support@, always from googleuser IPs, always a protocol error. They are trying to send spam mails with bare linefeeds, which you probably have turned off. My guess is that they are using the free trial of google cloud services to send their spam. Cheers, Simon > > 2026-09-09T07:58:20.956152+02:00 mail-ccm-int postfix/postscreen[543022]: > NOQUEUE: reject: RCPT from [34.148.33.149]:59346: 550 5.5.1 Protocol error; > from=<[email protected]>, to=<[email protected]>, proto=SMTP, > helo=<evasia.net> > 2026-09-09T07:58:22.612003+02:00 mail-ccm-int postfix/postscreen[543022]: > NOQUEUE: reject: RCPT from [34.106.79.140]:46528: 550 5.5.1 Protocol error; > from=<[email protected]>, to=<[email protected]>, proto=SMTP, > helo=<eurobunker-arena.com> > > It's all using envelope sender addresses og "support@..." > > -- > Ralf Hildebrandt > Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration > Invalidenstraße 120/121 | D-10115 Berlin > Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 > [email protected] | https://www.charite.de > > _______________________________________________ > Postfix-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
