Hier die Postfix-Logs:
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: PREGREET 215 after 0 from [5.8.10.202]:41344: GET /aaa9 HTTP/1.1\r\nHost: 94.130.105.0:25\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1981]: addr 5.8.10.202 listed by domain zen.spamhaus.org as 127.0.0.4
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1982]: addr 5.8.10.202 listed by domain bl.mailspike.net as 127.0.0.2
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DNSBL rank 11 for [5.8.10.202]:41344
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: NON-SMTP COMMAND from [5.8.10.202]:41344 after CONNECT: GET /aaa9 HTTP/1.1
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DISCONNECT [5.8.10.202]:41344
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: CONNECT from [5.8.10.202]:41734 to [172.22.1.253]:25
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa whitelist_forwardinghosts: Look up 5.8.10.202 on whitelist, result 200 DUNNO
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: PREGREET 239 after 0 from [5.8.10.202]:41734: \026\003\001\000\352\001\000\000\346\003\003\271\2017
@\332\277N\327\356\025\245\272\261I\232\213\35
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1972]: addr 5.8.10.202 listed by domain zen.spamhaus.org as 127.0.0.4
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1977]: addr 5.8.10.202 listed by domain bl.mailspike.net as 127.0.0.2
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DNSBL rank 11 for [5.8.10.202]:41734
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: BARE NEWLINE from [5.8.10.202]:41734 after \026\003\001\000\352\001\000\000\346\003\003\271\2017@\332\277N\327\356\025\245\272\261I\232\213\355}\220c'\265f\301\352Z\201]Y\373\210 \363\237\242\241\233\341\350v\325\366\2065\025o{w-\021E\352\373\300\032|\t\005X0-\035~\246\000&\314\251\314\250\300+\300/\300,\3000\300\t\300\023\300
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: COMMAND PIPELINING from [5.8.10.202]:41734 after ???: \300\024\000\234\000\235\000/\0005\300\022\000\n\023\003\023\001\023\002\001\000\000w\000\005\000\005\001\000\000\000\000\000\n\000\n\000\b\000\035\000\027\000\030\000\031\000\v\000\002\001\000\000\r\000\032\000\030\b\004\004\003\b\a\b\005\b\006\004\001\005\001\006\001\005\003\006\003\002\001\002\003\377\001\000\001\000\000\022\000\000\000+\000\005\004\003\004\003
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: HANGUP after 0.04 from [5.8.10.202]:41734 in tests after SMTP handshake
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DISCONNECT [5.8.10.202]:41734
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: CONNECT from [5.8.10.202]:42052 to [172.22.1.253]:25
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa whitelist_forwardinghosts: Look up 5.8.10.202 on whitelist, result 200 DUNNO
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: PREGREET 215 after 0 from [5.8.10.202]:42052: GET /aab9 HTTP/1.1\r\nHost: 94.130.105.0:25\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1982]: addr 5.8.10.202 listed by domain bl.mailspike.net as 127.0.0.2
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/dnsblog[1972]: addr 5.8.10.202 listed by domain zen.spamhaus.org as 127.0.0.4
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DNSBL rank 11 for [5.8.10.202]:42052
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: NON-SMTP COMMAND from [5.8.10.202]:42052 after CONNECT: GET /aab9 HTTP/1.1
mailcowdockerized-postfix-mailcow-1 | Jul 27 06:17:28 d5ad28458daa postfix/postscreen[1963]: DISCONNECT [5.8.10.202]:42052
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:37 d5ad28458daa postfix/postscreen[2213]: CONNECT from [52.55.244.91]:17717 to [172.22.1.253]:25
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:37 d5ad28458daa whitelist_forwardinghosts: Look up 52.55.244.91 on whitelist, result 200 DUNNO
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:37 d5ad28458daa postfix/dnsblog[2228]: addr 52.55.244.91 listed by domain list.dnswl.org as 127.0.3.2
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:37 d5ad28458daa postfix/dnsblog[2224]: addr 52.55.244.91 listed by domain hostkarma.junkemailfilter.com as 127.0.0.1
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:37 d5ad28458daa postfix/dnsblog[2224]: addr 52.55.244.91 listed by domain hostkarma.junkemailfilter.com as 127.0.1.1
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:38 d5ad28458daa postfix/postscreen[2213]: PASS OLD [52.55.244.91]:17717
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:38 d5ad28458daa postfix/smtpd[2233]: connect from keeper-us-east-1b.mxtoolbox.com[52.55.244.91]
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:38 d5ad28458daa postfix/smtpd[2233]: NOQUEUE: reject: RCPT from keeper-us-east-1b.mxtoolbox.com[52.55.244.91]: 554 5.7.1 <test@mxtoolboxsmtpdiag.com>: Relay access denied; from=<supertool@mxtoolboxsmtpdiag.com> to=<test@mxtoolboxsmtpdiag.com> proto=ESMTP helo=<keeper-us-east-1b.mxtoolbox.com>
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:03:39 d5ad28458daa postfix/smtpd[2233]: disconnect from keeper-us-east-1b.mxtoolbox.com[52.55.244.91] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:06:59 d5ad28458daa postfix/anvil[2234]: statistics: max connection rate 1/60s for (smtpd:52.55.244.91) at Jul 27 08:03:38
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:06:59 d5ad28458daa postfix/anvil[2234]: statistics: max connection count 1 for (smtpd:52.55.244.91) at Jul 27 08:03:38
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:06:59 d5ad28458daa postfix/anvil[2234]: statistics: max cache size 1 at Jul 27 08:03:38
mailcowdockerized-postfix-mailcow-1 | Jul 27 08:07:30 d5ad28458daa postfix/postscreen[2246]: warning: getpeername: Transport endpoint is not connected -- dropping this connection
und die Dovecot-Logs:
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:21 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:21 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:46 8988c13f9992 dovecot: lmtp(34958): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:46 8988c13f9992 dovecot: lmtp(34958): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:46 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS: Connection closed, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:46 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:09:46 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:10:56 8988c13f9992 dovecot: lmtp(35035): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:10:56 8988c13f9992 dovecot: lmtp(35035): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:10:56 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS: Connection closed, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:10:56 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:10:56 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:11:37 8988c13f9992 dovecot: lmtp(35035): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:11:37 8988c13f9992 dovecot: lmtp(35035): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:11:37 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS: Connection closed, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:11:37 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:11:37 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:12:48 8988c13f9992 dovecot: lmtp(35107): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:12:48 8988c13f9992 dovecot: lmtp(35107): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:12:48 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:12:48 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:12:48 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:42 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:51 8988c13f9992 dovecot: lmtp(35164): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:51 8988c13f9992 dovecot: lmtp(35164): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:52 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:52 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:13:52 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:14:55 8988c13f9992 dovecot: lmtp(35200): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:14:55 8988c13f9992 dovecot: lmtp(35200): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:14:55 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS: Connection closed, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:14:55 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:14:55 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:16:03 8988c13f9992 dovecot: lmtp(35268): Connect from 172.22.1.4
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:16:03 8988c13f9992 dovecot: lmtp(35268): Disconnect from 172.22.1.4: Logged out (state=MAIL FROM)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:16:03 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:16:03 8988c13f9992 dovecot: imap-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250
mailcowdockerized-dovecot-mailcow-1 | Jul 27 09:16:03 8988c13f9992 dovecot: managesieve-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=172.22.1.4, lip=172.22.1.250