Hello, for a number of days, "no-re...@sharepointonline.com" is sending mails to non-existent addresses (many of which are quite certainly imported from some circulating address list, as we have seen them being targeted for years).
Mar 15 11:58:49 mail postfix/smtpd[19571]: NOQUEUE: hold: RCPT from mail-dm6nam10on2085.outbound.protection.outlook.com[40.107.93.85]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<kooky@***.de> proto=ESMTP helo=<NAM10-DM6-obe.outbound.protection.outlook.com> Mar 15 11:58:49 mail postfix/smtpd[19571]: NOQUEUE: reject: RCPT from mail-dm6nam10on2085.outbound.protection.outlook.com[40.107.93.85]: 550 5.1.1 <kooky@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<kooky@***.de> proto=ESMTP helo=<NAM10-DM6-obe.outbound.protection.outlook.com> Mar 15 12:31:25 mail postfix/smtpd[27589]: NOQUEUE: hold: RCPT from mail-mw2nam10hn2210.outbound.protection.outlook.com[52.100.157.210]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<kodai@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 12:31:25 mail postfix/smtpd[27589]: NOQUEUE: reject: RCPT from mail-mw2nam10hn2210.outbound.protection.outlook.com[52.100.157.210]: 550 5.1.1 <kodai@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<kodai@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 19:59:48 mail postfix/smtpd[4005]: NOQUEUE: hold: RCPT from mail-mw2nam10on2053.outbound.protection.outlook.com[40.107.94.53]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<ken64@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 19:59:48 mail postfix/smtpd[4005]: NOQUEUE: reject: RCPT from mail-mw2nam10on2053.outbound.protection.outlook.com[40.107.94.53]: 550 5.1.1 <ken64@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<ken64@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 20:18:53 mail postfix/smtpd[8528]: NOQUEUE: hold: RCPT from mail-mw2nam10hn2242.outbound.protection.outlook.com[52.100.157.242]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<kellyt@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 20:18:53 mail postfix/smtpd[8528]: NOQUEUE: reject: RCPT from mail-mw2nam10hn2242.outbound.protection.outlook.com[52.100.157.242]: 550 5.1.1 <kellyt@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<kellyt@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 20:35:33 mail postfix/smtpd[9253]: NOQUEUE: hold: RCPT from mail-dm6nam10on2085.outbound.protection.outlook.com[40.107.93.85]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<kellens@***.de> proto=ESMTP helo=<NAM10-DM6-obe.outbound.protection.outlook.com> Mar 15 20:35:33 mail postfix/smtpd[9253]: NOQUEUE: reject: RCPT from mail-dm6nam10on2085.outbound.protection.outlook.com[40.107.93.85]: 550 5.1.1 <kellens@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<kellens@***.de> proto=ESMTP helo=<NAM10-DM6-obe.outbound.protection.outlook.com> Mar 15 21:09:06 mail postfix/smtpd[16574]: NOQUEUE: hold: RCPT from mail-mw2nam10on2071.outbound.protection.outlook.com[40.107.94.71]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<keil@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 21:09:06 mail postfix/smtpd[16574]: NOQUEUE: reject: RCPT from mail-mw2nam10on2071.outbound.protection.outlook.com[40.107.94.71]: 550 5.1.1 <keil@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<keil@***.de> proto=ESMTP helo=<NAM10-MW2-obe.outbound.protection.outlook.com> Mar 15 22:19:09 mail postfix/smtpd[3932]: NOQUEUE: hold: RCPT from mail-bn7nam10hn2204.outbound.protection.outlook.com[52.100.155.204]: <no-re...@sharepointonline.com>: Sender address triggers HOLD action; from=<no-re...@sharepointonline.com> to=<kbyrne@***.de> proto=ESMTP helo=<NAM10-BN7-obe.outbound.protection.outlook.com> Mar 15 22:19:10 mail postfix/smtpd[3932]: NOQUEUE: reject: RCPT from mail-bn7nam10hn2204.outbound.protection.outlook.com[52.100.155.204]: 550 5.1.1 <kbyrne@***.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<no-re...@sharepointonline.com> to=<kbyrne@***.de> proto=ESMTP helo=<NAM10-BN7-obe.outbound.protection.outlook.com> I reported this to Microsoft abuse a week ago, they didn't respond and apparently didn't react either. What's the scoop? Cheers, Hans-Martin _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
