Thank you for your suggestions. The MTA is not configured as an open relay. Rspamd is handling the spam. I'm only using public-key authentication for SSH.