Hacking attacks with and through aaPanel

CCQT · Jun 17, 2020

wow probably forgot that some cannot read. I wrote that the tracking code is used to later access the IPs it receives and that is from the developer's own network and which is bt.cn (BaoTa), there the scripts are hosted and the IPs are saved there, which aaPanel installed. After a while, the stored IPs are attacked. At the moment we have the pleasure of being attacked by the BaoTa network. aaPanel or aaPanel_Jose has to consider here whether the tracking code has to be, since this gives conclusions about your IPs. I have never said that the aaPanel itself is the cause, indirectly already there is the possibility to stretch the IPs. And this has to be clarified seriously, until then we will convert all servers with aaPanel!

CCQT · Jun 17, 2020

MarcusVinicius the entire network of Baidu is used to carry out hacking attacks all over the world, we have already reported this to RIPE and ICANN are going to get to the bottom of it, let's see what possibilities there are, since he attacks a lot from the region, and this region too is responsible for a number of IP counterfeits and IP thefts. as long as the tracking of IPs remains, we will install another ACP.

JAY · Jun 17, 2020

in my opinion tracking is not problem here as cpanel and plesk have full track of your server IP and domain for licence verification but they have good security and privacy, now weather aapanel tracker how secure is it how details are getting leaked or exposed to hackers that need to find by aapanel team to track

@CQT
if you can provide more info to all users about your experience how to got this info and logs where to checked etc all others can check and provide feedback.
@aaPanel_Jose if he can add geo base blocking under firewall it will great

aaPanel_Jose · Jun 18, 2020

JAY @CQT

aaPanel has a dedicated security team to detect panel security and develop security plug-ins, and our own official website and forum are also using the panel
We have cancelled the installation volume tracking code of the installation script bt.cn, and only keep the transfer to aaPanel
Regarding the system firewall to add the function of shielding a certain country, we will arrange the development
We are paying attention to our own security issues all the time, because our users in Asia have exceeded 3.5 million

CCQT · Jun 18, 2020

Since I myself have only limited knowledge of Py, an employee of mine will take a closer look at the script, we will document every part and also put it up for discussion here. Again we do not want to make aaPanel insinuations, it is only up to Baota and its tracking or reloading of files of unsafe origin. I appreciate the work of aaPanel and the team, I know how difficult it is for them. But I also value data protection and refuse to expose my customers to risk.

KKrzysztofMaciejewski · Jun 18, 2020

CQT great news!

Security is important. Thanks for your professional approach.

MarcusVinicius · Jun 18, 2020

aaPanel_Jose awesome!!! thanks for great service!!! you're best!

MarcusVinicius · Jun 18, 2020

CQT aaPanel_Jose JAY
the security of our servers is of utmost importance! I chose to migrate from webmin to aaPanel because the panel apparently has a lot of security options! I'm sure that our aaPanel, with the help of great programmers, we will have no problems!

CCQT · Jun 24, 2020

These are just Postfix attacks from today and everything is traceable to China via proxies! It is no longer nice

Jun 25 00:58:10 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 00:58:11 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:13 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.16]
Jun 25 00:58:14 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
Jun 25 00:58:14 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
Jun 25 00:58:19 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:20 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:20 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:20 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:21 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:22 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:22 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:23 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:24 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
Jun 25 00:58:25 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 00:58:31 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:31 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:31 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.34]
Jun 25 00:58:31 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:31 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
Jun 25 00:58:31 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:35 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:35 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
Jun 25 00:58:38 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:39 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:39 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:39 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
Jun 25 00:58:39 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
Jun 25 00:58:43 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:44 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:45 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 00:58:45 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 00:58:46 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:46 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:51 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:58:51 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:58:52 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 00:58:53 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
Jun 25 00:58:53 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
Jun 25 00:58:53 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 00:58:54 serv01 clamd[1879]: SelfCheck: Database status OK.
Jun 25 00:59:00 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:00 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:00 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:01 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:01 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:02 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:03 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:03 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:09 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
Jun 25 00:59:10 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
Jun 25 00:59:15 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
Jun 25 00:59:16 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 00:59:16 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:17 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:17 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:17 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
Jun 25 00:59:18 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:19 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.16]
Jun 25 00:59:21 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
Jun 25 00:59:22 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:22 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:23 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:24 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:25 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.34]
Jun 25 00:59:26 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:27 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:27 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:27 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:30 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 00:59:31 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
Jun 25 00:59:31 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 00:59:34 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:34 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
Jun 25 00:59:34 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:38 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:38 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:38 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:39 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:42 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:43 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:43 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.16]
Jun 25 00:59:45 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:45 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 00:59:45 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:48 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
Jun 25 00:59:48 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
Jun 25 00:59:50 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:51 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:52 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:52 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:53 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
Jun 25 00:59:55 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:55 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 00:59:56 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 00:59:56 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:04 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.25]
Jun 25 01:00:04 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
Jun 25 01:00:06 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:00:08 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 01:00:10 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
Jun 25 01:00:11 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:12 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:12 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:12 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:13 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:15 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:15 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:17 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:17 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 01:00:17 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:20 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
Jun 25 01:00:23 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
Jun 25 01:00:24 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 01:00:24 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 01:00:25 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:25 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
Jun 25 01:00:25 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:27 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:27 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:27 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
Jun 25 01:00:28 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:28 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:30 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:30 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:33 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:34 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:36 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:36 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.153]
Jun 25 01:00:36 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:43 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
Jun 25 01:00:43 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:44 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:46 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 01:00:48 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:48 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
Jun 25 01:00:49 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 01:00:50 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:51 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:53 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:53 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:53 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:53 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:56 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:00:56 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:00:58 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
Jun 25 01:00:58 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
Jun 25 01:00:58 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 01:00:58 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 01:00:58 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 01:00:59 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.18]
Jun 25 01:01:04 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:04 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:05 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:05 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:05 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:06 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:06 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
Jun 25 01:01:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:09 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:13 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
Jun 25 01:01:13 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:14 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
Jun 25 01:01:14 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:15 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.34]
Jun 25 01:01:19 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:19 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
Jun 25 01:01:20 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:23 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:24 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:24 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:24 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:27 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:27 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 01:01:28 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:28 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
Jun 25 01:01:29 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 01:01:34 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:34 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
Jun 25 01:01:34 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:35 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:36 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:36 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:37 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:38 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
Jun 25 01:01:42 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
Jun 25 01:01:45 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
Jun 25 01:01:45 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:46 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:49 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
Jun 25 01:01:49 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.153]
Jun 25 01:01:52 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:53 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:53 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:53 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:53 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 01:01:57 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:57 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:01:57 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:01:57 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:01 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:01 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:05 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
Jun 25 01:02:07 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
Jun 25 01:02:10 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
Jun 25 01:02:10 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
Jun 25 01:02:11 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
Jun 25 01:02:14 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:14 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:14 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
Jun 25 01:02:16 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:16 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:17 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:18 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:18 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:18 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
Jun 25 01:02:18 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:18 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:02:22 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:23 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:24 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
Jun 25 01:02:24 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
Jun 25 01:02:25 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:25 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:25 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:26 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:31 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:31 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:31 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:32 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
Jun 25 01:02:35 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:36 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:39 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 01:02:39 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 01:02:40 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
Jun 25 01:02:40 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.153]
Jun 25 01:02:41 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:42 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
Jun 25 01:02:45 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
Jun 25 01:02:47 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:47 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:47 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:47 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:47 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 01:02:49 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:49 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:50 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:50 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:02:54 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
Jun 25 01:02:55 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
Jun 25 01:02:56 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:02:56 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:01 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:02 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:02 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 01:03:05 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
Jun 25 01:03:06 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:06 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:07 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 01:03:09 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:03:09 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.25]
Jun 25 01:03:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:10 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:12 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:13 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:14 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:16 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:16 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:17 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:17 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:18 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:18 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 01:03:18 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 01:03:18 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:24 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
Jun 25 01:03:27 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
Jun 25 01:03:30 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:30 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:30 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:03:30 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
Jun 25 01:03:34 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:34 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:36 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
Jun 25 01:03:37 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:37 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:37 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:37 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:41 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 01:03:42 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:42 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 01:03:42 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:45 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
Jun 25 01:03:47 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
Jun 25 01:03:48 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:49 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:49 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 01:03:50 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:51 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:51 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:51 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:52 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
Jun 25 01:03:55 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:55 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:03:59 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:03:59 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.153]
Jun 25 01:03:59 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
Jun 25 01:03:59 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:02 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 01:04:03 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
Jun 25 01:04:06 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:06 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:10 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:11 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:11 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
Jun 25 01:04:12 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:16 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:17 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:17 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:18 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:19 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.18]
Jun 25 01:04:19 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
Jun 25 01:04:20 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:04:21 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:04:22 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
Jun 25 01:04:25 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:25 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:26 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:26 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:27 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:27 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
Jun 25 01:04:27 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:28 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:28 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:32 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
Jun 25 01:04:33 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:34 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:37 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
Jun 25 01:04:38 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
Jun 25 01:04:41 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
Jun 25 01:04:41 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:41 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:44 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:44 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:44 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:44 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:46 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:48 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:48 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:50 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.153]
Jun 25 01:04:54 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
Jun 25 01:04:56 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
Jun 25 01:04:56 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
Jun 25 01:04:57 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:04:58 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:04:58 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
Jun 25 01:04:58 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.25]
Jun 25 01:04:58 serv01 postfix/smtps/smtpd[29825]: lost connection after RSET from unknown[212.70.149.66]
Jun 25 01:04:58 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 rset=1 commands=2
Jun 25 01:05:01 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:01 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 01:05:02 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:05 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:06 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:06 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:06 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:07 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:07 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:11 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:05:12 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:05:14 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
Jun 25 01:05:16 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
Jun 25 01:05:16 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
Jun 25 01:05:18 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:18 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:18 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:18 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:19 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
Jun 25 01:05:23 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:23 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:25 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:25 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:25 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:25 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:26 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:26 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:27 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
Jun 25 01:05:32 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 01:05:36 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
Jun 25 01:05:37 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:37 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:39 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:39 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
Jun 25 01:05:40 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:05:43 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:43 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:44 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:44 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
Jun 25 01:05:44 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:47 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:47 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:49 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
Jun 25 01:05:50 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:51 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:53 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
Jun 25 01:05:57 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:05:57 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
Jun 25 01:05:57 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:05:58 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
Jun 25 01:06:01 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:02 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:02 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
Jun 25 01:06:02 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:06:05 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:06 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:08 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:08 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:08 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:08 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:09 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:09 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:09 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
Jun 25 01:06:15 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
Jun 25 01:06:15 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
Jun 25 01:06:17 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:06:22 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:22 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:23 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:24 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:26 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 01:06:27 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
Jun 25 01:06:27 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:28 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:31 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.153]
Jun 25 01:06:33 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:33 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:35 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:35 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:36 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
Jun 25 01:06:37 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:37 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:39 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 01:06:42 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:42 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:45 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
Jun 25 01:06:45 serv01 postfix/smtps/smtpd[30221]: connect from unknown[212.70.149.66]
Jun 25 01:06:47 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.16]
Jun 25 01:06:49 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:49 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:50 serv01 dovecot: master: Warning: Killed with signal 15 (by pid=30225 uid=0 code=kill)
Jun 25 01:06:51 serv01 dovecot: auth: Error: auth worker: Aborted PASSV request for leonid@vsecserver.de: Worker process died unexpectedly
Jun 25 01:06:51 serv01 dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Jun 25 01:06:51 serv01 dovecot: log(1317): Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Jun 25 01:06:51 serv01 dovecot: log(1317): Warning: Shutting down logging for 'auth: ' with 1 clients
Jun 25 01:06:52 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
Jun 25 01:06:53 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
Jun 25 01:06:53 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
Jun 25 01:06:56 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: Connection lost to authentication server
Jun 25 01:06:56 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: Connection lost to authentication server
Jun 25 01:06:56 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: Connection lost to authentication server
Jun 25 01:06:56 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:06:56 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: Connection lost to authentication server
Jun 25 01:06:56 serv01 postfix/smtpd[29750]: warning: SASL: Connect to private/auth failed: Connection refused
Jun 25 01:06:56 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed:
Jun 25 01:06:56 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:56 serv01 dovecot: master: Dovecot v2.3.10 (0da0eff44) starting up for imap, pop3, lmtp (core dumps disabled)
Jun 25 01:06:56 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:57 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:57 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:06:57 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:07:06 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
Jun 25 01:07:06 serv01 opendkim[1291]: OpenDKIM Filter: mi_stop=1
Jun 25 01:07:06 serv01 opendkim[1291]: OpenDKIM Filter v2.11.0 terminating with status 0, errno = 0
Jun 25 01:07:06 serv01 opendkim[30251]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid)
Jun 25 01:07:07 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
Jun 25 01:07:09 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
Jun 25 01:07:13 serv01 postfix/postfix-script[30264]: stopping the Postfix mail system
Jun 25 01:07:13 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
Jun 25 01:07:13 serv01 postfix/master[1514]: terminating on signal 15
Jun 25 01:07:13 serv01 dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: EOF
Jun 25 01:07:13 serv01 dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: EOF
Jun 25 01:07:14 serv01 postfix/postfix-script[30349]: starting the Postfix mail system
Jun 25 01:07:14 serv01 postfix/master[30351]: daemon started -- version 3.4.7, configuration /etc/postfix
Jun 25 01:07:15 serv01 postfix/smtpd[30354]: connect from unknown[212.70.149.2]
Jun 25 01:07:21 serv01 postfix/smtpd[30359]: connect from unknown[185.143.75.153]
Jun 25 01:07:21 serv01 postfix/smtpd[30361]: connect from unknown[185.143.72.25]
Jun 25 01:07:22 serv01 postfix/smtpd[30354]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:07:22 serv01 postfix/smtpd[30363]: connect from unknown[212.70.149.18]
Jun 25 01:07:23 serv01 postfix/smtpd[30354]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:07:28 serv01 postfix/smtpd[30359]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:07:28 serv01 postfix/smtpd[30361]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:07:28 serv01 postfix/smtpd[30359]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:07:29 serv01 postfix/smtpd[30361]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:07:29 serv01 postfix/smtpd[30363]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:07:30 serv01 postfix/smtpd[30363]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 25 01:07:31 serv01 postfix/smtpd[30354]: connect from unknown[212.70.149.2]
Jun 25 01:07:38 serv01 postfix/smtpd[30363]: connect from unknown[185.143.72.34]

KKrzysztofMaciejewski · Jun 24, 2020

use https://www.ip2location.com/free/visitor-blocker and block by Fail2Ban

CCQT · Jun 24, 2020

Sorry has been installed and configured for weeks, just doesn't seem to work !!!

I'm from the hosting business and I know how to administer a server!

KrzysztofMaciejewski Nice that you want to help, but to make everyone look as if they were the first day in busines

CCQT · Jun 24, 2020

Domain has been changed!
server
{
listen 80;
listen 443 ssl http2;
server_name solutions.de aapan.solutions.de *.solutions.de;
index index.php index.html index.htm default.php default.htm default.html;
root /www/wwwroot/solutions.de;
if ($allowed_country = yes) { return 403; }
#SSL-START SSL related configuration, do NOT delete or modify the next line of commented-out 404 rules
#error_page 404/404.html;
limit_conn perserver 400;
limit_conn perip 15;
limit_rate 1024k;
#HTTP_TO_HTTPS_START
if ($server_port !~ 443){
rewrite ^/.*$ https://$host$1 permanent;
}
#HTTP_TO_HTTPS_END
ssl_certificate /www/server/panel/vhost/cert/solutions.de/fullchain.pem;
ssl_certificate_key /www/server/panel/vhost/cert/solutions.de/privkey.pem;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
error_page 497 https://$host$request_uri;

#SSL-END
#Directory protection rules, do not manually delete
include /www/server/panel/vhost/nginx/dir_auth/solutions.de/*.conf;

#ERROR-PAGE-START  Error page configuration, allowed to be commented, deleted or modified
#error_page 404 /404.html;
#error_page 502 /502.html;
#ERROR-PAGE-END

#PHP-INFO-START  PHP reference configuration, allowed to be commented, deleted or modified
##SECURITY-START Hotlink protection configuration
location ~ .*\.(jpg|jpeg|gif|png|js|css)$
{
    expires      30d;
    access_log off;
    valid_referers none blocked aapan.solutions.de solutions.de *.solutions.de;
    if ($invalid_referer){
       return 404;
    }
}
#SECURITY-END
include enable-php-73.conf;
#PHP-INFO-END

#REWRITE-START URL rewrite rule reference, any modification will invalidate the rewrite rules set by the panel
include /www/server/panel/vhost/rewrite/solutions.de.conf;
#REWRITE-END

# Forbidden files or directories
location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
{
    return 404;
}

# Directory verification related settings for one-click application for SSL certificate
location ~ \.well-known{
    allow all;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
    expires      30d;
    error_log on;
    access_log on;
}

location ~ .*\.(js|css)?$
{
    expires      12h;
    error_log on;
    access_log on; 
}
access_log  /www/wwwlogs/solutions.de.log;
error_log  /www/wwwlogs/solutions.de.error.log;

Ggacott · Jun 24, 2020

CQT Hey man, I am assuming that the reason you are getting all of these attacks from China is because that's where the CP is from, and it looks to be very popular there. They probably scan the internet for certain footprints of the server and just try to get in any way they can. It doesn't look/sound like it's an issue of security of the software, just that it's targeted. Are you not using Cloudflare?

CCQT · Jun 24, 2020

This is exactly my concern that CP comes from China and is misused to attack servers. Not all of our customers use Cloudflare. It is still possible to stretch the IPs of the servers on which the CP is installed and that is exactly what I consider to be very dangerous.

JAY · Jun 24, 2020

iam runing aapanel on 3 servers i never had any attacks from china but still jose is going to give solution on this..

CCQT · Jun 24, 2020

We have installed it on VPS for our customers well over 100 installations, until a few days everything was fine, for a few days we have been attacked continuously and the customers are freaking out. Now we are gradually changing everything over to a different panel, but we are leaving our test server running and installed a different test server 3 days ago but with a different IP range, so we took completely separate data centers and did it again same problem. There are only domains active, but also no content on the websites, so that no Wordpress or the like is installed, so it can not come, server itself is absolutely clean, a CENTOS 7 and 8, but we can all attacks up to China and trace 2% of Russia.

CCQT · Jun 24, 2020

JAY I hope so, because Plesk is worse and costs too much money in licenses. We don't want to save on security, but open source is better.

CCQT · Jul 4, 2020

<div class="copyright">Copyright © 2014-2099 <a href="http://www.bt.cn" target="blank">{{data['lan']['BT']}}</a>{{data['lan']['PS1']}}(<a href="http://www.bt.cn" target="blank">www.bt.cn</a>) All Rights Reserved</div>

If the question arises as to why the data logger must be present in the copyrights, all data can be recorded.
From then on, passwords username and other data are recorded.

thiagotgc · Jul 4, 2020

@aaPanel_Jose

Because of these things I made a request to implement the GeoIP option to Firewall / Fail2Ban

That way, it would be enough to add blocking by country directly to the Firewall, or add to Fail2ban to block a country after 20 invasion attempts eg.

https://www.aapanel.com/forum/d/1392-ideas-to-improve-the-panel/8

CCQT · Jul 4, 2020

Yes just stupid that this is already in Install.html and records everything before Fail2ban