in my opinion tracking is not problem here as cpanel and plesk have full track of your server IP and domain for licence verification but they have good security and privacy, now weather aapanel tracker how secure is it how details are getting leaked or exposed to hackers that need to find by aapanel team to track

@CQT
if you can provide more info to all users about your experience how to got this info and logs where to checked etc all others can check and provide feedback.
@aaPanel_Jose if he can add geo base blocking under firewall it will great

    JAY @CQT

    • aaPanel has a dedicated security team to detect panel security and develop security plug-ins, and our own official website and forum are also using the panel
    • We have cancelled the installation volume tracking code of the installation script bt.cn, and only keep the transfer to aaPanel
    • Regarding the system firewall to add the function of shielding a certain country, we will arrange the development
    • We are paying attention to our own security issues all the time, because our users in Asia have exceeded 3.5 million

        Since I myself have only limited knowledge of Py, an employee of mine will take a closer look at the script, we will document every part and also put it up for discussion here. Again we do not want to make aaPanel insinuations, it is only up to Baota and its tracking or reloading of files of unsafe origin. I appreciate the work of aaPanel and the team, I know how difficult it is for them. But I also value data protection and refuse to expose my customers to risk.

          CQT aaPanel_Jose JAY
          the security of our servers is of utmost importance! I chose to migrate from webmin to aaPanel because the panel apparently has a lot of security options! I'm sure that our aaPanel, with the help of great programmers, we will have no problems!

                6 days later

                These are just Postfix attacks from today and everything is traceable to China via proxies! It is no longer nice

                Jun 25 00:58:10 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 00:58:11 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:13 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.16]
                Jun 25 00:58:14 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
                Jun 25 00:58:14 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
                Jun 25 00:58:19 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:20 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:20 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:20 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:21 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:22 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:22 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:23 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:24 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
                Jun 25 00:58:25 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 00:58:31 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:31 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:31 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.34]
                Jun 25 00:58:31 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:31 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
                Jun 25 00:58:31 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:35 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:35 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
                Jun 25 00:58:38 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:39 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:39 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:39 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
                Jun 25 00:58:39 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
                Jun 25 00:58:43 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:44 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:45 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 00:58:45 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 00:58:46 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:46 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:51 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:58:51 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:58:52 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 00:58:53 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
                Jun 25 00:58:53 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
                Jun 25 00:58:53 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 00:58:54 serv01 clamd[1879]: SelfCheck: Database status OK.
                Jun 25 00:59:00 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:00 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:00 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:01 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:01 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:02 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:03 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:03 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:09 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
                Jun 25 00:59:10 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
                Jun 25 00:59:15 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
                Jun 25 00:59:16 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 00:59:16 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:17 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:17 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:17 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
                Jun 25 00:59:18 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:19 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.16]
                Jun 25 00:59:21 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
                Jun 25 00:59:22 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:22 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:23 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:24 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:25 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.34]
                Jun 25 00:59:26 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:27 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:27 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:27 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:30 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 00:59:31 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
                Jun 25 00:59:31 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 00:59:34 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:34 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
                Jun 25 00:59:34 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:38 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:38 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:38 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:39 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:42 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:43 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:43 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.16]
                Jun 25 00:59:45 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:45 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 00:59:45 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:48 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
                Jun 25 00:59:48 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
                Jun 25 00:59:50 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:51 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:52 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:52 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:53 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
                Jun 25 00:59:55 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:55 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 00:59:56 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 00:59:56 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:04 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.25]
                Jun 25 01:00:04 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
                Jun 25 01:00:06 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:00:08 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 01:00:10 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
                Jun 25 01:00:11 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:12 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:12 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:12 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:13 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:15 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:15 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:17 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:17 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 01:00:17 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:20 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
                Jun 25 01:00:23 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
                Jun 25 01:00:24 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 01:00:24 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 01:00:25 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:25 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
                Jun 25 01:00:25 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:27 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:27 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:27 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
                Jun 25 01:00:28 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:28 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:30 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:30 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:33 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:34 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:36 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:36 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.153]
                Jun 25 01:00:36 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:43 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
                Jun 25 01:00:43 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:44 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:46 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 01:00:48 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:48 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
                Jun 25 01:00:49 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 01:00:50 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:51 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:53 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:53 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:53 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:53 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:56 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:00:56 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:00:58 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
                Jun 25 01:00:58 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
                Jun 25 01:00:58 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 01:00:58 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 01:00:58 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 01:00:59 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.18]
                Jun 25 01:01:04 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:04 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:05 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:05 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:05 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:06 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:06 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
                Jun 25 01:01:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:09 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:13 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
                Jun 25 01:01:13 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:14 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.81]
                Jun 25 01:01:14 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:15 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.34]
                Jun 25 01:01:19 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:19 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
                Jun 25 01:01:20 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:23 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:24 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:24 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:24 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:27 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:27 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 01:01:28 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:28 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
                Jun 25 01:01:29 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 01:01:34 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:34 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
                Jun 25 01:01:34 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:35 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:36 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:36 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:37 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:38 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
                Jun 25 01:01:42 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
                Jun 25 01:01:45 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
                Jun 25 01:01:45 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:46 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:49 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
                Jun 25 01:01:49 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.153]
                Jun 25 01:01:52 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:53 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:53 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:53 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:53 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 01:01:57 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:57 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:01:57 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:01:57 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:01 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:01 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:05 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
                Jun 25 01:02:07 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.2]
                Jun 25 01:02:10 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.34]
                Jun 25 01:02:10 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
                Jun 25 01:02:11 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
                Jun 25 01:02:14 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:14 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:14 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.25]
                Jun 25 01:02:16 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:16 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:17 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:18 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:18 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:18 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
                Jun 25 01:02:18 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:18 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:02:22 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:23 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:24 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
                Jun 25 01:02:24 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
                Jun 25 01:02:25 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:25 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:25 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:26 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:31 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:31 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:31 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:32 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
                Jun 25 01:02:35 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:36 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:39 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 01:02:39 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 01:02:40 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
                Jun 25 01:02:40 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.153]
                Jun 25 01:02:41 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:42 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
                Jun 25 01:02:45 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.2]
                Jun 25 01:02:47 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:47 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:47 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:47 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:47 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 01:02:49 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:49 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:50 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:50 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:02:54 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
                Jun 25 01:02:55 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
                Jun 25 01:02:56 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:02:56 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:01 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:02 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:02 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 01:03:05 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
                Jun 25 01:03:06 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:06 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:07 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 01:03:09 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:03:09 serv01 postfix/smtpd[29491]: connect from unknown[185.143.72.25]
                Jun 25 01:03:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:10 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:12 serv01 postfix/smtps/smtpd[29825]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:13 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:14 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:16 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:16 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:17 serv01 postfix/smtpd[29491]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:17 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:18 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:18 serv01 postfix/smtps/smtpd[29825]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 01:03:18 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 01:03:18 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:24 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.2]
                Jun 25 01:03:27 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
                Jun 25 01:03:30 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:30 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:30 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:03:30 serv01 postfix/smtpd[29750]: connect from unknown[185.143.75.153]
                Jun 25 01:03:34 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:34 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:36 serv01 postfix/smtpd[29491]: connect from unknown[212.70.149.18]
                Jun 25 01:03:37 serv01 postfix/smtpd[29750]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:37 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:37 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:37 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:41 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 01:03:42 serv01 postfix/smtpd[29491]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:42 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 01:03:42 serv01 postfix/smtpd[29491]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:45 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
                Jun 25 01:03:47 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
                Jun 25 01:03:48 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:49 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:49 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 01:03:50 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:51 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:51 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:51 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:52 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
                Jun 25 01:03:55 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:55 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:03:59 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:03:59 serv01 postfix/smtpd[29491]: connect from unknown[185.143.75.153]
                Jun 25 01:03:59 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
                Jun 25 01:03:59 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:02 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 01:04:03 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.25]
                Jun 25 01:04:06 serv01 postfix/smtpd[29491]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:06 serv01 postfix/smtpd[29491]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:09 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:10 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:11 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:11 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.16]
                Jun 25 01:04:12 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:16 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:17 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:17 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:18 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:19 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.18]
                Jun 25 01:04:19 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
                Jun 25 01:04:20 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:04:21 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:04:22 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
                Jun 25 01:04:25 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:25 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:26 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:26 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:27 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:27 serv01 postfix/smtps/smtpd[29825]: connect from unknown[212.70.149.66]
                Jun 25 01:04:27 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:28 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:28 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:32 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
                Jun 25 01:04:33 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:34 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:37 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
                Jun 25 01:04:38 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.81]
                Jun 25 01:04:41 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
                Jun 25 01:04:41 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:41 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:44 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:44 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:44 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:44 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:46 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:48 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:48 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:50 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.153]
                Jun 25 01:04:54 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
                Jun 25 01:04:56 serv01 postfix/smtps/smtpd[27815]: lost connection after AUTH from unknown[212.70.149.66]
                Jun 25 01:04:56 serv01 postfix/smtps/smtpd[27815]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
                Jun 25 01:04:57 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:04:58 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:04:58 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
                Jun 25 01:04:58 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.25]
                Jun 25 01:04:58 serv01 postfix/smtps/smtpd[29825]: lost connection after RSET from unknown[212.70.149.66]
                Jun 25 01:04:58 serv01 postfix/smtps/smtpd[29825]: disconnect from unknown[212.70.149.66] ehlo=1 rset=1 commands=2
                Jun 25 01:05:01 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:01 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 01:05:02 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:05 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:06 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:06 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:06 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:07 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:07 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:11 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:05:12 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:05:14 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.18]
                Jun 25 01:05:16 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.16]
                Jun 25 01:05:16 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
                Jun 25 01:05:18 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:18 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:18 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:18 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:19 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
                Jun 25 01:05:23 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:23 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:25 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:25 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:25 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:25 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:26 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:26 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:27 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.81]
                Jun 25 01:05:32 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 01:05:36 serv01 postfix/smtpd[29950]: connect from unknown[212.70.149.2]
                Jun 25 01:05:37 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:37 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:39 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:39 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:40 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
                Jun 25 01:05:40 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:05:43 serv01 postfix/smtpd[29950]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:43 serv01 postfix/smtpd[29950]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:44 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:44 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.18]
                Jun 25 01:05:44 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:47 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:47 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:49 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.34]
                Jun 25 01:05:50 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:51 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:53 serv01 postfix/smtpd[29999]: connect from unknown[185.143.72.25]
                Jun 25 01:05:57 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:05:57 serv01 postfix/smtpd[29932]: connect from unknown[212.70.149.18]
                Jun 25 01:05:57 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:05:58 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
                Jun 25 01:06:01 serv01 postfix/smtpd[29999]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:02 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:02 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
                Jun 25 01:06:02 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:06:05 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:06 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:08 serv01 postfix/smtpd[29932]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:08 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:08 serv01 postfix/smtpd[29932]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:08 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:09 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:09 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:09 serv01 postfix/smtps/smtpd[27815]: connect from unknown[212.70.149.66]
                Jun 25 01:06:15 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
                Jun 25 01:06:15 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
                Jun 25 01:06:17 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:06:22 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:22 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:23 serv01 postfix/smtpd[29950]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:24 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:26 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 01:06:27 serv01 postfix/smtpd[29750]: connect from unknown[185.143.72.25]
                Jun 25 01:06:27 serv01 postfix/smtpd[30019]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:28 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:31 serv01 postfix/smtpd[29932]: connect from unknown[185.143.75.153]
                Jun 25 01:06:33 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:33 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:35 serv01 postfix/smtpd[29750]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:35 serv01 postfix/smtpd[29750]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:36 serv01 postfix/smtpd[30019]: connect from unknown[212.70.149.2]
                Jun 25 01:06:37 serv01 postfix/smtpd[29932]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:37 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:39 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 01:06:42 serv01 postfix/smtpd[30019]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:42 serv01 postfix/smtpd[30019]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:45 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.34]
                Jun 25 01:06:45 serv01 postfix/smtps/smtpd[30221]: connect from unknown[212.70.149.66]
                Jun 25 01:06:47 serv01 postfix/smtpd[30019]: connect from unknown[185.143.72.16]
                Jun 25 01:06:49 serv01 postfix/smtpd[29999]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:49 serv01 postfix/smtpd[29999]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:50 serv01 dovecot: master: Warning: Killed with signal 15 (by pid=30225 uid=0 code=kill)
                Jun 25 01:06:51 serv01 dovecot: auth: Error: auth worker: Aborted PASSV request for leonid@vsecserver.de: Worker process died unexpectedly
                Jun 25 01:06:51 serv01 dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
                Jun 25 01:06:51 serv01 dovecot: log(1317): Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
                Jun 25 01:06:51 serv01 dovecot: log(1317): Warning: Shutting down logging for 'auth: ' with 1 clients
                Jun 25 01:06:52 serv01 postfix/smtpd[29950]: connect from unknown[185.143.75.81]
                Jun 25 01:06:53 serv01 postfix/smtpd[29999]: connect from unknown[185.143.75.153]
                Jun 25 01:06:53 serv01 postfix/smtpd[29750]: connect from unknown[212.70.149.2]
                Jun 25 01:06:56 serv01 postfix/smtpd[29999]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: Connection lost to authentication server
                Jun 25 01:06:56 serv01 postfix/smtpd[29932]: warning: unknown[185.143.72.34]: SASL LOGIN authentication failed: Connection lost to authentication server
                Jun 25 01:06:56 serv01 postfix/smtpd[29950]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: Connection lost to authentication server
                Jun 25 01:06:56 serv01 postfix/smtpd[30019]: warning: unknown[185.143.72.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:06:56 serv01 postfix/smtps/smtpd[27815]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: Connection lost to authentication server
                Jun 25 01:06:56 serv01 postfix/smtpd[29750]: warning: SASL: Connect to private/auth failed: Connection refused
                Jun 25 01:06:56 serv01 postfix/smtpd[29750]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed:
                Jun 25 01:06:56 serv01 postfix/smtpd[29950]: disconnect from unknown[185.143.75.81] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:56 serv01 dovecot: master: Dovecot v2.3.10 (0da0eff44) starting up for imap, pop3, lmtp (core dumps disabled)
                Jun 25 01:06:56 serv01 postfix/smtpd[29999]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:57 serv01 postfix/smtpd[29932]: disconnect from unknown[185.143.72.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:57 serv01 postfix/smtpd[30019]: disconnect from unknown[185.143.72.16] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:06:57 serv01 postfix/smtpd[29750]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:07:06 serv01 postfix/smtpd[29950]: connect from unknown[185.143.72.34]
                Jun 25 01:07:06 serv01 opendkim[1291]: OpenDKIM Filter: mi_stop=1
                Jun 25 01:07:06 serv01 opendkim[1291]: OpenDKIM Filter v2.11.0 terminating with status 0, errno = 0
                Jun 25 01:07:06 serv01 opendkim[30251]: OpenDKIM Filter v2.11.0 starting (args: -x /etc/opendkim.conf -P /var/run/opendkim/opendkim.pid)
                Jun 25 01:07:07 serv01 postfix/smtpd[30019]: connect from unknown[185.143.75.81]
                Jun 25 01:07:09 serv01 postfix/smtpd[29999]: connect from unknown[212.70.149.18]
                Jun 25 01:07:13 serv01 postfix/postfix-script[30264]: stopping the Postfix mail system
                Jun 25 01:07:13 serv01 postfix/smtpd[29932]: connect from unknown[185.143.72.16]
                Jun 25 01:07:13 serv01 postfix/master[1514]: terminating on signal 15
                Jun 25 01:07:13 serv01 dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: EOF
                Jun 25 01:07:13 serv01 dovecot: auth: Warning: auth client 0 disconnected with 1 pending requests: EOF
                Jun 25 01:07:14 serv01 postfix/postfix-script[30349]: starting the Postfix mail system
                Jun 25 01:07:14 serv01 postfix/master[30351]: daemon started -- version 3.4.7, configuration /etc/postfix
                Jun 25 01:07:15 serv01 postfix/smtpd[30354]: connect from unknown[212.70.149.2]
                Jun 25 01:07:21 serv01 postfix/smtpd[30359]: connect from unknown[185.143.75.153]
                Jun 25 01:07:21 serv01 postfix/smtpd[30361]: connect from unknown[185.143.72.25]
                Jun 25 01:07:22 serv01 postfix/smtpd[30354]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:07:22 serv01 postfix/smtpd[30363]: connect from unknown[212.70.149.18]
                Jun 25 01:07:23 serv01 postfix/smtpd[30354]: disconnect from unknown[212.70.149.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:07:28 serv01 postfix/smtpd[30359]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:07:28 serv01 postfix/smtpd[30361]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:07:28 serv01 postfix/smtpd[30359]: disconnect from unknown[185.143.75.153] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:07:29 serv01 postfix/smtpd[30361]: disconnect from unknown[185.143.72.25] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:07:29 serv01 postfix/smtpd[30363]: warning: unknown[212.70.149.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
                Jun 25 01:07:30 serv01 postfix/smtpd[30363]: disconnect from unknown[212.70.149.18] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
                Jun 25 01:07:31 serv01 postfix/smtpd[30354]: connect from unknown[212.70.149.2]
                Jun 25 01:07:38 serv01 postfix/smtpd[30363]: connect from unknown[185.143.72.34]

                Sorry has been installed and configured for weeks, just doesn't seem to work !!!

                I'm from the hosting business and I know how to administer a server!

                KrzysztofMaciejewski Nice that you want to help, but to make everyone look as if they were the first day in busines

                  Domain has been changed!
                  server
                  {
                  listen 80;
                  listen 443 ssl http2;
                  server_name solutions.de aapan.solutions.de *.solutions.de;
                  index index.php index.html index.htm default.php default.htm default.html;
                  root /www/wwwroot/solutions.de;
                  if ($allowed_country = yes) { return 403; }
                  #SSL-START SSL related configuration, do NOT delete or modify the next line of commented-out 404 rules
                  #error_page 404/404.html;
                  limit_conn perserver 400;
                  limit_conn perip 15;
                  limit_rate 1024k;
                  #HTTP_TO_HTTPS_START
                  if ($server_port !~ 443){
                  rewrite /.*$ https://$host$1 permanent;
                  }
                  #HTTP_TO_HTTPS_END
                  ssl_certificate /www/server/panel/vhost/cert/solutions.de/fullchain.pem;
                  ssl_certificate_key /www/server/panel/vhost/cert/solutions.de/privkey.pem;
                  ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
                  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
                  ssl_prefer_server_ciphers on;
                  ssl_session_cache shared:SSL:10m;
                  ssl_session_timeout 10m;
                  error_page 497 https://$host$request_uri;

                  #SSL-END
#Directory protection rules, do not manually delete
include /www/server/panel/vhost/nginx/dir_auth/solutions.de/*.conf;

#ERROR-PAGE-START  Error page configuration, allowed to be commented, deleted or modified
#error_page 404 /404.html;
#error_page 502 /502.html;
#ERROR-PAGE-END

#PHP-INFO-START  PHP reference configuration, allowed to be commented, deleted or modified
##SECURITY-START Hotlink protection configuration
location ~ .*\.(jpg|jpeg|gif|png|js|css)$
{
    expires      30d;
    access_log off;
    valid_referers none blocked aapan.solutions.de solutions.de *.solutions.de;
    if ($invalid_referer){
       return 404;
    }
}
#SECURITY-END
include enable-php-73.conf;
#PHP-INFO-END

#REWRITE-START URL rewrite rule reference, any modification will invalidate the rewrite rules set by the panel
include /www/server/panel/vhost/rewrite/solutions.de.conf;
#REWRITE-END

# Forbidden files or directories
location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
{
    return 404;
}

# Directory verification related settings for one-click application for SSL certificate
location ~ \.well-known{
    allow all;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
    expires      30d;
    error_log on;
    access_log on;
}

location ~ .*\.(js|css)?$
{
    expires      12h;
    error_log on;
    access_log on; 
}
access_log  /www/wwwlogs/solutions.de.log;
error_log  /www/wwwlogs/solutions.de.error.log;

                  CQT Hey man, I am assuming that the reason you are getting all of these attacks from China is because that's where the CP is from, and it looks to be very popular there. They probably scan the internet for certain footprints of the server and just try to get in any way they can. It doesn't look/sound like it's an issue of security of the software, just that it's targeted. Are you not using Cloudflare?

                  • CQT likes this.

                    This is exactly my concern that CP comes from China and is misused to attack servers. Not all of our customers use Cloudflare. It is still possible to stretch the IPs of the servers on which the CP is installed and that is exactly what I consider to be very dangerous.

                    iam runing aapanel on 3 servers i never had any attacks from china but still jose is going to give solution on this..

                      We have installed it on VPS for our customers well over 100 installations, until a few days everything was fine, for a few days we have been attacked continuously and the customers are freaking out. Now we are gradually changing everything over to a different panel, but we are leaving our test server running and installed a different test server 3 days ago but with a different IP range, so we took completely separate data centers and did it again same problem. There are only domains active, but also no content on the websites, so that no Wordpress or the like is installed, so it can not come, server itself is absolutely clean, a CENTOS 7 and 8, but we can all attacks up to China and trace 2% of Russia.

                      JAY I hope so, because Plesk is worse and costs too much money in licenses. We don't want to save on security, but open source is better.

                        10 days later

                        <div class="copyright">Copyright © 2014-2099 <a href="http://www.bt.cn" target="blank">{{data['lan']['BT']}}</a>{{data['lan']['PS1']}}(<a href="http://www.bt.cn" target="blank">www.bt.cn</a>) All Rights Reserved</div>

                        If the question arises as to why the data logger must be present in the copyrights, all data can be recorded.
                        From then on, passwords username and other data are recorded.

                        Yes just stupid that this is already in Install.html and records everything before Fail2ban

                        default sql: INSERT INTO users (id, username, password, login_ip, login_time, phone, email) VALUES
                        (1, 'admin', '21232f297a57a5a743894a0e4a801fc3', '192.168.0.10', '2016-12-10 15:12:56', 0, '287962566@qq.com');

                          Connect with us: 📨 Telegram 💬 Discord Email: support@aapanel.com