Hello guys:
I saw many many logs like this: Oct 19 07:55:27 mail postfix/smtpd[9929]: connect from unknown[216.15.186.126] Oct 19 07:55:28 mail postfix/smtpd[9929]: disconnect from unknown[216.15.186.126] helo=1 auth=0/1 quit=1 commands=2/3 Oct 19 07:56:54 mail dovecot: pop3-login: Error: SSL: Stacked error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request Oct 19 07:56:54 mail dovecot: pop3-login: Disconnected (no auth attempts in 5 secs): user=<>, rip=185.100.87.191, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<bNhxciw/pue5ZFe/> Oct 19 07:58:48 mail postfix/anvil[9931]: statistics: max connection rate 1/60s for (smtp:216.15.186.126) at Oct 19 07:55:27 Oct 19 07:58:48 mail postfix/anvil[9931]: statistics: max connection count 1 for (smtp:216.15.186.126) at Oct 19 07:55:27 Oct 19 07:58:48 mail postfix/anvil[9931]: statistics: max cache size 1 at Oct 19 07:55:27 Oct 19 08:04:48 mail dovecot: pop3-login: Error: SSL: Stacked error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request Oct 19 08:04:48 mail dovecot: pop3-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<3mqxjiw/17vQZBrn> Oct 19 08:04:53 mail dovecot: pop3-login: Disconnected (no auth attempts in 5 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: Disconnected, session=<XiIBjyw/39/QZBrn> Oct 19 08:04:53 mail dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Oct 19 08:04:53 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<musCjyw/BpLQZBrn> Oct 19 08:04:54 mail dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Oct 19 08:04:54 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<gVgGjyw/xpPQZBrn> Oct 19 08:04:54 mail dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Oct 19 08:04:54 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<qMgJjyw/iZXQZBrn> Oct 19 08:04:54 mail dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Oct 19 08:04:54 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<LQkNjyw/65bQZBrn> Oct 19 08:04:54 mail dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol Oct 19 08:04:54 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<OGUQjyw/P5jQZBrn> Oct 19 08:05:02 mail dovecot: pop3-login: Disconnected (no auth attempts in 7 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: Disconnected, session=<0iWGjyw/xZnQZBrn> Oct 19 08:05:02 mail dovecot: pop3-login: Error: SSL: Stacked error: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number Oct 19 08:05:02 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=208.100.26.231, lip=108.61.110.110, TLS handshaking: SSL_accept() failed: Unknown error, session=<xgCIjyw/XMvQZBrn> Is my server mail account being attacted? And how to ban or limit the behavier like this. Thanks Yours sincerely
