i can unknown logs on my postfix logs

Aron

Time Priority Message
01/11/2025, 10:20:08 PM info disconnect from unknown[172.22.1.1] helo=1 starttls=1 commands=2
01/11/2025, 10:20:08 PM info lost connection after STARTTLS from unknown[172.22.1.1]
01/11/2025, 10:20:08 PM info Anonymous TLS connection established from unknown[172.22.1.1] to mail.temp-mails.live: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
01/11/2025, 10:20:08 PM info connect from unknown[172.22.1.1]
01/11/2025, 10:20:08 PM info ALLOWLISTED [172.22.1.1]:36728
01/11/2025, 10:20:08 PM info CONNECT from [172.22.1.1]:36728 to [172.22.1.253]:25
01/11/2025, 10:19:57 PM info disconnect from unknown[172.22.1.1] helo=1 starttls=1 commands=2
01/11/2025, 10:19:57 PM info lost connection after STARTTLS from unknown[172.22.1.1]
01/11/2025, 10:19:57 PM info Anonymous TLS connection established from unknown[172.22.1.1] to mail.temp-mails.live: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
01/11/2025, 10:19:57 PM info connect from unknown[172.22.1.1]
01/11/2025, 10:19:57 PM info ALLOWLISTED [172.22.1.1]:47706
01/11/2025, 10:19:57 PM info CONNECT from [172.22.1.1]:47706 to [172.22.1.253]:25
01/11/2025, 10:18:55 PM info DISCONNECT [154.203.197.180]:53434
01/11/2025, 10:18:55 PM info DNSBL rank 30 for [154.203.197.180]:53434
01/11/2025, 10:18:55 PM info addr 154.203.197.180 listed by domain ix.dnsbl.manitu.net as 127.0.0.2
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain wl.mailspike.net as 127.0.0.17
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain bl.mailspike.net as 127.0.0.2
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain zen.spamhaus.org as 127.0.0.3
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain zen.spamhaus.org as 127.0.0.9
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain zen.spamhaus.org as 127.0.0.2
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain zen.spamhaus.org as 127.0.0.4
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain zen.spamhaus.org as 127.0.0.11
01/11/2025, 10:18:54 PM info PREGREET 11 after 0.12 from [154.203.197.180]:53434: EHLO User\r\n
01/11/2025, 10:18:54 PM info addr 154.203.197.180 listed by domain bl.spamcop.net as 127.0.0.2
01/11/2025, 10:18:54 PM info Look up 154.203.197.180 on whitelist, result 200 DUNNO
01/11/2025, 10:18:54 PM info CONNECT from [154.203.197.180]:53434 to [172.22.1.253]:25

i can see unknown logs on my postfix logs, this is not my ip 154.203.197.180

y is this?

pkernstock

Great. You posted some random logs. Is there also a specific question to it?

Aron

i can see unknown logs on my postfix logs, this is not my ip 154.203.197.180

y is this?

logs keep coming, even though i am not sending mails

pkernstock

Then it is some random user or bot. Your mail server is public, so everyone can connect to it. Given the fact it is blacklisted by several DNSBLs, probably some unwanted user/bot.

Aron

please give me solution

pkernstock

The client/server is probably either trying to login or send you an spam email. You could block the IP and wait for the next bot/user try to connect to it. It is a endless game not worth starting in the first place.

Aron

will this effect my ip reputation>?

DocFraggle

I suggest you learn a little bit about mail servers before running one yourself… the IP is from another mail server which tries to send you an email. It seems it’s a source of spam mails, and it’s blocked by mailcow