Indeed - with that many connections from that few unique IPs the numbers suggest it was all or primarily spam.

The email attempts needed to be accepted and examined, not just rejected out of hand, otherwise the fact that someone/something connected to your mail server and made a delivery attempt ...

[ more ]