Hi.
I would like to know why these messages appear in the mail.log,
I know that "UGFzc3dvcmQ6" is base64 encoded for "Password:".
Is this some misconfigured internet mail server system (Windows)?
Blocking these IPs with fail2ban is a good idea?
Jun 5 23:25:08 saturn postfix/smtps/smtpd[11831]: warning:
unknown[178xxx.xxx.58]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 5 23:25:08 saturn postfix/smtps/smtpd[11831]: lost connection after
AUTH from unknown[178.88.160.58]
Jun 5 23:25:08 saturn postfix/smtps/smtpd[11831]: disconnect from
unknown[178.xxx.xxx.58] ehlo=1 auth=0/1 commands=1/2
Thanks.
--
----------------------------------
_ Engº Julio Cesar Covolato
0v0 <ju...@psi.com.br>
/(_)\ F: 55-11-99175-9260
^ ^ PSI INTERNET
----------------------------------
