-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Timothy Murphy said the following on 22/11/2013 14:12:
Nov 22 13:06:56 grover dovecot: imap-login: Disconnected (no auth attempts): rip=192.168.2.3, lip=192.168.2.5, TLS: Disconnected
every second on my CentOS-6.4 server. Is this purely an informational message? Or is it an error message? And in either case, how can I stop the flood of messages?
If 192.168.2.3 is a Windows host, it could be infected; had a similar issue with one of my customers.
In any case, that log entry says that 192.168.2.3 is opening a TCP connection to IMAP port of 192.168.2.5 and closing it without any IMAP handshake
Ciao, luigi
- -- / +--[Luigi Rosa]-- \
The more complex the mind, the greater the need for the simplicity of play. --James Kirk, "Shore Leave"