On Aug 8, 2008, at 2:01 AM, Pavel Shirov wrote:
Recently my network was scanned. Various services was scanned, and
checking
the logs of mail server the following string draw my attention:
mail dovecot: pop3-login: Disconnected: user=,
method=PLAIN,
rip=87.228.15.180, lip=x.x.x.x
This looks
On 8/8/2008, Pavel Shirov ([EMAIL PROTECTED]) wrote:
Recently my network was scanned. Various services was scanned, and checking
the logs of mail server the following string draw my attention:
mail dovecot: pop3-login: Disconnected: user=, method=PLAIN,
rip=87.228.15.180, lip=x.x.x.x
grep the l
Further testing show that such message could occur simply by providing
random username/password and termination session afterwards (not sending
QUIT).