Re: [Dovecot] Auth message

2008-08-12 Thread Timo Sirainen
On Aug 8, 2008, at 2:01 AM, Pavel Shirov wrote: Recently my network was scanned. Various services was scanned, and checking the logs of mail server the following string draw my attention: mail dovecot: pop3-login: Disconnected: user=, method=PLAIN, rip=87.228.15.180, lip=x.x.x.x This looks

Re: [Dovecot] Auth message

2008-08-08 Thread Charles Marcus
On 8/8/2008, Pavel Shirov ([EMAIL PROTECTED]) wrote: Recently my network was scanned. Various services was scanned, and checking the logs of mail server the following string draw my attention: mail dovecot: pop3-login: Disconnected: user=, method=PLAIN, rip=87.228.15.180, lip=x.x.x.x grep the l

Re: [Dovecot] Auth message

2008-08-07 Thread Pavel Shirov
Further testing show that such message could occur simply by providing random username/password and termination session afterwards (not sending QUIT).