Displaying 1 result from an estimated 1 matches for "ttejmgpfip".
2008 Aug 08
3
Auth message
Recently my network was scanned. Various services was scanned, and checking
the logs of mail server the following string draw my attention:
mail dovecot: pop3-login: Disconnected: user=<ttejmgpfip>, method=PLAIN,
rip=87.228.15.180, lip=x.x.x.x
This looks weird to me, because pop3-login: Disconnected looks like
succesful login attempt to me. I have no such user named ttejmgpfip exits
ofc. I've check what dovecot writes to log if try PLAIN login method with
random login/password, and i...