[CentOS] pop3 attack

Alexander Georgiev alexander.georgiev at gmail.com
Wed Dec 10 12:36:56 UTC 2008

2008/12/9 James Pifer <jep at obrien-pifer.com>:
> I was looking at my maillog and it looks like someone is trying to get
> into my pop3 server.
> Dec  9 15:28:54 mailserver dovecot: pop3-login: Aborted login: user=<alexis>, method=PLAIN, rip=::ffff:, lip=::ffff:

Do you really need pop3 exposed in the internet?
You better open it only on localhost, and use a ssh channel to access
it. Do not use ssh password authentication, but keys.

More information about the CentOS mailing list