2008/12/9 James Pifer <jep at obrien-pifer.com>: > I was looking at my maillog and it looks like someone is trying to get > into my pop3 server. > > Dec 9 15:28:54 mailserver dovecot: pop3-login: Aborted login: user=<alexis>, method=PLAIN, rip=::ffff:66.167.184.203, lip=::ffff:192.168.1.2 Do you really need pop3 exposed in the internet? You better open it only on localhost, and use a ssh channel to access it. Do not use ssh password authentication, but keys.