pop3d brute force attack

Discussion in 'General' started by FeraTechInc, Aug 11, 2010.

  1. FeraTechInc

    FeraTechInc Member HowtoForge Supporter

    How can I stop this attack?

    Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=login, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=louise, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=lloyd, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=logan, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: LOGOUT, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 server pop3d: Disconnected, ip=[::ffff:212.58.8.78]
    Aug 11 11:22:59 fserver pop3d: Connection, ip=[::ffff:212.58.8.78]
     
    FeraTechInc, Aug 11, 2010
    #1
  2. TechAvenue

    TechAvenue New Member

    use fail2ban
     
    TechAvenue, Aug 11, 2010
    #2
  3. FeraTechInc

    FeraTechInc Member HowtoForge Supporter

    Sorry, just figured it out.

    Fail2ban is installed.

    However, the "CourierAuth" section was set to disabled.

    It is enabled, the jerk trying to hack me is banned.
     
    FeraTechInc, Aug 11, 2010
    #3

Share This Page