HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=25)
-   -   pop3d brute force attack (http://www.howtoforge.com/forums/showthread.php?t=47897)

FeraTechInc 11th August 2010 18:24

pop3d brute force attack
 
How can I stop this attack?

Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=login, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: Connection, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=louise, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=lloyd, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: LOGIN FAILED, user=logan, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: LOGOUT, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 server pop3d: Disconnected, ip=[::ffff:212.58.8.78]
Aug 11 11:22:59 fserver pop3d: Connection, ip=[::ffff:212.58.8.78]

TechAvenue 11th August 2010 18:36

use fail2ban

FeraTechInc 11th August 2010 18:38

Sorry, just figured it out.

Fail2ban is installed.

However, the "CourierAuth" section was set to disabled.

It is enabled, the jerk trying to hack me is banned.


All times are GMT +2. The time now is 00:54.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.