Gentoo Archives: gentoo-user

From: Rod <Rod@×××××××.au>
To: gentoo-user@l.g.o
Subject: [gentoo-user] User & password scanning on pop3
Date: Thu, 17 Jun 2010 01:03:08
Message-Id: 4C196BAB.7080308@Rods.id.au
1 Hi,
2
3 Does anyone know how to block, or auto programs in Gentoo to limit
4 or stop people scanning for a user/password hacking on your firewall?
5
6 Besides disabling those ports, I still need the port accessable
7 from the outside, and I guess they'd just try imap if pop was blocked.
8
9 I'm running iptables, postfix & courier
10
11 This has been ongoing in excess of 12 Hrs now...
12
13 > Jun 17 10:25:20 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
14 > Jun 17 10:25:21 jumpgate pop3d: LOGIN FAILED, user=dave,
15 > ip=[::ffff:93.186.195.234]
16 > Jun 17 10:25:26 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
17 > Jun 17 10:25:27 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
18 > Jun 17 10:25:27 jumpgate pop3d: LOGIN FAILED, user=dave,
19 > ip=[::ffff:93.186.195.234]
20 > Jun 17 10:25:33 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
21 > Jun 17 10:25:33 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
22 > Jun 17 10:25:34 jumpgate pop3d: LOGIN FAILED, user=dave,
23 > ip=[::ffff:93.186.195.234]
24 > Jun 17 10:25:39 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
25 > Jun 17 10:25:39 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
26 > Jun 17 10:25:40 jumpgate pop3d: LOGIN FAILED, user=dave,
27 > ip=[::ffff:93.186.195.234]
28 > Jun 17 10:25:45 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
29 > Jun 17 10:25:46 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
30 > Jun 17 10:25:46 jumpgate pop3d: LOGIN FAILED, user=dave,
31 > ip=[::ffff:93.186.195.234]
32 > Jun 17 10:25:52 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
33 > Jun 17 10:25:52 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
34 > Jun 17 10:25:53 jumpgate pop3d: LOGIN FAILED, user=dave,
35 > ip=[::ffff:93.186.195.234]
36 > Jun 17 10:25:58 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
37 > Jun 17 10:25:58 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
38 > Jun 17 10:25:59 jumpgate pop3d: LOGIN FAILED, user=dave,
39 > ip=[::ffff:93.186.195.234]
40 > Jun 17 10:26:04 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
41 > Jun 17 10:26:05 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]

Replies

Subject Author
Re: [gentoo-user] User & password scanning on pop3 Alex Schuster <wonko@×××××××××.org>
[gentoo-user] Re: User & password scanning on pop3 Tobias R <news@×××.de>
Re: [gentoo-user] User & password scanning on pop3 kashani <kashani-list@××××××××.net>
Re: [gentoo-user] User & password scanning on pop3 Rod <Rod@×××××××.au>