Just saw something that I thought was long gone. The username "pop3user" is showing up in our telnet/ssh logs. I don't know how long ago it was that I used POP3 to retrieve e-mail from one of my mail servers. IMAP and various webmail systems have long since replaced this classic email protocol. But at least this one attacker is counting on someone still having a "pop3user" configured. The passwords attempted are the classics "pop3user" and "123456". The sole IP address scanning for this username is 193.32.162.157. The IP address is part of AS47890, which is managed by Unmanaged (I am not making this up..) route: 193.32.162.0/24 origin: AS47890 mnt-by: UNMANAGED mnt-by: ro-btel2-1-mnt created: 2022-11-21T17:07:38Z last-modified: 2022-11-21T17:07:38Z source: RIPE The website for…