Post Office Protocol version 3 (POP3): 110

Security Weaknesses

  • Transmits credentials in plaintext.

  • Susceptible to credential sniffing and session hijacking.

  • Lacks encryption by default unless configured for POP3S.

Security Defense and Mitigation Measures

  • Use POP3S (SSL/TLS) to secure communication.

  • Enforce strong password policies.

  • Monitor POP3 access logs for unusual patterns.

Indicators of Compromise or Attack

  • Unencrypted traffic on port 110 (TCP).

  • Repeated failed login attempts.

  • Abnormal POP3 traffic volumes.

Last updated