[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] password clack from pop3 ?



Hi List,

I've found abnormal log(s) in /var/log/maillog. IP of 216.126.188.104 is
c5T2-104.015.popsite.net, there is a no client of my RaQ.

--------------------- part of /var/log/maillog (as is)
May  1 23:15:12 www in.qpopper[16621]: winescout.c2on@anywhere at
216.126.188.104 (216.126.188.104):
 -ERR [AUTH] Password supplied for "winescout.c2on@anywhere" is incorrect.
May  1 23:17:08 www in.qpopper[16708]: winescout.c2on@anywhere at
216.126.188.104 (216.126.188.104):
 -ERR [AUTH] Password supplied for "winescout.c2on@anywhere" is incorrect.
May  1 23:19:03 www in.qpopper[16785]: winescout.c2on@anywhere at
216.126.188.104 (216.126.188.104):
 -ERR [AUTH] Password supplied for "winescout.c2on@anywhere" is incorrect.
May  1 23:36:10 www in.qpopper[17452]: winescout.c2on@anywhere at
216.126.188.104 (216.126.188.104):
 -ERR [AUTH] Password supplied for "winescout.c2on@anywhere" is incorrect.
----------------------

What attack is this or his/her miss configuration ? Does Anyone know ?

Thanks,
Tadashi