| Just Joined!
Join Date: Mar 2008
Posts: 2
| Maillog Hi,
Can someone tell me if this is an attack.
Mar 23 23:59:05 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 23 23:59:05 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:00:06 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:00:06 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:00:06 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:00:06 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:01:07 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:01:07 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:01:08 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:01:08 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:02:09 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:02:09 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:02:09 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:02:09 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
This is just a part of the the log file.
whose ip address is given in ip=[::ffff:ipaddress]? |