Hi,

Can someone tell me if this is an attack.

Mar 23 23:59:05 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 23 23:59:05 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:00:06 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:00:06 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:00:06 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:00:06 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:01:07 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:01:07 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:01:08 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:01:08 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:02:09 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:02:09 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0
Mar 24 00:02:09 abc123 pop3d: LOGIN, user=members@domain.com, ip=[::ffff:ipaddress]
Mar 24 00:02:09 abc123 pop3d: LOGOUT, user=members@domain.com, ip=[::ffff:ipaddress], top=0, retr=0, rcvd=12, sent=39, time=0

This is just a part of the the log file.

whose ip address is given in ip=[::ffff:ipaddress]?