Home

Results 1 to 2 of 2

Thread: POP3 Command

  1. #1
    Join Date
    Aug 2009
    Posts
    20

    POP3 Command

    Recently, i have some weird "pop3 command" in my GWIA log file. I suspected this is causing by spammer and i have been disabled pop3 after that.

    Anyone have the same issue?

    Below is the sample log i copied out from GWIA log:

    06:29:04 264 POP3 command: PASS
    06:29:05 264 POP3 command: user webpop
    06:29:05 264 POP3 command: PASS
    06:29:05 264 POP3 command: user technicom
    06:29:05 264 POP3 command: PASS
    06:29:06 264 POP3 command: user susan
    06:29:06 264 POP3 command: PASS
    06:29:06 264 POP3 command: user sunsun
    06:29:06 264 POP3 command: PASS
    06:29:07 264 POP3 command: user sunny
    06:29:07 264 POP3 command: PASS
    06:29:07 264 POP3 command: user steven
    06:29:07 264 POP3 command: PASS
    06:29:08 264 POP3 command: user search
    06:29:08 264 POP3 command: PASS
    06:29:08 264 POP3 command: user sara
    06:29:08 264 POP3 command: PASS
    06:29:09 264 POP3 command: user robert
    06:29:09 264 POP3 command: PASS
    06:29:09 264 POP3 command: user richard
    06:29:09 264 POP3 command: PASS
    06:29:10 264 POP3 command: user postmaster
    06:29:10 264 POP3 command: PASS
    06:29:10 264 POP3 command: user party
    06:29:10 264 POP3 command: PASS
    06:29:11 264 POP3 command: user michael
    06:29:11 264 POP3 command: PASS
    06:29:11 264 POP3 command: user amanda
    06:29:11 264 POP3 command: PASS
    06:29:12 264 POP3 command: user mysql
    06:29:12 264 POP3 command: PASS
    06:29:12 264 POP3 command: user rpm
    06:29:12 264 POP3 command: PASS
    06:29:13 264 POP3 command: user operator
    06:29:13 264 POP3 command: PASS
    06:29:13 264 POP3 command: user sgi
    06:29:13 264 POP3 command: PASS
    06:29:14 264 POP3 command: user Aaliyah
    06:29:14 264 POP3 command: PASS
    06:29:14 264 POP3 command: user Aaron
    06:29:14 264 POP3 command: PASS
    06:29:15 264 POP3 command: user Aba
    06:29:15 264 POP3 command: PASS
    06:29:15 264 POP3 command: user Abel
    06:29:15 264 POP3 command: PASS
    06:29:16 264 POP3 command: user Jewel
    06:29:16 264 POP3 command: PASS
    06:29:16 264 POP3 command: user sshd
    06:29:16 264 POP3 command: PASS
    06:29:17 264 POP3 command: user users
    06:29:17 264 POP3 command: PASS
    06:29:17 264 POP3 command: user admins
    06:29:17 264 POP3 command: PASS
    06:29:18 264 POP3 command: user admins
    06:29:18 264 POP3 command: PASS
    06:29:18 032 DMN: MSG 10344 Accepted connection:

  2. #2
    avery_larry NNTP User

    Re: POP3 Command

    Spammer or some type of attack = yes.

    Have the same issue = no.

    >>> On 12/30/2009 at 12:56 AM, lihtian<lihtian@no-mx.forums.novell.com>

    wrote:

    > Recently, i have some weird "pop3 command" in my GWIA log file. I
    > suspected this is causing by spammer and i have been disabled pop3 after
    > that.
    >
    > Anyone have the same issue?
    >
    > Below is the sample log i copied out from GWIA log:
    >
    > 06:29:04 264 POP3 command: PASS
    > 06:29:05 264 POP3 command: user webpop
    > 06:29:05 264 POP3 command: PASS
    > 06:29:05 264 POP3 command: user technicom
    > 06:29:05 264 POP3 command: PASS
    > 06:29:06 264 POP3 command: user susan
    > 06:29:06 264 POP3 command: PASS
    > 06:29:06 264 POP3 command: user sunsun
    > 06:29:06 264 POP3 command: PASS
    > 06:29:07 264 POP3 command: user sunny
    > 06:29:07 264 POP3 command: PASS
    > 06:29:07 264 POP3 command: user steven
    > 06:29:07 264 POP3 command: PASS
    > 06:29:08 264 POP3 command: user search
    > 06:29:08 264 POP3 command: PASS
    > 06:29:08 264 POP3 command: user sara
    > 06:29:08 264 POP3 command: PASS
    > 06:29:09 264 POP3 command: user robert
    > 06:29:09 264 POP3 command: PASS
    > 06:29:09 264 POP3 command: user richard
    > 06:29:09 264 POP3 command: PASS
    > 06:29:10 264 POP3 command: user postmaster
    > 06:29:10 264 POP3 command: PASS
    > 06:29:10 264 POP3 command: user party
    > 06:29:10 264 POP3 command: PASS
    > 06:29:11 264 POP3 command: user michael
    > 06:29:11 264 POP3 command: PASS
    > 06:29:11 264 POP3 command: user amanda
    > 06:29:11 264 POP3 command: PASS
    > 06:29:12 264 POP3 command: user mysql
    > 06:29:12 264 POP3 command: PASS
    > 06:29:12 264 POP3 command: user rpm
    > 06:29:12 264 POP3 command: PASS
    > 06:29:13 264 POP3 command: user operator
    > 06:29:13 264 POP3 command: PASS
    > 06:29:13 264 POP3 command: user sgi
    > 06:29:13 264 POP3 command: PASS
    > 06:29:14 264 POP3 command: user Aaliyah
    > 06:29:14 264 POP3 command: PASS
    > 06:29:14 264 POP3 command: user Aaron
    > 06:29:14 264 POP3 command: PASS
    > 06:29:15 264 POP3 command: user Aba
    > 06:29:15 264 POP3 command: PASS
    > 06:29:15 264 POP3 command: user Abel
    > 06:29:15 264 POP3 command: PASS
    > 06:29:16 264 POP3 command: user Jewel
    > 06:29:16 264 POP3 command: PASS
    > 06:29:16 264 POP3 command: user sshd
    > 06:29:16 264 POP3 command: PASS
    > 06:29:17 264 POP3 command: user users
    > 06:29:17 264 POP3 command: PASS
    > 06:29:17 264 POP3 command: user admins
    > 06:29:17 264 POP3 command: PASS
    > 06:29:18 264 POP3 command: user admins
    > 06:29:18 264 POP3 command: PASS
    > 06:29:18 032 DMN: MSG 10344 Accepted connection:


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •