 |
Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
|
| View previous topic :: View next topic |
| Author |
Message |
olliver
Expert Developer
Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes
|
 Posted: Mon Aug 03, 2009 1:07 pm Post subject: Account probing from 208.123.40.57 |
 |
|
Another one pining for fresh email addresses, this time with a particularly nasty script:
| Quote: |
[...]
Aug 3 22:28:24 mail in.qpopper[14074]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:25 mail in.qpopper[14075]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:25 mail in.qpopper[14076]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:26 mail in.qpopper[14077]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:26 mail in.qpopper[14078]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:27 mail in.qpopper[14079]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:28 mail in.qpopper[14081]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:28 mail in.qpopper[14082]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:29 mail in.qpopper[14083]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:29 mail in.qpopper[14084]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:30 mail in.qpopper[14085]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:32 mail in.qpopper[14086]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:33 mail in.qpopper[14087]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:33 mail in.qpopper[14088]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14089]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14090]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14091]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14092]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14093]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14094]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14095]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14096]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14097]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:37 mail in.qpopper[14099]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:37 mail in.qpopper[14100]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:38 mail in.qpopper[14101]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:38 mail in.qpopper[14102]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:39 mail in.qpopper[14103]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:39 mail in.qpopper[14098]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14104]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14105]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14106]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14107]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14108]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14109]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14110]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:42 mail in.qpopper[14111]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:42 mail in.qpopper[14112]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14113]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14114]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14115]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14116]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14117]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14118]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14119]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14120]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14121]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14122]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14123]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14124]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14125]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14126]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14127]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14128]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14129]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:48 mail in.qpopper[14130]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:48 mail in.qpopper[14131]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:49 mail in.qpopper[14132]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:49 mail in.qpopper[14133]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:50 mail in.qpopper[14134]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:50 mail in.qpopper[14135]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:51 mail in.qpopper[14136]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:52 mail in.qpopper[14137]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:52 mail in.qpopper[14138]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:53 mail in.qpopper[14139]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:53 mail in.qpopper[14140]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:54 mail in.qpopper[14141]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:55 mail in.qpopper[14142]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:55 mail in.qpopper[14143]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:56 mail in.qpopper[14144]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:56 mail in.qpopper[14145]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:57 mail in.qpopper[14146]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:57 mail in.qpopper[14147]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:58 mail in.qpopper[14148]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:59 mail in.qpopper[14149]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:59 mail in.qpopper[14150]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:00 mail in.qpopper[14151]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:00 mail in.qpopper[14152]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:01 mail in.qpopper[14153]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:02 mail in.qpopper[14154]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:02 mail in.qpopper[14155]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14156]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14157]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14158]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:04 mail in.qpopper[14159]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:04 mail in.qpopper[14160]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:05 mail in.qpopper[14161]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:05 mail in.qpopper[14162]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:06 mail in.qpopper[14163]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:07 mail in.qpopper[14164]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:07 mail in.qpopper[14165]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:08 mail in.qpopper[14166]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:08 mail in.qpopper[14167]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:09 mail in.qpopper[14168]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:09 mail in.qpopper[14169]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:10 mail in.qpopper[14170]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:11 mail in.qpopper[14171]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:11 mail in.qpopper[14172]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:12 mail in.qpopper[14173]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:12 mail in.qpopper[14174]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:13 mail in.qpopper[14175]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:20 mail in.qpopper[14176]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:20 mail in.qpopper[14177]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:21 mail in.qpopper[14178]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:21 mail in.qpopper[14179]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:22 mail in.qpopper[14180]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:23 mail in.qpopper[14181]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:26 mail in.qpopper[14182]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:30 mail in.qpopper[14183]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:30 mail in.qpopper[14184]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:31 mail in.qpopper[14185]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:31 mail in.qpopper[14186]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:32 mail in.qpopper[14187]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:32 mail in.qpopper[14188]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:33 mail in.qpopper[14189]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:34 mail in.qpopper[14190]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:34 mail in.qpopper[14191]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:35 mail in.qpopper[14192]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:36 mail in.qpopper[14193]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:36 mail in.qpopper[14194]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:37 mail in.qpopper[14195]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:37 mail in.qpopper[14196]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:38 mail in.qpopper[14197]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:38 mail in.qpopper[14198]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:39 mail in.qpopper[14199]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:40 mail in.qpopper[14200]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:40 mail in.qpopper[14201]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:41 mail in.qpopper[14202]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:41 mail in.qpopper[14203]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
[...] |
It's still running as I type, however without getting any response from my mailswerver any longer [aka. firewalled] 
208.123.40.57 is identified as the following:
| Quote: |
CustName: Freshwater District
Address: 405 Colfax Ave SW
City: Wadena
StateProv: MN
PostalCode: 56482
Country: US
RegDate: 2007-10-31
Updated: 2007-10-31
NetRange: 208.123.40.0 - 208.123.41.255
CIDR: 208.123.40.0/23
OriginAS: AS16904
NetName: FSD-1
NetHandle: NET-208-123-40-0-1
Parent: NET-208-123-0-0-1
NetType: Reassigned
Comment:
RegDate: 2007-10-31
Updated: 2007-10-31
OrgAbuseHandle: ABUSE487-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-218-346-8810
OrgAbuseEmail: abuse odd arvig.com
OrgTechHandle: BMO24-ARIN
OrgTechName: Mort, Brian
OrgTechPhone: +1-218-346-8231
OrgTechEmail: brian.mort odd arvig.com |
No idea about the address' purpose as it neither responds to http nor smtp requests. If we look at the addresses within the /23, it becomes clear that this must be a compromised machine:
| Quote: |
40.40.123.208.in-addr.arpa domain name pointer spam.isd2170.k12.mn.us.
41.40.123.208.in-addr.arpa domain name pointer mail.isd2170.k12.mn.us.
42.40.123.208.in-addr.arpa domain name pointer student-server.isd2170.k12.mn.us.
43.40.123.208.in-addr.arpa domain name pointer skyward.isd2170.k12.mn.us.
70.40.123.208.in-addr.arpa domain name pointer ns.pillager.k12.mn.us.
79.40.123.208.in-addr.arpa domain name pointer mail.pillager.k12.mn.us.
106.40.123.208.in-addr.arpa domain name pointer ns.verndale.k12.mn.us.
115.40.123.208.in-addr.arpa domain name pointer verndale.k12.mn.us.
133.40.123.208.in-addr.arpa domain name pointer ns.bertha-hewitt.k12.mn.us.
141.40.123.208.in-addr.arpa domain name pointer bertha-hewitt.k12.mn.us.
164.40.123.208.in-addr.arpa domain name pointer evps.k12.mn.us.
199.40.123.208.in-addr.arpa domain name pointer ns.browerville.k12.mn.us.
204.40.123.208.in-addr.arpa domain name pointer mail.browerville.k12.mn.us.
228.40.123.208.in-addr.arpa domain name pointer wdc2155.k12.mn.us. |
for now, I'm blocking all of 208.123.40.0/23, since I don't know to what degree their network is compromised and whether anyone bothers to fix it at all.
O. |
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group
|
