Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Account probing from 208.123.40.57

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Mon Aug 03, 2009 1:07 pm    Post subject: Account probing from 208.123.40.57 Reply with quote

Another one pining for fresh email addresses, this time with a particularly nasty script:

Quote:
[...]
Aug 3 22:28:24 mail in.qpopper[14074]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:25 mail in.qpopper[14075]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:25 mail in.qpopper[14076]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:26 mail in.qpopper[14077]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:26 mail in.qpopper[14078]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:27 mail in.qpopper[14079]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:28 mail in.qpopper[14081]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:28 mail in.qpopper[14082]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:29 mail in.qpopper[14083]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:29 mail in.qpopper[14084]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:30 mail in.qpopper[14085]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:32 mail in.qpopper[14086]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:33 mail in.qpopper[14087]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:33 mail in.qpopper[14088]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14089]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14090]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:34 mail in.qpopper[14091]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14092]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14093]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:35 mail in.qpopper[14094]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14095]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14096]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:36 mail in.qpopper[14097]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:37 mail in.qpopper[14099]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:37 mail in.qpopper[14100]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:38 mail in.qpopper[14101]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:38 mail in.qpopper[14102]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:39 mail in.qpopper[14103]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:39 mail in.qpopper[14098]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14104]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14105]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:40 mail in.qpopper[14106]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14107]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14108]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14109]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:41 mail in.qpopper[14110]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:42 mail in.qpopper[14111]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:42 mail in.qpopper[14112]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14113]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14114]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14115]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:43 mail in.qpopper[14116]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14117]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14118]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:44 mail in.qpopper[14119]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14120]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14121]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:45 mail in.qpopper[14122]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14123]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14124]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14125]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:46 mail in.qpopper[14126]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14127]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14128]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:47 mail in.qpopper[14129]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:48 mail in.qpopper[14130]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:48 mail in.qpopper[14131]: contact at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:49 mail in.qpopper[14132]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:49 mail in.qpopper[14133]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:50 mail in.qpopper[14134]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:50 mail in.qpopper[14135]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:51 mail in.qpopper[14136]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:52 mail in.qpopper[14137]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:52 mail in.qpopper[14138]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:53 mail in.qpopper[14139]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:53 mail in.qpopper[14140]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:54 mail in.qpopper[14141]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:55 mail in.qpopper[14142]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:55 mail in.qpopper[14143]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:56 mail in.qpopper[14144]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:56 mail in.qpopper[14145]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:57 mail in.qpopper[14146]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:57 mail in.qpopper[14147]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:58 mail in.qpopper[14148]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:59 mail in.qpopper[14149]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:28:59 mail in.qpopper[14150]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:00 mail in.qpopper[14151]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:00 mail in.qpopper[14152]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:01 mail in.qpopper[14153]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:02 mail in.qpopper[14154]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:02 mail in.qpopper[14155]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14156]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14157]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:03 mail in.qpopper[14158]: finn at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:04 mail in.qpopper[14159]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:04 mail in.qpopper[14160]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:05 mail in.qpopper[14161]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:05 mail in.qpopper[14162]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:06 mail in.qpopper[14163]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:07 mail in.qpopper[14164]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:07 mail in.qpopper[14165]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:08 mail in.qpopper[14166]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:08 mail in.qpopper[14167]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:09 mail in.qpopper[14168]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:09 mail in.qpopper[14169]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:10 mail in.qpopper[14170]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:11 mail in.qpopper[14171]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:11 mail in.qpopper[14172]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:12 mail in.qpopper[14173]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:12 mail in.qpopper[14174]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:13 mail in.qpopper[14175]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:20 mail in.qpopper[14176]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:20 mail in.qpopper[14177]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:21 mail in.qpopper[14178]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:21 mail in.qpopper[14179]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:22 mail in.qpopper[14180]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:23 mail in.qpopper[14181]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:26 mail in.qpopper[14182]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:30 mail in.qpopper[14183]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:30 mail in.qpopper[14184]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:31 mail in.qpopper[14185]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:31 mail in.qpopper[14186]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:32 mail in.qpopper[14187]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:32 mail in.qpopper[14188]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:33 mail in.qpopper[14189]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:34 mail in.qpopper[14190]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:34 mail in.qpopper[14191]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:35 mail in.qpopper[14192]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:36 mail in.qpopper[14193]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:36 mail in.qpopper[14194]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:37 mail in.qpopper[14195]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:37 mail in.qpopper[14196]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:38 mail in.qpopper[14197]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:38 mail in.qpopper[14198]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:39 mail in.qpopper[14199]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:40 mail in.qpopper[14200]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:40 mail in.qpopper[14201]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:41 mail in.qpopper[14202]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
Aug 3 22:29:41 mail in.qpopper[14203]: jonas at 208-123-40-57.static.arvig.net (208.123.40.57): -ERR [AUTH] You must use stronger authentication such as APOP to connect to this server [pop_user.c:365]
[...]


It's still running as I type, however without getting any response from my mailswerver any longer [aka. firewalled] Wink

208.123.40.57 is identified as the following:

Quote:
CustName: Freshwater District
Address: 405 Colfax Ave SW
City: Wadena
StateProv: MN
PostalCode: 56482
Country: US
RegDate: 2007-10-31
Updated: 2007-10-31

NetRange: 208.123.40.0 - 208.123.41.255
CIDR: 208.123.40.0/23
OriginAS: AS16904
NetName: FSD-1
NetHandle: NET-208-123-40-0-1
Parent: NET-208-123-0-0-1
NetType: Reassigned
Comment:
RegDate: 2007-10-31
Updated: 2007-10-31

OrgAbuseHandle: ABUSE487-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-218-346-8810
OrgAbuseEmail: abuse odd arvig.com

OrgTechHandle: BMO24-ARIN
OrgTechName: Mort, Brian
OrgTechPhone: +1-218-346-8231
OrgTechEmail: brian.mort odd arvig.com


No idea about the address' purpose as it neither responds to http nor smtp requests. If we look at the addresses within the /23, it becomes clear that this must be a compromised machine:

Quote:
40.40.123.208.in-addr.arpa domain name pointer spam.isd2170.k12.mn.us.
41.40.123.208.in-addr.arpa domain name pointer mail.isd2170.k12.mn.us.
42.40.123.208.in-addr.arpa domain name pointer student-server.isd2170.k12.mn.us.
43.40.123.208.in-addr.arpa domain name pointer skyward.isd2170.k12.mn.us.
70.40.123.208.in-addr.arpa domain name pointer ns.pillager.k12.mn.us.
79.40.123.208.in-addr.arpa domain name pointer mail.pillager.k12.mn.us.
106.40.123.208.in-addr.arpa domain name pointer ns.verndale.k12.mn.us.
115.40.123.208.in-addr.arpa domain name pointer verndale.k12.mn.us.
133.40.123.208.in-addr.arpa domain name pointer ns.bertha-hewitt.k12.mn.us.
141.40.123.208.in-addr.arpa domain name pointer bertha-hewitt.k12.mn.us.
164.40.123.208.in-addr.arpa domain name pointer evps.k12.mn.us.
199.40.123.208.in-addr.arpa domain name pointer ns.browerville.k12.mn.us.
204.40.123.208.in-addr.arpa domain name pointer mail.browerville.k12.mn.us.
228.40.123.208.in-addr.arpa domain name pointer wdc2155.k12.mn.us.


for now, I'm blocking all of 208.123.40.0/23, since I don't know to what degree their network is compromised and whether anyone bothers to fix it at all.

O.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group