Re: ipop3d logwatch entry suspicious

On Wed, Sep 10, 2008 at 2:57 PM, James Wilkinson <[EMAIL PROTECTED]>wrote: > > Roberto Figueroa wrote: > > Thanks James for your advice. > > > > Another question: where can I find those security list...or more specific > > mailing list related to ipop3d? > > Actually, I was trying to hint that thi

Re: ipop3d logwatch entry suspicious

I wrote: > You need to plan around a security problem being found with your version > of ipop3d. Either you need to follow the appropriate security lists, and > be ready to patch your version of ipop3d quickly, or you need to use a > supported operating system which will do this for you. Roberto F

Re: ipop3d logwatch entry suspicious

> > From: James Wilkinson <[EMAIL PROTECTED]> > > You need to plan around a security problem being found with your version > of ipop3d. Either you need to follow the appropriate security lists, and > be ready to patch your version of ipop3d quickly, or you need to use a > supported operating system

Re: ipop3d logwatch entry suspicious

> > -- Forwarded message -- > Mikkel L. Ellertson wrote: > >> >> It looks like john is checking his mail from home/work using >> iplannetworks.net as their ISP. > > the problem is I don't have user john neither mysql, appowner :-/ so it appears to be a brute force attack ? how

Re: ipop3d logwatch entry suspicious

Roberto Figueroa wrote: > I'm getting a lot of this entries in the LogWatch mail under ipop3d > section: > > Success, while reading line user=appowner > host=customer123-149-157.iplannetworks.net > [200.123.149.157 > ]: 1 > Tim

Re: ipop3d logwatch entry suspicious

Mikkel L. Ellertson wrote: Roberto Figueroa wrote: Hi, I'm getting a lot of this entries in the LogWatch mail under ipop3d section: Success, while reading line user=appowner host=customer123-149-157.iplannetworks.net [200.123.149.157

Re: ipop3d logwatch entry suspicious

Roberto Figueroa wrote: > Hi, > > I'm getting a lot of this entries in the LogWatch mail under ipop3d > section: > > Success, while reading line user=appowner > host=customer123-149-157.iplannetworks.net > [200.123.149.157 > ]

ipop3d logwatch entry suspicious

Hi, I'm getting a lot of this entries in the LogWatch mail under ipop3d section: Success, while reading line user=appowner host=customer123-149-157.iplannetworks.net [200.123.149.157]: 1 Time(s) Success, while reading line user=mysql host=customer123-149-157.iplannetworks.net [200.123.149.15

ipop3d logwatch entry suspicious

Hi, I'm getting a lot of this entries in the LogWatch mail under ipop3d section: Success, while reading line user=appowner host=customer123-149-157.iplannetworks.net [200.123.149.157]: 1 Time(s) Success, while reading line user=mysql host=customer123-149-157.iplannetworks.net [200.123.149.15