If it really is POP traffic ..change passwords..
make sure the machines accessing the the mail are clean....
if it is smpt........check the mail server....

MLF