Hm. Yes, I think possibly you were right to be worried; that IP address looks as though it comes from a cable modem in Canada, i.e. not necessarily someone you'd expect to be running a POP3 server. Though it doesn't look like they actually managed to _do_ anything, just that they were attempting to connect to your machine on that port.