Are you using some kind of monitoring system (IMAIL Monitor, What's Up Gold
etc.)?
That is what it looks like because it looks like it is coming from the local
loopback address on your own machine (127.0.0.1). It looks like if that
were it you would have it set up to test every 12 seconds?
-V
----- Original Message -----
From: jmtexier <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 05, 1999 6:18 PM
Subject: [IMail Forum] Help ! Am I Hacked ?
> Hi everybody...
> 2 days ago my IMail Server (v4.) starts to have problem and timeout...
>
> Regarding the syslog file, I'm a bit afraid to be hacked or something like
> that
>
> Here is a part of the SysLog file, hope this can give you enough
information :(
>
> to help me cause I can't find anywhere who is connecting on each port of
my server...
>
> Maybe there's some security stuff to setup ?
>
> Thanks for your help
> Jean-Michel.
>
> ==== START
> 07:05 09:39 SMTPD(22F5004C) [127.0.0.1] connect 127.0.0.1 port 4178
> 07:05 09:40 SMTPD(22F7004C) [127.0.0.1] connect 127.0.0.1 port 4181
> 07:05 09:40 POP3D(00000054) logon failure for atranvanba bravo.cool.nc
from
> 194.51.6.9
> 07:05 09:40 POP3D(00000054) connection aborted
> 07:05 09:40 SMTPD(22F9004C) [127.0.0.1] connect 127.0.0.1 port 4184
> 07:05 09:40 SMTPD(22FB004C) [127.0.0.1] connect 127.0.0.1 port 4187
> 07:05 09:40 SMTPD(22FD004C) [127.0.0.1] connect 127.0.0.1 port 4190
> 07:05 09:40 SMTPD(22FF004C) [127.0.0.1] connect 127.0.0.1 port 4194
> 07:05 09:40 SMTPD(2301004C) [127.0.0.1] connect 127.0.0.1 port 4197
> 07:05 09:41 SMTPD(2303004C) [127.0.0.1] connect 127.0.0.1 port 4200
> 07:05 09:41 SMTPD(2305004C) [127.0.0.1] connect 127.0.0.1 port 4203
> 07:05 09:41 SMTPD(2307004C) [127.0.0.1] connect 127.0.0.1 port 4206
> 07:05 09:41 SMTPD(2309004C) [127.0.0.1] connect 127.0.0.1 port 4209
> 07:05 09:41 SMTPD(230C004C) [127.0.0.1] connect 127.0.0.1 port 4212
> 07:05 09:42 SMTPD(230E004C) [127.0.0.1] connect 127.0.0.1 port 4215
> 07:05 09:42 SMTPD(2310004C) [127.0.0.1] connect 127.0.0.1 port 4218
> ... And So One...
>
>
>
> Thanks for your help :-)
> Jean-Michel.
>
> www.cortex.nc
> www.cool.nc
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
