So Sorry !!
You're right It was my IMail Monitor.
I've set it up to check every 10s instead of 10mn ;-((
But, just to know, why each ports has been checked and not only the
FTP,WWW,POP and STMP ports (cause I've ask to Monitor only those
service...).
Thanks
Jean-Michel
========================================
Jean-Michel TEXIER
Cortex Engineering Noumea - Papeete
Cortex Vanuatu Ltd - Port-Vila
EuroCortex - France
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
========================================
----- Original Message -----
From: Vaughn Thurman <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 06, 1999 12:26 AM
Subject: Re: [IMail Forum] Help ! Am I Hacked ?
> Are you using some kind of monitoring system (IMAIL Monitor, What's Up
Gold
> etc.)?
> That is what it looks like because it looks like it is coming from the
local
> loopback address on your own machine (127.0.0.1). It looks like if that
> were it you would have it set up to test every 12 seconds?
> -V
>
> ----- Original Message -----
> From: jmtexier <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, July 05, 1999 6:18 PM
> Subject: [IMail Forum] Help ! Am I Hacked ?
>
>
> > Hi everybody...
> > 2 days ago my IMail Server (v4.) starts to have problem and timeout...
> >
> > Regarding the syslog file, I'm a bit afraid to be hacked or something
like
> > that
> >
> > Here is a part of the SysLog file, hope this can give you enough
> information :(
> >
> > to help me cause I can't find anywhere who is connecting on each port of
> my server...
> >
> > Maybe there's some security stuff to setup ?
> >
> > Thanks for your help
> > Jean-Michel.
> >
> > ==== START
> > 07:05 09:39 SMTPD(22F5004C) [127.0.0.1] connect 127.0.0.1 port 4178
> > 07:05 09:40 SMTPD(22F7004C) [127.0.0.1] connect 127.0.0.1 port 4181
> > 07:05 09:40 POP3D(00000054) logon failure for atranvanba bravo.cool.nc
> from
> > 194.51.6.9
> > 07:05 09:40 POP3D(00000054) connection aborted
> > 07:05 09:40 SMTPD(22F9004C) [127.0.0.1] connect 127.0.0.1 port 4184
> > 07:05 09:40 SMTPD(22FB004C) [127.0.0.1] connect 127.0.0.1 port 4187
> > 07:05 09:40 SMTPD(22FD004C) [127.0.0.1] connect 127.0.0.1 port 4190
> > 07:05 09:40 SMTPD(22FF004C) [127.0.0.1] connect 127.0.0.1 port 4194
> > 07:05 09:40 SMTPD(2301004C) [127.0.0.1] connect 127.0.0.1 port 4197
> > 07:05 09:41 SMTPD(2303004C) [127.0.0.1] connect 127.0.0.1 port 4200
> > 07:05 09:41 SMTPD(2305004C) [127.0.0.1] connect 127.0.0.1 port 4203
> > 07:05 09:41 SMTPD(2307004C) [127.0.0.1] connect 127.0.0.1 port 4206
> > 07:05 09:41 SMTPD(2309004C) [127.0.0.1] connect 127.0.0.1 port 4209
> > 07:05 09:41 SMTPD(230C004C) [127.0.0.1] connect 127.0.0.1 port 4212
> > 07:05 09:42 SMTPD(230E004C) [127.0.0.1] connect 127.0.0.1 port 4215
> > 07:05 09:42 SMTPD(2310004C) [127.0.0.1] connect 127.0.0.1 port 4218
> > ... And So One...
> >
> >
> >
> > Thanks for your help :-)
> > Jean-Michel.
> >
> > www.cortex.nc
> > www.cool.nc
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
