The port # you are seeing is the port # that initiated the connection, not
the port # it was destined for. That is likely what threw you off.
(:->)
-V
----- Original Message -----
From: Jean-Michel TEXIER <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 06, 1999 7:54 AM
Subject: Re: [IMail Forum] Help ! Am I Hacked ?
> So Sorry !!
> You're right It was my IMail Monitor.
> I've set it up to check every 10s instead of 10mn ;-((
>
> But, just to know, why each ports has been checked and not only the
> FTP,WWW,POP and STMP ports (cause I've ask to Monitor only those
> service...).
>
> Thanks
> Jean-Michel
>
> ========================================
> Jean-Michel TEXIER
>
> Cortex Engineering Noumea - Papeete
> Cortex Vanuatu Ltd - Port-Vila
> EuroCortex - France
>
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> ========================================
> ----- Original Message -----
> From: Vaughn Thurman <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, July 06, 1999 12:26 AM
> Subject: Re: [IMail Forum] Help ! Am I Hacked ?
>
>
> > Are you using some kind of monitoring system (IMAIL Monitor, What's Up
> Gold
> > etc.)?
> > That is what it looks like because it looks like it is coming from the
> local
> > loopback address on your own machine (127.0.0.1). It looks like if that
> > were it you would have it set up to test every 12 seconds?
> > -V
> >
> > ----- Original Message -----
> > From: jmtexier <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Monday, July 05, 1999 6:18 PM
> > Subject: [IMail Forum] Help ! Am I Hacked ?
> >
> >
> > > Hi everybody...
> > > 2 days ago my IMail Server (v4.) starts to have problem and timeout...
> > >
> > > Regarding the syslog file, I'm a bit afraid to be hacked or something
> like
> > > that
> > >
> > > Here is a part of the SysLog file, hope this can give you enough
> > information :(
> > >
> > > to help me cause I can't find anywhere who is connecting on each port
of
> > my server...
> > >
> > > Maybe there's some security stuff to setup ?
> > >
> > > Thanks for your help
> > > Jean-Michel.
> > >
> > > ==== START
> > > 07:05 09:39 SMTPD(22F5004C) [127.0.0.1] connect 127.0.0.1 port 4178
> > > 07:05 09:40 SMTPD(22F7004C) [127.0.0.1] connect 127.0.0.1 port 4181
> > > 07:05 09:40 POP3D(00000054) logon failure for atranvanba bravo.cool.nc
> > from
> > > 194.51.6.9
> > > 07:05 09:40 POP3D(00000054) connection aborted
> > > 07:05 09:40 SMTPD(22F9004C) [127.0.0.1] connect 127.0.0.1 port 4184
> > > 07:05 09:40 SMTPD(22FB004C) [127.0.0.1] connect 127.0.0.1 port 4187
> > > 07:05 09:40 SMTPD(22FD004C) [127.0.0.1] connect 127.0.0.1 port 4190
> > > 07:05 09:40 SMTPD(22FF004C) [127.0.0.1] connect 127.0.0.1 port 4194
> > > 07:05 09:40 SMTPD(2301004C) [127.0.0.1] connect 127.0.0.1 port 4197
> > > 07:05 09:41 SMTPD(2303004C) [127.0.0.1] connect 127.0.0.1 port 4200
> > > 07:05 09:41 SMTPD(2305004C) [127.0.0.1] connect 127.0.0.1 port 4203
> > > 07:05 09:41 SMTPD(2307004C) [127.0.0.1] connect 127.0.0.1 port 4206
> > > 07:05 09:41 SMTPD(2309004C) [127.0.0.1] connect 127.0.0.1 port 4209
> > > 07:05 09:41 SMTPD(230C004C) [127.0.0.1] connect 127.0.0.1 port 4212
> > > 07:05 09:42 SMTPD(230E004C) [127.0.0.1] connect 127.0.0.1 port 4215
> > > 07:05 09:42 SMTPD(2310004C) [127.0.0.1] connect 127.0.0.1 port 4218
> > > ... And So One...
> > >
> > >
> > >
> > > Thanks for your help :-)
> > > Jean-Michel.
> > >
> > > www.cortex.nc
> > > www.cool.nc
> > > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > > to be removed from this list.
> > >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
