Have you had a portscan on the ip address from outside your network???
Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Chris Ulrich > Sent: Tuesday, November 29, 2005 12:26 PM > To: [email protected] > Subject: RE: [IMail Forum] Phantom Postmaster accounts? > > > I don't think so, but we'll go through and double check. Good > tip. Thanks > > > At 02:51 PM 11/29/2005, you wrote: > >The admin account may have been compromised. Through webmail. Does an > >account have domain admin access and web access??? > > > > > >Kevin > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of Chris Ulrich > > > Sent: Tuesday, November 29, 2005 11:36 AM > > > To: [email protected] > > > Subject: [IMail Forum] Phantom Postmaster accounts? > > > > > > > > > We checked two of the domains on our server and, under USERS, we see: > > > > > > p > > > po > > > pos > > > post > > > postm > > > postma > > > postmas > > > postmast > > > postmaste > > > postmaster > > > > > > as POP accounts.... I don't know if this is the result of a > > > hack attempt, > > > a glitch in IMail or something else. > > > > > > Has anyone seen this previously? Our mail server is behind a > firewall, > > > only HTTP, Port 25 and 110 access, so I'm not *overly* concerned that > > > someone is terminal servicing in to the box. But I use > "overly" pretty > > > losely right now.... > > > > > > Has anyone seen anything like this previously? > > > > > > Thanks > > > > > > > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > --- > > > [This E-mail scanned for viruses by Declude Virus] > > > > > > > > > > > > >--- > >[This E-mail scanned for viruses by Declude Virus] > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > >List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
