Reply to: Ajay Tikoo
Re: [IMail Forum] Am I being hacked? on Thursday 9:40:45 AM
For about 24 hours now we have been using a new hacker reporting
utility from http://www.mynetwatchman.com This seems to be a message
to mention this here. We use BlackIce from Network Ice and this
utility watches its logs and automates centralized reporting of hackers
to ISPs. We are very impressed, because many ISPs are instantly
notified of activity and can go right after those attempting to hack
systems all over the net. It works with a variety of Windows and
Unix firewalls. When you go to the site above, you can actually
see tracking of hackers on systems all over. You can also see notices
an ISP issues when an escalated warning occurs to the hacker.
With regard to this message, you can search the databases for IP
numbers to qualify blocking in Imail if you wish. I thought others
here might want to know about this unique resource.
Here's how it works.
1. Go to the site above a register using your email address and
a unique password for that site's account.
2. Download the appropriate software from the site and install it.
Use the email address and the unique account password you
created on their site in the setup of the software. Then
you are done.
Once installed you can even log into their site remotely and read
private logs of attempted hacks on your servers. If you are concerned
you could note hackers addresses, then log into Imail Administration
and block the addresses. Fun stuff...
--
Roger Heath
advanced internet desktop: www.activatordesk.com
antivirus antispam email : www.activatormail.com
master internet index : www.infogrid.com
----- Copy of Original Message(s): -----
A> While going through Imail logs, I found the following repeated at
A> diffeternt times:
A> 07:25 09:02 POP3D (%1!08X!) %2!s!logon success for %3!s! %4!s! from %5!s!
A> 07:25 09:02 POP3D (%1!08x!) logoff for %2!s! R:%3!i!, D:%4!i!, P:%5!i!
A> What does this mean. Is someone trying to hack our server? What do I do in
A> order to avoid this. Such entries are there multiple times in the logs.
A> ______________
A> Ajay Tikoo
A> Zerowait Computers Inc.
A> Please visit http://www.ipswitch.com/support/mailing-lists.html
A> to be removed from this list.
A> An Archive of this list is available at:
A> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
