It looks like we have been compromised.

The TCP/IP address of our domain has been replaced with 

Maxtasktitlelenc:\Imail

I'll get support to look at this.



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Travis Rabe
Sent: Friday, July 23, 2004 8:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Odd Hosts appearing in Imail Admin Screen


That is scary looking indeed!  Can you check your logs and see what kind of
mail has been going out?  Anything that shouldn't be there?  Maybe check
your NT Security logs as well and see if someone's logging in that you
wouldn't expect to be.  Does the machine name exist on your network?  If you
check your router logs - is there a IP coming into that server that you
wouldn't expect say on a port 137/138/139?  I am just guessing at things to
look at there, but maybe the logs would be the best place to check.

Regards,

Travis

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Arthur Beaudette
Sent: Friday, July 23, 2004 2:05 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] Odd Hosts appearing in Imail Admin Screen

Haven't been in my Imail Admin screen in a while.

I have something odd... Hope we haven't been compromised.

http://www.vm-systems.com/oddimail.jpg

Any ideas?

Arthur


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to