The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Have I been hacked?

Discussion in 'General Discussion' started by Fever500, Jun 3, 2005.

  1. Fever500

    Fever500 Member

    Joined:
    Sep 2, 2003
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    I am getting this in my secure log

    Apr 17 13:41:27 xinetd[22653]: START: imap pid=10227 from=206.51.26.166

    I don't see any other IP's except for the localhost of 127.0.0.1 All the rest are in the 206.51.26.xxx range ...

    Is this just someone using webmail or something more sinister?

    thanks
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    All that means is that there was a connection to imapd it gives no indication whether there was a successful login. For that, check your /var/log/maillog file which will have the login and logout information for each imap session.
     
  3. Fever500

    Fever500 Member

    Joined:
    Sep 2, 2003
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Thanks,

    Looks like someone's blackberry.
     
Loading...

Share This Page