Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Have I been hacked?

Discussion in 'General Discussion' started by Fever500, Jun 3, 2005.

  1. Fever500

    Fever500 Member

    Joined:
    Sep 2, 2003
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    151
    I am getting this in my secure log

    Apr 17 13:41:27 xinetd[22653]: START: imap pid=10227 from=206.51.26.166

    I don't see any other IP's except for the localhost of 127.0.0.1 All the rest are in the 206.51.26.xxx range ...

    Is this just someone using webmail or something more sinister?

    thanks
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    22
    Trophy Points:
    463
    Location:
    Go on, have a guess
    All that means is that there was a connection to imapd it gives no indication whether there was a successful login. For that, check your /var/log/maillog file which will have the login and logout information for each imap session.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Fever500

    Fever500 Member

    Joined:
    Sep 2, 2003
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    151
    Thanks,

    Looks like someone's blackberry.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice