it's possible that the ns.iim.co.uk server has been compromised and is being
used to try to send mail from you. Have you sent an email to their
postmaster to see if they know anything about it?
-Michèle
Immigration site: <http://LadySun1969.tripod.com>
Our new 2001 Miata: <http://members.cardomain.com/bpituley>
Tiggercam: <http://www.tiggercam.co.uk>
---------------------------------------------------------
Apparently, 1 in 5 people in the world are Chinese. And there are 5 people
in my family, so it must be one of them. It's either my mum or my dad. Or
my older brother Colin. Or my younger brother Ho-Cha-Chu. But I think it's
Colin.
---------------------------------------------------------
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 06, 2001 12:18 PM
To: MS-Exchange Admin Issues
Subject: Re: Authentication attempt failed
It looks like it could be a nameserver for iim.co.uk (hence the 'ns' bit of
the
server name) but for some reason it's trying to come in on port 25, thus
exercising your SMTP server.
There is an 'iim.co.uk'; they claim to be a 'full service & design' company.
They'e in Berkshire. Is that local to you?
Tom
Mike McBride <[EMAIL PROTECTED]> on 06/09/2001 17:06:17
Please respond to "MS-Exchange Admin Issues"
<[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" <[EMAIL PROTECTED]>
cc:
Subject: Authentication attempt failed
I've been getting the following message in my event log for the last day or
so.
EventID: 4185
Source: MSExchangIMC
Type: Error
Category SMTP Interface Events
Authentication attempt (AUTH LOGIN) from ns.iim.co.uk failed: unable to
decode Base-64 string.
The only thing in the KB that is close is a discussion about email from
servers sent in an X.500 DN format. (Q235627)
I've checked with all of my users and no one is corresponding with anyone in
the UK so it is unlikely that this is mail we are expecting. This error is
popping up every 20 minutes or so and has me wondering if I have someone
trying to hack my server. Am being paranoid here, or is someone really out
to get me?
Mike McBride
MIS Manager
Crumrine Mfg. Jewelers
[EMAIL PROTECTED]
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
__________________________ Disclaimer Notice __________________________
This message and any attachments are confidential and should only be read
by those to whom they are addressed. If you are not the intended recipient,
please contact us, delete the message from your computer and destroy any
copies. Any distribution or copying without our prior permission is
prohibited.
Internet communications are not always secure and therefore the Powergen
Group does not accept legal responsibility for this message. The recipient
is responsible for verifying its authenticity before acting on the
contents. Any views or opinions presented are solely those of the author
and do not necessarily represent those of the Powergen Group.
Powergen plc. 53 New Broad Street, London EC2M 1SL
Telephone +44 (0) 2476 42 4000
Fax +44 (0) 2476 42 5432
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
