Hi Jeffrey: You've been HACKED!
Here is what it would look like, if you connect to an Imail POP3 server (which is port 110): C:\ >telnet mail.webhost.hm-software.com 110 +OK X1 NT-POP3 Server Mail.Webhost.HM-Software.com (IMail 9.21 26938-9) USER [EMAIL PROTECTED] +OK send your password PASS ********* +OK maildrop locked and ready Please note that the POP3 protocol (http://www.faqs.org/rfcs/rfc1939.html) only knows TWO possible reponses: +OK or -ERR Now compare that with what happens when I telnet to port 110 at the mail server address that I found in your OE POP3 log: a) That is NOT an IMAIL server responding - so it can't be an Imail problem! b) This is NOT a POP3 session - it's an FTP session! c) In fact the FTP server banner very clearly states that this is a Pubstro (a public file exchange server for hackers) Just look at it yourself: C:\> telnet mail.j************g.net 110 220-un4uth0r1z3d 4cc3s, yu0r pr0b3 4tt3mpt h4s b33n l0gg3d! 220- __________________________________________________________ 220-/ 220-| 220-| Welcome to another ArSeY Pubstro 220-| Sk4nn3d by Fubbisko 220-| H4XXoReD by ArSeY 220-| Today its: Wednesday 12 September, 2007 Time: 12:26:04 220-| 220-| Rules: 220-| - Don't rehack this pubstro. 220-| - Don't hammer. 220-| - Don't be a lamer and delete stuff 220-| - Etc. etc. 220-| 220-| Have fun, 220-| 220-| 220-\__________________________________________________________/ 220- 220- 220- __ Server Statistics ____________________________________ 220-/ 220-| 220-| Kb downloaded: 0 Kb 220-| Kb uploaded: 0 Kb 220-| 220-| Files downloaded: 0 220-| Files uploaded: 0 220-| 220-| Average througput: 0.000 Kb/sec 220-| Current througput: 0.000 Kb/sec 220-| 220-| Running: 3 days, 4 hours, 9 min. and 4 sec.\ 220-| Current Users Connected : 1 220-| Your IP : 63.107.174.156 220-| Max Users allowed : 10 220-| 220-| Free Space on this Str0 222.69 Mb 220 \_____________________________________ Server Statistics _/ >HELP 214- The following commands are recognized (* => unimplemented). USER PORT RETR ALLO DELE SITE XMKD CDUP FEAT PASS PASV STOR REST CWD STAT RMD XCUP OPTS ACCT TYPE APPE RNFR XCWD HELP XRMD STOU REIN STRU SMNT RNTO LIST NOOP PWD SIZE QUIT MODE SYST ABOR NLST MKD XPWD MDTM 214 Direct comments or bugs to [EMAIL PROTECTED] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
