Can someone tell me if this looks like a hacker bouncing off of my mail server. To let you know mydomain.com is of course my domain...i have just made it anonymous yyyy is a valid user on mydomain who is trying to mail [EMAIL PROTECTED] at exactly the same time, so I am curious as to whether or not they are coincidental or not. ctkbkrngmsn.com is not a valid user on my domain--I found this entry by running IMANALYZE demo software against my server and found smtp entries with no user name. Any infomation decipering this would be greatly appreciated. 02:28 09:24 SMTP-(000007F4) processing C:\IMail\spool\Q341d763.GSC 02:28 09:24 SMTP-(000007F4) ldeliver mydomain.com yyyy-Sent (1) <[EMAIL PROTECTED]> 1055 02:28 09:24 SMTP-(000007F4) Trying anotherdomain.com (0) 02:28 09:24 SMTP-(000007F4) Connect anotherdomain.com [216.232.127.183:25] (1) 02:28 09:24 SMTP-(000007F4) 220 anotherdomain.com ESMTP service ready [1] using MDaemon v3.0.2 R 02:28 09:24 SMTP-(000007F4) >EHLO mydomain.com 02:28 09:24 SMTP-(000007F4) 250-anotherdomain.com Hello mydomain.com, ESMTP hello! 02:28 09:24 SMTP-(000007F4) 250-EXPN 02:28 09:24 SMTP-(000007F4) 250-ETRN 02:28 09:24 SMTP-(000007F4) 250 SIZE 02:28 09:24 SMTP-(000007F4) >MAIL FROM:<[EMAIL PROTECTED]> 02:28 09:24 SMTP-(000007F4) 250 <[EMAIL PROTECTED]>, Sender ok 02:28 09:24 SMTP-(000007F4) >RCPT To:<[EMAIL PROTECTED]> 02:28 09:24 SMTP-(000007F4) 250 <[EMAIL PROTECTED]>, Recipient ok 02:28 09:24 SMTP-(000007F4) >DATA 02:28 09:24 SMTP-(000007F4) 354 Enter mail, end with <CRLF>.<CRLF> 02:28 09:24 SMTP-(000007F4) >. 02:28 09:24 SMTP-(000007F4) 250 Ok, message saved 02:28 09:24 SMTP-(000007F4) rdeliver anotherdomain.com [EMAIL PROTECTED] (1) <[EMAIL PROTECTED]> 1055 02:28 09:24 SMTP-(000007F4) >QUIT 02:28 09:24 SMTP-(000007F4) 221 See ya in cyberspace 02:28 09:24 SMTP-(000007F4) finished C:\IMail\spool\Q341d763.GSC status=1 02:28 09:24 SMTP-(00000990) processing C:\IMail\spool\Q264c138.SMD 02:28 09:24 SMTP-(00000990) Trying yahoo.com (0) 02:28 09:24 SMTP-(00000990) Connect yahoo.com [216.136.129.18:25] (1) 02:28 09:24 SMTP-(00000990) 220 YSmtp mta449.mail.yahoo.com ESMTP service ready 02:28 09:24 SMTP-(00000990) >EHLO mydomain.com 02:28 09:24 SMTP-(00000990) 250-mta449.mail.yahoo.com 02:28 09:24 SMTP-(00000990) 250-8BITMIME 02:28 09:24 SMTP-(00000990) 250-SIZE 3145728 02:28 09:24 SMTP-(00000990) 250 PIPELINING 02:28 09:24 SMTP-(00000990) >MAIL FROM:<[EMAIL PROTECTED]> 02:28 09:24 SMTP-(00000990) 250 sender <[EMAIL PROTECTED]> ok 02:28 09:24 SMTP-(00000990) >RCPT To:<[EMAIL PROTECTED]> 02:28 09:24 SMTP-(00000990) 250 recipient <[EMAIL PROTECTED]> ok 02:28 09:24 SMTP-(00000990) >DATA 02:28 09:24 SMTP-(00000990) 354 go ahead 02:28 09:24 SMTP-(00000990) >. 02:28 09:24 SMTP-(00000990) 250 ok dirdel 02:28 09:24 SMTP-(00000990) rdeliver yahoo.com [EMAIL PROTECTED] (1) <ctkbkrngmsn.com> 244 02:28 09:24 SMTP-(00000990) >QUIT 02:28 09:24 SMTP-(00000990) 221 mta449.mail.yahoo.com 02:28 09:24 SMTP-(00000990) finished C:\IMail\spool\Q264c138.SMD status=1 _____________________________________________________________ cyberradio2000.com "What Do You Want To Listen To Today---> http://www.cyberradio2000.com Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
