• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

iptstate shows a persistent connection to port 143 IMAP

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> UNIX // GNU/Linux

View previous topic :: View next topic  
Author Message
midair77
Just Arrived
Just Arrived


Joined: 23 Nov 2004
Posts: 0


Offline

PostPosted: Fri Oct 20, 2006 12:57 am    Post subject: iptstate shows a persistent connection to port 143 IMAP Reply with quote

Hi, all. I used iptstate and saw this connection from 66.88.17.58 and I do not have any user at that ip address.

I use netstat and lsof to list established connections but this one does not show up on the lists. Is my box in danger or compromised?

I used iptstate on another box and saw a connection between bosch.netcraft.com to port 443 HTTPS and the TTL is quite big. Is it a way that netcraft keeps track of web servers' uptime?

Thank you.
Back to top
View user's profile Send private message
segment
Just Arrived
Just Arrived


Joined: 31 Oct 2006
Posts: 0


Offline

PostPosted: Tue Oct 31, 2006 1:16 pm    Post subject: Re: iptstate shows a persistent connection to port 143 IMAP Reply with quote

midair77 wrote:
Hi, all. I used iptstate and saw this connection from 66.88.17.58 and I do not have any user at that ip address.

I use netstat and lsof to list established connections but this one does not show up on the lists. Is my box in danger or compromised?

I used iptstate on another box and saw a connection between bosch.netcraft.com to port 443 HTTPS and the TTL is quite big. Is it a way that netcraft keeps track of web servers' uptime?

Thank you.


That address is a mailserver (mail.westerntech.com) does any one of your users connect there for mail. As for netcraft, is anyone using the Netcraft toolbar
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> UNIX // GNU/Linux All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register