Trojan or something ?

  • From: Arief Kurniawan <ariefk@xxxxxxxxxxxxxx>
  • To: exchangelist@xxxxxxxxxxxxx
  • Date: Tue, 05 Aug 2003 10:19:05 +0800

My Exchange 5.5 Server doing some illegal activities. Firewall log shows that it tries to connect to some unknown Private Class C IP (While Our network is using Private Class A IP addresses) and IP address (none of our node). Destination port is 4939, 4940, 4561, 1519 and 1528. Is this normal or some kind of trojan ?


Arief K

Other related posts: