IP searching and hacking

[old.osi-]

Apparently Millicent Vendor Gateway Server uses port 2180 so it looks like the work machine is trying to connect to you, thinking you're running it. I could be wrong, but that's what it looks like. The source port, on the machine that's trying to connect to you, is just randomly generated and it's nothing to worry about.

Not sure it looks like anything malicious..

 

[Penry]

2180 is also a commonly used port for access to the web based front end of Exchange mail servers if using RPC over HTTP (SSL) - If its been configured to work through a firewall !

Do you remotely access your mail via the web front end of an exchange server ???

 

[Skyler]

ZA never says anyone is "hacking" you..

ZA notifies you if something/someone tries to access your pc without your permission....

 

[~YuckFou~]

Originally posted by Skyler
ZA never says anyone is "hacking" you..

ZA notifies you if something/someone tries to access your pc without your permission....

Agreed, I just worried.

Originally posted by Penry
Do you remotely access your mail via the web front end of an exchange server ???

We use Outlook, full version.

I considered it was the network at work scanning, my only suspicion is that this happened last 14 days ago. If it was regular I probably wouldn't of even worried.

From your answers it seems that it is probably innocent. I'm going to email our Network Guy and cc my Boss, asking for his explanation. If the answer is interesting (unlikely) I'll post it here.

Thanks for your help.