Monitoring Webmail

Phaedrus · 03-19-2005, 03:13 AM

Is there anyway to continuously monitor the i.p addresses that connect to my webmail>? Someones hacked it and I wanna trace them.

XP pro

redhead · 03-19-2005, 08:26 AM

Code:

~> tcpdump host 1.2.3.4

::edit::
Oh, this is for windows.. then use ethereal. Should be as simple as:

Code:

> ethereal src host 1.2.3.4

Phaedrus · 03-19-2005, 11:13 PM

Damn, I got a problem. Since its not my server, I cant use ethereal. I dont have the skillz to do it surreptitously, and I have no idea how to contact the Admin.

sde · 03-20-2005, 12:01 AM

how do you know they hacked it? do they continue to read your email?

you could always try to get them to click a link inside one of your emails .. maybe make it look very personal, like photos of a g/f or something, .. then make it link to a script no some web server that logs the ip and user agent of whoever visits that page.

it's a long shot, but might be worth a shot if you don't have any other options.

Phaedrus · 03-21-2005, 04:53 PM

No, they aren't doing it for fun. They are just using my Mail as a shell so they dont get caught for their dirty dealings.

I think they logged my Password from a LAN. I've also had some strange dips in my bankaccount and I think that was them too.

Right now I've got outlook express autochecking every minute in case new mail arrives. Tech support told me that anyone using the webmail wouldn't know I was doing that.

sde · 03-21-2005, 05:17 PM

so, maybe a stupid question, but why don't you just change your password?

idx · 03-21-2005, 05:55 PM

....and make sure your webmail is viewed via https

teknomage1 · 03-22-2005, 09:26 AM

Also if they really did start messing wth your bank account, talk to your bank. Banks are very good at tracking fraud.