what does this sendmail message in Logwatch showing? hacking?
Paul Howarth
paul at city-fan.org
Tue Jun 6 20:45:26 UTC 2006
On Tue, 2006-06-06 at 10:58 -0700, M E Fieu wrote:
> Thanks how about the following ??
>
> ################### LogWatch 4.3.2 (02/18/03) ####################
> Processing Initiated: Tue Jun 6 04:02:01 2006
> Date Range Processed: yesterday
> Detail Level of Output: 0
> Logfiles for Host: www3
> ################################################################
>
> --------------------- sendmail Begin ------------------------
>
> Unknown users:
>
> believeworld0303
> from localhost.localdomain [127.0.0.1] 2 time(s).
>
> lichungchung
> from localhost.localdomain [127.0.0.1] 1 time(s).
What don't you understand about this? Someone on this machine tried
sending mail to the non-existent users believeworld0303 and
lichungchung. Look in /var/log/maillog for those usernames to see when
it happened, and possibly more details.
And why are you running such an ancient version of logwatch?
Paul.
More information about the fedora-list
mailing list