Tugger the SLUGger!SLUG Mailing List Archives

Re: [SLUG] Strange email attempt


From: "Simon Bryan" <sbryan@xxxxxxxxxxxxxxx>

> Hi all,
> logwatch reports the information below for email I understand most of them
because
> they are misspelling of usernames however the second one is ocurring daily
(always
> on my username) and it has me intrigued. Does anyone know if this is
something I
> should be concerned about.
>
> Unknown users:
>     bbrooks@xxxxxxxxxxxxxxx: 72 Times(s)
>     hjekkjmhigfnnfjjmcphgejmdcaa.sbryan@xxxxxxxxxxxxxxx: 1 Times(s)

If this particular address appears every day, the next item to ascertain is,
if it occurs at the same time.

If it is, it may be worth checking your crontab and/or cron.daily and check
what daemons are initiated and the notification addresses for these
daemons.

http://www.acay.com.au/~oscarp/disclaimer.html