[NCLUG] FW: strange message sent to root

Michael Dwyer mdwyer at sixthdimension.com
Mon Feb 26 10:18:13 MST 2001


> hey folks, i just got about 20 of these messages in about 5 seconds.
anyone
> know what's going on here? this is a slackware 7.1 system.

>  [211.118.21.87]
>  No one logged on.

I've never seen anything like that before on a Slack system.  Check the
system logs (/var/log/messges) for any further mail traces.  Also, check the
crontabs (crontab -l <username>) to see if there is a timed event causing
these.  It LOOKS like it was
sent local-to-local, so it is likely from your local machine.  You you
recently install
some intrusion detection software?





More information about the NCLUG mailing list