[SLUG] Strange email attempt

2003-06-20 Thread Simon Bryan
Hi all,
logwatch reports the information below for email I understand most of them because
they are misspelling of usernames however the second one is ocurring daily (always
on my username) and it has me intrigued. Does anyone know if this is something I
should be concerned about.

Unknown users:
[EMAIL PROTECTED]: 72 Times(s)
[EMAIL PROTECTED]: 1 Times(s)
[EMAIL PROTECTED]: 24 Times(s)
[EMAIL PROTECTED]: 24 Times(s)



Simon Bryan
IT Manager
OLMC Parramatta
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Strange email attempt

2003-06-20 Thread Anthony Wood
On Sat, Jun 21, 2003 at 10:24:40AM +1000, Simon Bryan wrote:
 Hi all,
 logwatch reports the information below for email I understand most of them because
 they are misspelling of usernames however the second one is ocurring daily (always
 on my username) and it has me intrigued. Does anyone know if this is something I
 should be concerned about.
 
 Unknown users:
 [EMAIL PROTECTED]: 72 Times(s)
 [EMAIL PROTECTED]: 1 Times(s)

This is probably a msgid harvested from a webpage or a bug in a script.

If you're curious, and the address is the same every day, just set it up as an alias
and you can see what it is -- might give you some more clues.

cheers,
Woody

 [EMAIL PROTECTED]: 24 Times(s)
 [EMAIL PROTECTED]: 24 Times(s)
 
 
 
 Simon Bryan
 IT Manager
 OLMC Parramatta
 -- 
 SLUG - Sydney Linux User's Group - http://slug.org.au/
 More Info: http://lists.slug.org.au/listinfo/slug

-- 
Woody
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Strange email attempt

2003-06-20 Thread Oscar Plameras

From: Simon Bryan [EMAIL PROTECTED]

 Hi all,
 logwatch reports the information below for email I understand most of them
because
 they are misspelling of usernames however the second one is ocurring daily
(always
 on my username) and it has me intrigued. Does anyone know if this is
something I
 should be concerned about.

 Unknown users:
 [EMAIL PROTECTED]: 72 Times(s)
 [EMAIL PROTECTED]: 1 Times(s)

If this particular address appears every day, the next item to ascertain is,
if it occurs at the same time.

If it is, it may be worth checking your crontab and/or cron.daily and check
what daemons are initiated and the notification addresses for these
daemons.

http://www.acay.com.au/~oscarp/disclaimer.html

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug