Suspicious System Activity
Dake K. Odzangba
odzangba at gmail.com
Fri Feb 6 10:06:52 UTC 2009
Hello, my system logs contain some pretty suspicious entries:
Feb 6 09:57:14 mal-zeth nullmailer[13750]: Rescanning queue.
Feb 6 09:57:14 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp
host: mail. file: 1232179547.12146
Feb 6 09:57:20 mal-zeth nullmailer[31081]: smtp: Failed: Connect failed
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Sending failed: Host not found
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp
host: mail. file: 1232972820.23880
Feb 6 09:57:20 mal-zeth nullmailer[31112]: smtp: Failed: Connect failed
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Sending failed: Host not found
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp
host: mail. file: 1230018036.25053
Feb 6 09:57:20 mal-zeth nullmailer[31118]: smtp: Failed: Connect failed
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Sending failed: Host not found
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp
host: mail. file: 1233752295.23754
Feb 6 09:57:20 mal-zeth nullmailer[31121]: smtp: Failed: Connect failed
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Sending failed: Host not found
Feb 6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp
host: mail. file: 1232786107.30076
Feb 6 09:57:26 mal-zeth nullmailer[31122]: smtp: Failed: Connect failed
Feb 6 09:57:26 mal-zeth nullmailer[13750]: Sending failed: Host not found
Feb 6 09:57:26 mal-zeth nullmailer[13750]: Delivery complete, 5 message(s)
remain.
I have no idea what it's trying to send out and the same sequence repeats
itself every two minutes or so. I'm freaking out here... has my system been
compromised?
Some info about my system:
Ubuntu 8.10
uname -a:
Linux mal-zeth 2.6.27-11-generic #1 SMP Thu Jan 29 19:24:39 UTC 2009 i686
GNU/Linux
--
Odzangba,
Blog: http://odzangba.wordpress.com
Registered Linux User #431909
Registered Linux Machines: #337242 #363374 #392526
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20090206/ab958772/attachment.html>
More information about the ubuntu-users
mailing list