Suspicious System Activity

Dake K. Odzangba odzangba at gmail.com
Fri Feb 6 10:06:52 UTC 2009


Hello, my system logs contain some pretty suspicious entries:

Feb  6 09:57:14 mal-zeth nullmailer[13750]: Rescanning queue.
Feb  6 09:57:14 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp 
host: mail. file: 1232179547.12146
Feb  6 09:57:20 mal-zeth nullmailer[31081]: smtp: Failed: Connect failed
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Sending failed:  Host not found
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp 
host: mail. file: 1232972820.23880
Feb  6 09:57:20 mal-zeth nullmailer[31112]: smtp: Failed: Connect failed
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Sending failed:  Host not found
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp 
host: mail. file: 1230018036.25053
Feb  6 09:57:20 mal-zeth nullmailer[31118]: smtp: Failed: Connect failed
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Sending failed:  Host not found
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp 
host: mail. file: 1233752295.23754
Feb  6 09:57:20 mal-zeth nullmailer[31121]: smtp: Failed: Connect failed
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Sending failed:  Host not found
Feb  6 09:57:20 mal-zeth nullmailer[13750]: Starting delivery: protocol: smtp 
host: mail. file: 1232786107.30076
Feb  6 09:57:26 mal-zeth nullmailer[31122]: smtp: Failed: Connect failed
Feb  6 09:57:26 mal-zeth nullmailer[13750]: Sending failed:  Host not found
Feb  6 09:57:26 mal-zeth nullmailer[13750]: Delivery complete, 5 message(s) 
remain.

I have no idea what it's trying to send out and the same sequence repeats 
itself every two minutes or so. I'm freaking out here... has my system been 
compromised?

Some info about my system:
Ubuntu 8.10

uname -a:
Linux mal-zeth 2.6.27-11-generic #1 SMP Thu Jan 29 19:24:39 UTC 2009 i686 
GNU/Linux

-- 
Odzangba,
Blog: http://odzangba.wordpress.com
Registered Linux User #431909
Registered Linux Machines: #337242 #363374 #392526
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20090206/ab958772/attachment.html>


More information about the ubuntu-users mailing list