Possible Attack Warning in logwatch message: loopback relay
 

Hi,

I got this message with my regular logwatch messages, could anyone help me understand what this is ? I'm not concerned about this since this traffic is generated from the loopback address, but would like to find out what it is.


--------------------- sendmail Begin ------------------------
Bytes Transferred: 30328096
Messages Sent: 6698
Total recipients: 6700

WARNING!!!!
Possible Attack:
Attempt from localhost.localdomain [127.0.0.1] with:
command=NOOP, count=20 : 48 Time(s)

Message Size Distribution:
Range # Msgs KBytes
0 - 10k 6613 28709
10k - 20k 85 907
20k - 50k 0 0
50k - 100k 0 0
100k - 500k 0 0
500k - 1Mb 0 0
1Mb - 2Mb 0 0
2Mb - 5Mb 0 0
5Mb - 10Mb 0 0
10Mb+ 0 0
----------------------------------
TOTAL 6698 29617
Avg. Size 4

Top relays (recipients/connections - min 10 rcpts, max 50 lines):
6697/6696: localhost.localdomain [127.0.0.1]

Client quit before communicating:
127.0.0.1 : 6896 Time(s)





Thank You

Sam

I don't know sendmail but you may have a spam/content filter on the same host