|
Possible Attack Warning in logwatch message: loopback relay
Hi,
I got this message with my regular logwatch messages, could anyone help me understand what this is ? I'm not concerned about this since this traffic is generated from the loopback address, but would like to find out what it is.
--------------------- sendmail Begin ------------------------
Bytes Transferred: 30328096
Messages Sent: 6698
Total recipients: 6700
WARNING!!!!
Possible Attack:
Attempt from localhost.localdomain [127.0.0.1] with:
command=NOOP, count=20 : 48 Time(s)
Message Size Distribution:
Range # Msgs KBytes
0 - 10k 6613 28709
10k - 20k 85 907
20k - 50k 0 0
50k - 100k 0 0
100k - 500k 0 0
500k - 1Mb 0 0
1Mb - 2Mb 0 0
2Mb - 5Mb 0 0
5Mb - 10Mb 0 0
10Mb+ 0 0
----------------------------------
TOTAL 6698 29617
Avg. Size 4
Top relays (recipients/connections - min 10 rcpts, max 50 lines):
6697/6696: localhost.localdomain [127.0.0.1]
Client quit before communicating:
127.0.0.1 : 6896 Time(s)
Thank You
Sam
|
