[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Strange e-mail, sign of hack?
- Subject: [cobalt-security] Strange e-mail, sign of hack?
- From: "Rex Gaylord" <rex@xxxxxxxxxxxxxx>
- Date: Wed, 21 May 2003 13:22:34 -0700
- Organization: CCC/America
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
I received an e-mail today that was sent to a newly created site and user on
a RaQ4. It has Spamassin and Kaspersy installed on the server. The message
was sent a couple of days after the new virtual site was created on the
server. Is there any way that some process sent this message, or should I
be looking for evidence that I got hacked and somebody logged in as root?
Thanks, Rex Gaylord
=====Message and Text=======================
From: root
Subject: Testmail - please disregard
Please ignore this message.
Regards,
Your system administrator
====== Header Info ======================
Return-Path: <root>
Received: (from root@localhost)
by www.xxx-xxxxxx.com (8.10.2/8.10.2) id h4LGieE12006 {edited by Rex
Gaylord}
for tandem1; Wed, 21 May 2003 09:44:40 -0700
Date: Wed, 21 May 2003 09:44:40 -0700
From: Root <root>
Message-Id: <200305211644.h4LGieE12006@xxxxxxxxxxxxxxxxxx> {edited by Rex
Gaylord}
Subject: Testmail - please disregard
X-Spam-Status: No, hits=1.0 required=6.0
tests=MISSING_HEADERS
version=2.50
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp)
X-UIDL: <C%"!cmJ"!)Nk"!-)Q"!