Suspicious entry in Secure Connecton Log
I recently had to get tech support to disable my firewall so I can log back in (apf's antidos had banned my IP). Well, they didnt do it until 3 in the morning so I headed to bed.
What had happened was the server was without a firewall for a couple hours. This morning I find this in my secure Log:
**Unmatched Entries**
usermod[17484]: change user `mailman' GID from `503' to `503'
groupadd[18737]: new group: name=mailtrap, gid=506
Any ideas on what this is? Thanks.
