} } greetings } } like many, i get a daily logwatch email from "root" about 4AM } } last night, i rebooted a server from remote between midnight and 2AM and, } uncle me, i received an extra logwatch from "anonymous" at the same } machine } } can anyone explain or has anyone else else ever seen this behavior? } } just wondering and thanks in advance } apologies for reply to my own post... yes, it was from anonymous at thatserver dot mydomain dot net thanks again - rh