I have always assumed that unknown hosts was sendmail telling me that someone attempted to relay and was denied. But, recently this activity has escalated and now I am concerned. Can anyone help me decifer whats going on here? I usually use webmin to modify sendmail since alot of the config file is foreign to me. maybe thats my problem... Thanks... here is my log file: --------------------- sendmail B 14 unidentified unknown users Unknown hosts: mediaplex[2].txt: 1 Times(s) advertising[2].txt: 2 Times(s) bfast[1].txt: 1 Times(s) jpqn012170: 1 Times(s) overture[1].txt: 1 Times(s) gov.us: 3 Times(s) adserver.trb[2].txt: 1 Times(s) c.sexcounter[1].txt: 1 Times(s) trafficmp[4].txt: 1 Times(s) st.sageanalyst[1].txt: 1 Times(s) as-us.falkag[1].txt: 1 Times(s) server.iad.liveperson[1].txt: 1 Times(s) exlist.txt: 1 Times(s) doubleclick[1].txt: 2 Times(s) knowledgebase.fi: 2 Times(s) trafficmp[1].txt: 1 Times(s) hitbox[1].txt: 1 Times(s) atdmt[2].txt: 1 Times(s) ru4[1].txt: 1 Times(s) servedby.advertising[1].txt: 1 Times(s) statse.webtrendslive[1].txt: 1 Times(s) Did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA: 211.33.96.105 : 1 Time(s) **Unmatched Entries** STARTTLS=client, relay=btmx4.sun.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256: 2 Time(s) i7HKCYIn012523: return to sender: Host unknown (Name server: shareware-australia.com: no data known): 1 Time(s) STARTTLS=client, relay=zq8.net., version=TLSv1/SSLv3, verify=FAIL, cipher=AES256-SHA, bits=256/256: 1 Time(s) STARTTLS=client, relay=mail.alfacolor.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DES-CBC3-SHA, bits=168/168: 1 Time(s) ---------------------- sendmail-