root로 온 메일내용 좀 확인바랍니다...

root 로 온 메일입니다. 외부에서 누가 침입한건가요?

서버이름과 아이피주소는 제가 xxx로 표기하였읍니다.

From: root root@xxx.xxx.ac.kr
root@xxx.xxx.ac.kr
Subject: LogWatch for xxx.xxx.ac.kr

 ################## LogWatch 2.1.1 Begin #####################

--------------------- sendmail Begin ------------------------

333434 bytes transferred
20 messages sent

Unknown users:
    hwa@xxx.xxx.ac.kr: 2 Times(s)
    xyz@xx.xxx.ac.kr: 1 Times(s)
   

**Unmatched Entries**

h3E8jaJ13560: lost input channel from [211.60.219.xxx] to MTA after rcpt
h3E9cKJ13708: lost input channel from [61.251.165.xx ]to MTA after rcpt

 ---------------------- sendmail End -------------------------

이 내용과 다른 내용으로는 ..

To: root@xxx.xxx.ac.kr
Subject: Cron root@xxx run-parts /etc/cron.daily

/etc/cron.daily/tripwire-check:

****    Error: Tripwire database for xxx.xxx.ac.kr not found.    ****
**** Run /etc/tripwire/twinstall.sh and/or tripwire --init. ****