#1
  1. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2013
    Posts
    48
    Rep Power
    5

    Lightbulb Discovering source of SPAM / hole in server


    Hello,

    i have an CentOS + webserver + postfix + zpanel

    this configuration always somehow get infected or what, because the deferred and defer folder is getting filled with deferred mails like

    Subject: FW: URGENT CONFIRMATION

    Good Day,

    Please disregard the first email the attached it wrong find=NL the new attached file Export AMS SAT CLR document.
    Kindly acknowledge a=NLfter sign on the YELLOW PART . Urgently advice.

    Thanks & Regards,
    Nelson
    Sales Manager
    OGMIS FOOD GROUP
    143 Sanxiang Road, Suzhou, Jiangsu, China, 215004
    Mobile #: | =NLOffice: 817-292-6475 / <=NJ/B>Fax: 817-4=N33-0776
    Email: ***
    it goes to various recipients

    somethign from /var/log/maillog

    Sep 29 18:26:34 mtqpahwc postfix/smtp[3160]: 648D63******: to=<atm****@london.com>, relay=london.com[67.228.*.*]:25, delay=331, delays=274/55/2.2/0.15, dsn=4.0.0, status=deferred (host london.com[67.228.*.*] said: 451 Temporary local problem - please try later (in reply to RCPT TO command))
    i added * for privacy

    also log contains huge number of lines like:
    Sep 29 18:26:31 mtqpahwc postfix/qmgr[3075]: 9DDBA38****: from=<bright@*****.com>, size=102654, nrcpt=1 (queue active)
    the line containing "from=<bright@*******.com>, size=102644, nrcpt=1"
    is in maillog 25 462 times!!!

    Please kindly help me to debug the cause / hole?
    i read this usefull tutorial, but im not successfull discovering.
    $0.5 Hosting on cPanel
    $4 VPS; $30 Dedi
    InstantcPanelHosting.com
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2013
    Posts
    48
    Rep Power
    5
    Just want to provide a few emails headers which can help in learning what is the source of SPAM and hot fix the hole:
    VPS with postfix and zpanel. i think almost exclusivelly mails are in deferred f - Pastebin.com
  4. #3
  5. No Profile Picture

    Join Date
    Oct 2014
    Posts
    1
    Rep Power
    0
    Tiểu Học Sinh Liên Minh (tên tiếng Anh: League of Cute) là một game mobile online 2D thuộc thể loại game thẻ bài có đề tài ma ảo được phát triển và vận hành bởi công ty ZQgame. Tṛ chơi có bối phim hay cảnh chính được dựa theo game moba đ́nh đám League of Legend, tuy nhiên lại có phong cách thiết kế đồ họa theo hướng Q-style dễ thương cùng cơ chế gameplay độc đáo để hạp với nền móng di động.

IMN logo majestic logo threadwatch logo seochat tools logo