Vesta Control Panel - Forum

Community Forum

Skip to content

Advanced search
  • Quick links
    • Main site
    • Github repo
    • Google Search
  • FAQ
  • Login
  • Register
  • Board index Main Section Mail Server
  • Search

Server Is Sending Spam Email

Questions regarding the Mail Server
Dovecot, Exim, RoundCube
Locked
  • Print view
Advanced search
6 posts • Page 1 of 1
msk19994
Posts: 23
Joined: Thu Jun 05, 2014 5:55 am

Server Is Sending Spam Email

Post by msk19994 » Wed Jul 01, 2015 4:01 pm

Hey Guys
I have no idea why my server is sending spam
according to the logs

Code: Select all

2015-07-01 17:45:56 1ZAKCy-0000FV-9B <= <> R=1Z9VFh-0004IB-55 U=exim P=local S=1445
2015-07-01 17:45:56 1ZAKCy-0000FV-9B lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:45:56 1ZAKCy-0000FV-9B == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:45:56 1ZAKCy-0000FV-9B Frozen
2015-07-01 17:45:56 1Z9agZ-0002T7-Ic Unfrozen by errmsg timer
2015-07-01 17:45:56 1Z9agZ-0002T7-Ic == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1Z9cXy-000BTT-3V Message is frozen
2015-07-01 17:45:56 1Z9q09-0006fa-NN Message is frozen
2015-07-01 17:45:56 1ZA4em-0004wO-Ub Message is frozen
2015-07-01 17:45:56 1Z9eYc-0009vp-83 Message is frozen
2015-07-01 17:45:56 1ZAIg6-0000PS-Hl Message is frozen
2015-07-01 17:45:56 1Z9jzS-0001sg-Rj Message is frozen
2015-07-01 17:45:56 1ZAHMw-0005Gx-6N Message is frozen
2015-07-01 17:45:56 1ZA3x8-000FSE-AF Message is frozen
2015-07-01 17:45:56 1Z9adb-0001Sm-8g == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1ZAC4Z-00098D-8w Message is frozen
2015-07-01 17:45:56 1Z9HXB-0008Wz-FS == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:56 1Z9h2U-000D6l-Rw Message is frozen
2015-07-01 17:45:56 1ZACGu-0001wC-L1 Message is frozen
2015-07-01 17:45:56 1Z9aC1-000Aub-T2 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:56 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta5.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:56 1Z9ZPS-000EmH-NC SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [98.136.216.26]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [66.196.118.240]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZPS-000EmH-NC SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZPS-000EmH-NC == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc <= <> R=1Z9ZPS-000EmH-NC U=exim P=local S=1456
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc Frozen
2015-07-01 17:45:57 1Z9XSH-000Aao-Sm == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:57 1ZAA1S-0001Bj-Du Message is frozen
2015-07-01 17:45:57 1ZA6Jo-0007kW-VD Message is frozen
2015-07-01 17:45:57 1Z9dsn-000Fn5-B9 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:57 1ZA6Qo-0009gq-0e Message is frozen
2015-07-01 17:45:57 1Z9y27-0000zK-9M Message is frozen
2015-07-01 17:45:57 1ZA0FT-000Ezf-Hj Message is frozen
2015-07-01 17:45:57 1Z9OmH-0005mk-QH == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:57 1ZAA9m-0002Vl-9T Message is frozen
2015-07-01 17:45:57 1ZAB0d-000Giv-TM Message is frozen
2015-07-01 17:45:57 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.240]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z93AO-00017k-9O == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9OmH-0005mk-QH == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:59 1ZAA9m-0002Vl-9T Message is frozen
2015-07-01 17:45:59 1ZAB0d-000Giv-TM Message is frozen
2015-07-01 17:45:59 1ZA6l9-0001OV-O8 Message is frozen
2015-07-01 17:45:59 1Z9bc0-000EgB-ND == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:59 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.37]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9boD-0001Su-2L == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9gLM-0001f6-JT Message is frozen
2015-07-01 17:46:00 1Z9aM5-000DKO-O8 Unfrozen by errmsg timer
2015-07-01 17:46:00 1Z9aM5-000DKO-O8 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:00 1Z9mDS-00062l-7b Message is frozen
2015-07-01 17:46:00 1ZAC6N-000A4w-Sg Message is frozen
2015-07-01 17:46:00 1Z9L5z-000BnH-O6 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:00 1Z9dyK-000Gr0-4l Message is frozen
2015-07-01 17:46:00 1Z9lYG-000GZs-Bu Message is frozen
2015-07-01 17:46:00 1Z9UpD-000GrP-90 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2417: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z8zaP-000DQV-KR == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:00 1Z9W31-000Cd8-P1 Unfrozen by errmsg timer
2015-07-01 17:46:00 1Z9W31-000Cd8-P1 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:00 1ZAHr4-0009er-T2 Message is frozen
2015-07-01 17:46:00 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [66.196.118.33]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9UpD-000GrP-90 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2417: host mta7.am0.yahoodns.net [66.196.118.33]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9ZLY-000DJ3-S7 == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld <= <> R=1Z9ZLY-000DJ3-S7 U=exim P=local S=1442
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld Frozen
2015-07-01 17:46:01 1Z9pDt-00007m-0l Message is frozen
2015-07-01 17:46:01 1Z91AX-000D5S-Rw == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1ZA8Zx-0002rL-G9 Message is frozen
2015-07-01 17:46:01 1Z9hln-0008sO-Tm Message is frozen
2015-07-01 17:46:01 1Z9xJg-0009JY-R3 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1ZACEH-000GLL-9z Message is frozen
2015-07-01 17:46:01 1ZA9Ye-000D5l-V9 Message is frozen
2015-07-01 17:46:01 1Z9csL-000GsY-KS Message is frozen
2015-07-01 17:46:01 1ZA90A-0007kc-JH Message is frozen
2015-07-01 17:46:01 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1ZA04o-000Cob-Od == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1Z9pvK-000647-A6 Message is frozen
2015-07-01 17:46:01 1Z9bLW-000BFW-6I == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9vvO-000A3T-EM Message is frozen
2015-07-01 17:46:01 1ZAKD3-0000HL-OC <= <> R=1Z9bLW-000BFW-6I U=exim P=local S=1436
2015-07-01 17:46:01 1ZAKD3-0000HL-OC lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:46:01 1ZAKD3-0000HL-OC == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:46:01 1ZAKD3-0000HL-OC Frozen
2015-07-01 17:46:01 1Z9aBl-000Apd-Iy Unfrozen by errmsg timer
2015-07-01 17:46:01 1Z9aBl-000Apd-Iy == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:01 1ZAHuT-000A6D-Pf Message is frozen
2015-07-01 17:46:01 1ZACOY-0007iB-RS Message is frozen
2015-07-01 17:46:01 1ZAJmZ-0008WJ-Aj Message is frozen
2015-07-01 17:46:01 1Z9hRw-0002vS-Ug Message is frozen
2015-07-01 17:46:01 1ZA6H0-0006vj-5P Message is frozen
2015-07-01 17:46:01 1ZAB6v-0003pi-AL Message is frozen
2015-07-01 17:46:01 1Z9hgJ-0006uc-VI Message is frozen
2015-07-01 17:46:01 1Z9gkV-0008Dj-Et Message is frozen
2015-07-01 17:46:01 1Z9MSv-0004t9-LQ == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1Z9bOa-000C1V-Qh Message is frozen
2015-07-01 17:46:01 1Z9pZU-0002wh-7a Message is frozen
2015-07-01 17:46:01 1Z9fPL-0004og-3c Message is frozen
2015-07-01 17:46:01 1Z9giZ-0007Tf-2s Message is frozen
2015-07-01 17:46:01 1Z9l6V-000CWt-P5 Message is frozen
2015-07-01 17:46:01 1ZA3XC-000BbK-LK Message is frozen
I have disabled all the domains belonging to the ip 62.210.96.57 but still the spam

I have just used

Code: Select all

exim -bp|grep "<"|awk {'print $3'}|xargs exim -Mrm
to remove the mail queue to check if new que forms or not if not then its fixed i assume
Top

skurudo
VestaCP Team
Posts: 8099
Joined: Fri Dec 26, 2014 2:23 pm
Contact:
Contact skurudo
Website Facebook Google+ Skype
Twitter

Re: Server Is Sending Spam Email

Post by skurudo » Wed Jul 01, 2015 7:02 pm

It's can be shell script or something like this

See

Code: Select all

exim -Mvb XXXXXXXX
and

Code: Select all

exim -Mvh XXXXXXXX
where XXXXXXXX - spam message ID

you can see, what script send this
Top

msk19994
Posts: 23
Joined: Thu Jun 05, 2014 5:55 am

Re: Server Is Sending Spam Email

Post by msk19994 » Thu Jul 02, 2015 7:05 am

Example i have

Code: Select all

 0m  2.4K 1ZAYWc-000BFJ-GK <> *** frozen ***
          [email protected]

 0m  2.4K 1ZAYWc-000BFL-JS <> *** frozen ***
          [email protected]
and then i tried what u said

Code: Select all

exim -Mvh 1ZAYWc-000BFL-JS
It says

Code: Select all

142P Received: from exim by imgrill.com with local (Exim 4.72)
        id 1ZAYWc-000BFL-JS
        for [email protected]; Thu, 02 Jul 2015 09:03:10 +0200
038  Date: Thu, 02 Jul 2015 09:03:10 +0200
044I Message-Id: <[email protected]>
037  X-Failed-Recipients: [email protected]
029  Auto-Submitted: auto-replied
055F From: Mail Delivery System <[email protected]>
029T To: [email protected]
059  Subject: Mail delivery failed: returning message to sender
Another one i tried was

Code: Select all

180P Received: from admin by imgrill.com with local (Exim 4.72)
        (envelope-from <[email protected]>)
        id 1ZAYUI-000Ayr-7S
        for [email protected]; Thu, 02 Jul 2015 09:00:46 +0200
022T To: [email protected]
035  Subject: 1 HotDown4Tonight Message
065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
037  Date: Thu, 2 Jul 2015 07:00:46 +0000
046F From: Brenda Logan <[email protected]>
059I Message-ID: <[email protected]>
014  X-Priority: 3
068  X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
018  MIME-Version: 1.0
085  Content-Type: multipart/alternative;
        boundary="b1_abc2fae24dd2622a98f42271ee11734c"
032  Content-Transfer-Encoding: 8bit
Top

skurudo
VestaCP Team
Posts: 8099
Joined: Fri Dec 26, 2014 2:23 pm
Contact:
Contact skurudo
Website Facebook Google+ Skype
Twitter

Re: Server Is Sending Spam Email

Post by skurudo » Thu Jul 02, 2015 7:11 am

Code: Select all

065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
Search system93.php and delete this spam-script:

Code: Select all

find /home -type f -name "system93.php"
Top

msk19994
Posts: 23
Joined: Thu Jun 05, 2014 5:55 am

Re: Server Is Sending Spam Email

Post by msk19994 » Thu Jul 02, 2015 12:02 pm

skurudo wrote:

Code: Select all

065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
Search system93.php and delete this spam-script:

Code: Select all

find /home -type f -name "system93.php"
You Sir are awesome
I was using normal find command but no idea it wasnt showing up,
Thanks Mate
Top

skurudo
VestaCP Team
Posts: 8099
Joined: Fri Dec 26, 2014 2:23 pm
Contact:
Contact skurudo
Website Facebook Google+ Skype
Twitter

Re: Server Is Sending Spam Email

Post by skurudo » Thu Jul 02, 2015 12:21 pm

msk19994 wrote:You Sir are awesome I was using normal find command but no idea it wasnt showing up,
Thanks Mate
No prob, you're welcome. ;-)
Top


Locked
  • Print view

6 posts • Page 1 of 1

Return to “Mail Server”



  • Board index
  • All times are UTC
  • Delete all board cookies
  • The team
Powered by phpBB® Forum Software © phpBB Limited
*Original Author: Brad Veryard
*Updated to 3.2 by MannixMD
 

 

Login  •  Register

I forgot my password