Solved

Finding internal spammer on Plesk 10

Posted on 2013-02-07
1
1,293 Views
Last Modified: 2013-02-08
Hi,

I am running a Plesk 10 server, an have run unto a problem.

Someone on the server has a script, that allows users to submit somee spammails, but I have a hard time identifying what user.

Lookin at the headers in the mail in the mailqueue dont show much:
Received: by server.com (Postfix, from userid 33)
                             id A4768D680D5; Wed,  6 Feb 2013 20:24:12 +0100 (CET)
To: jorg_ruppenstein@abitibiconsolidated.com
Subject: Tracking Service
From: "Manager Aiden Morin" <service@lincoln.us>
X-Mailer: MailMagic2.3
Reply-To: "Manager Aiden Morin" <service@lincoln.us>
Mime-Version: 1.0
Content-Type: multipart/alternative;boundary="----------13601786525112ADDC61356"
Message-Id: <20130206192412.A4768D680D5@server.com>
Date: Wed,  6 Feb 2013 20:24:12 +0100 (CET)

Uid is www-data, and could be anyone.
Maillog does not give any further info.

Anyone with an idea how to identify the user/account/domain?

/jbe
0
Comment
Question by:dk_jb
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
dk_jb earned 0 total points
ID: 38867265
Found the solutionm: http://kb.parallels.com/en/1711

/Jbe
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
XMind Plus helps organize all details/aspects of any project from large to small in an orderly and concise manner. If you are working on a complex project, use this micro tutorial to show you how to make a basic flow chart. The software is free when…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question