Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-05-20, 09:52:32

Author Topic: qmail 4181 invoked from network spam klxo v7.0  (Read 3786 times)

0 Members and 1 Guest are viewing this topic.

Offline jtaco263

  • Senior Member
  • *
  • Posts: 167
  • Karma: +0/-0
    • View Profile
qmail 4181 invoked from network spam klxo v7.0
« on: 2017-02-19, 01:08:38 »
hi i have spam again and all the emails in queue are somethinfg like this
also y found on localhost/tmp/ directory like 350 files withe emails logs those files are named like ds.sign.gfgfgfg3rg3g3fddd owned by qmail how do i stop this??


Code: [Select]
Received: (qmail 4181 invoked from network); 1 Oct 2010 22:35:23 +0200
Received: from localhost (HELO www.DOMAINS.it) (127.0.0.1)
by localhost with SMTP; 1 Oct 2010 22:35:23 +0200
Received: (qmail 47240 invoked by uid 33); 01 Oct 2010 20:35:23 +0000
Date: 01 Oct 2010 20:35:23 +0000
Message-ID: <20101001203523.47240.qmail@www.DOMAIN.it>
Subject: ALL PILLS IN BEST ONLINE DRUGSTORE !!!!
Reply-To: XXXX@yahoo.com
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
From: <RX_canadanline24117@yahoo.com>
To: XXXX@weekonline.com
X-Priority: 3

an extract from mail log
Code: [Select]
eb 18 19:17:42 sv1 send: delivery 170: deferral: Connected_to_98.136.216.25_but_sender_was_rejected./Remote_host_said:_421_4.7.0_[TSS04]_Messages_from_185.122.56.110_temporarily_deferred_due_to_user_complaints_-_4.16.55.1;_see_https://help.yahoo.com/kb/postmaster/SLN3434.html/
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 50/60
Feb 18 19:17:42 sv1 send: delivery 183: deferral: Connected_to_63.250.192.46_but_sender_was_rejected./Remote_host_said:_421_4.7.0_[TSS04]_Messages_from_185.122.56.110_temporarily_deferred_due_to_user_complaints_-_4.16.55.1;_see_https://help.yahoo.com/kb/postmaster/SLN3434.html/
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 49/60
Feb 18 19:17:42 sv1 send: starting delivery 230: msg 9705661 to remote colognadaniel@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 50/60
Feb 18 19:17:42 sv1 send: starting delivery 231: msg 9705674 to remote ruiz465@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 51/60
Feb 18 19:17:42 sv1 send: delivery 200: deferral: Connected_to_98.136.216.25_but_sender_was_rejected./Remote_host_said:_421_4.7.0_[TSS04]_Messages_from_185.122.56.110_temporarily_deferred_due_to_user_complaints_-_4.16.55.1;_see_https://help.yahoo.com/kb/postmaster/SLN3434.html/
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 50/60
Feb 18 19:17:42 sv1 send: delivery 216: deferral: Connected_to_152.163.0.99_but_greeting_failed./Remote_host_said:_421_mtaig-aaf01.mx.aol.com_Service_unavailable_-_try_again_later/
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 49/60
Feb 18 19:17:42 sv1 send: delivery 217: deferral: Connected_to_152.163.0.68_but_greeting_failed./Remote_host_said:_421_mtaig-laa02.mx.aol.com_Service_unavailable_-_try_again_later/
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 48/60
Feb 18 19:17:42 sv1 send: starting delivery 232: msg 9705674 to remote bruce839@aol.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 49/60
Feb 18 19:17:42 sv1 send: starting delivery 233: msg 9705674 to remote nicole.thomsen@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 50/60
Feb 18 19:17:42 sv1 send: starting delivery 234: msg 9705669 to remote rhonemcmanus@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 51/60
Feb 18 19:17:42 sv1 send: starting delivery 235: msg 9705669 to remote ashiyou@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 52/60
Feb 18 19:17:42 sv1 send: starting delivery 236: msg 9705669 to remote robyaju@yahoo.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 53/60
Feb 18 19:17:42 sv1 send: starting delivery 237: msg 9705669 to remote mdm6465@aol.com
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 54/60
Feb 18 19:17:42 sv1 send: starting delivery 238: msg 9705670 to remote martin5039@charter.net
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 55/60
Feb 18 19:17:42 sv1 send: starting delivery 239: msg 9705670 to remote potoczky@post.sk
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 56/60
Feb 18 19:17:42 sv1 send: starting delivery 240: msg 9705670 to remote buero@hegner-rv.de
Feb 18 19:17:42 sv1 send: status: local 0/10 remote 57/60
Feb 18 19:29:35 sv1 submission: tcpserver: status: 0/100
Feb 18 19:29:35 sv1 smtp: tcpserver: status: 0/100
Feb 18 19:29:35 sv1 smtp-ssl: tcpserver: status: 0/100
Feb 18 19:29:35 sv1 imap4-ssl: tcpserver: status: 0/40
Feb 18 19:29:35 sv1 pop3-ssl: tcpserver: status: 0/40
Feb 18 19:29:35 sv1 imap4: tcpserver: status: 0/40
Feb 18 19:29:35 sv1 pop3: tcpserver: status: 0/40
Feb 18 19:29:35 sv1 authlib: INFO: modules="authvchkpw", daemons=15
Feb 18 19:29:35 sv1 authlib: INFO: Installing libauthvchkpw
« Last Edit: 2017-02-19, 01:33:17 by jtaco263 »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #1 on: 2017-02-19, 04:25:44 »
Your website act as spammer. Update your website applications.

From 'sendmail to bans', add '/home' to ban for send mail from website (usually using mail function).
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline jtaco263

  • Senior Member
  • *
  • Posts: 167
  • Karma: +0/-0
    • View Profile
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #2 on: 2017-02-19, 09:44:56 »
i just installed 3 days ago new version and clean install how do i resolve this

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #3 on: 2017-02-19, 11:26:23 »
Using Wordpress?. If yes, try install wordfence plugins.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline jtaco263

  • Senior Member
  • *
  • Posts: 167
  • Karma: +0/-0
    • View Profile
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #4 on: 2017-02-19, 18:40:41 »
i do not using it

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #5 on: 2017-02-20, 02:34:28 »
Inform here 'sh /script/sysinfo'.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline jtaco263

  • Senior Member
  • *
  • Posts: 167
  • Karma: +0/-0
    • View Profile
Re: qmail 4181 invoked from network spam klxo v7.0
« Reply #6 on: 2017-02-22, 20:47:35 »
i solved it was password match
i've been hacked (my email account) i restored and changed passwd

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix
Click Here

Page created in 0.033 seconds with 22 queries.

web stats analysis