Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-23, 20:45:23
« previous next »
Pages: [1]   Go Down

Author Topic: Spam! IP not works  (Read 6516 times)

0 Members and 1 Guest are viewing this topic.

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Spam! IP not works
« on: 2016-03-17, 02:25:51 »
Please help me. What can i do? How to investigate that spammer?

Quote
Hello,
Your machine  appears to have been used to send SPAM, and we have null routed the source IP 23.xxx.xxx.xxx.  We will continue to monitor this situation, the null route may remain in place for up to 48 hours.

Please investigate this issue and resolve this matter immediately.
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #1 on: 2016-03-17, 06:37:36 »
Investigate 'mail queue' and 'cat /var/log/maillog|grep sendmail'.
« Last Edit: 2016-03-17, 16:46:09 by MRatWork »
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Re: Spam! IP not works
« Reply #2 on: 2016-03-17, 16:42:11 »
Dear MR,
Is there any solution for send mail security? Any solution for email security and SPAM.

Regards.
« Last Edit: 2016-03-17, 17:34:10 by murshed »
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #3 on: 2016-03-17, 16:47:10 »
Inform here 'cat /var/log/maillog|grep sendmail'.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Re: Spam! IP not works
« Reply #4 on: 2016-03-17, 17:33:45 »
Quote
[root@ashokathi ~]# cat /var/log/maillog|grep sendmail
Mar 17 20:24:59 ashokathi root: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/background                    szQp7R" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:39:15 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndCspqxl" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:44:13 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndqmwufE" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:49:13 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndyyOtMW" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:54:14 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndDOu9Kn" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:59:27 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndHQ9kec" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:04:27 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndX5osax" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:09:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndrJZSAU" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:14:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    nd3dsQpW" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:19:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndOpoxky" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:24:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndejEarH" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:29:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndLABb1w" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:34:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndkO4Qv9" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:39:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndbpEUww" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:45:12 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndrDM3OC" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:50:20 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    nduzPdKI" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:55:19 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndIALrnO" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:00:19 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndadsC95" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:05:46 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndd9IMZt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:10:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndBxcDAd" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:15:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndV7dZr2" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:20:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndiqsWlt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:25:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndRJirRx" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:30:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndaSLMIZ" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:35:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndRNzyI8" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:40:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndEY2h0T" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:46:02 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrou                    ndm6CDvt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
[root@ashokathi ~]# clear
[root@ashokathi ~]# cat /var/log/maillog|grep sendmail
Mar 17 20:24:59 ashokathi root: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundszQp7R" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:39:15 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundCspqxl" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:44:13 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundqmwufE" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:49:13 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundyyOtMW" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:54:14 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundDOu9Kn" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 20:59:27 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundHQ9kec" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:04:27 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundX5osax" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:09:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundrJZSAU" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:14:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/background3dsQpW" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:19:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundOpoxky" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:24:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundejEarH" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:29:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundLABb1w" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:34:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundkO4Qv9" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:39:50 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundbpEUww" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:45:12 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundrDM3OC" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:50:20 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgrounduzPdKI" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 21:55:19 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundIALrnO" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:00:19 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundadsC95" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:05:46 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundd9IMZt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:10:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundBxcDAd" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:15:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundV7dZr2" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:20:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundiqsWlt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:25:47 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundRJirRx" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:30:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundaSLMIZ" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:35:48 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundRNzyI8" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:40:49 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundEY2h0T" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Mar 17 22:46:02 ashokathi logger: sendmail: CALLER="/opt/php54s/usr/bin/php -c /opt/php54s/custom/php.ini ../bin/common/background.php /tmp/backgroundm6CDvt" PWD="/usr/local/lxlabs/kloxo/httpdocs" BAN="no"
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #5 on: 2016-03-17, 17:46:05 »
Did you set 'cron jobs' in panel. Too many process from panel from 'ashokath' client.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Re: Spam! IP not works
« Reply #6 on: 2016-03-17, 17:51:54 »
no cron jobs in this account.

I check on email log

Quote
Mar 17 00:30:59 ashokathi logger: sendmail: CALLER="php-fpm: pool atkfashion" PWD="/home/atkfashion/public_html/wp-content/plugins/yith-woocommerce-ajax-navigation/plugin-fw" BAN="no"
Mar 17 00:30:59 ashokathi send: delivery 4359: success: did_0+0+1/
Mar 17 00:30:59 ashokathi send: status: local 0/10 remote 7/60
Mar 17 00:30:59 ashokathi send: end msg 41038460
Mar 17 00:30:59 ashokathi send: delivery 4353: success: User_and_password_not_set,_continuing_without_authentication./<dweed170@gmail.com>_74.125.193.26_accepted_message./Remote_host_said:_250_2.0.0_OK_1458153026_b6si6571939ioj.13_-_gsmtp/
Mar 17 00:30:59 ashokathi send: status: local 0/10 remote 6/60
Mar 17 00:30:59 ashokathi send: end msg 41038321
Mar 17 00:30:59 ashokathi send: new msg 41038321
Mar 17 00:30:59 ashokathi send: info msg 41038321: bytes 1290 from <toni_berry@atkfashionltd.com> qp 9907 uid 7822
Mar 17 00:30:59 ashokathi send: starting delivery 4360: msg 41038321 to remote gregorymclifton88@gmail.com
Mar 17 00:30:59 ashokathi send: status: local 0/10 remote 7/60
Mar 17 00:30:59 ashokathi logger: sendmail: CALLER="php-fpm: pool atkfashion" PWD="/home/atkfashion/public_html/wp-content/plugins/yith-woocommerce-ajax-navigation/plugin-fw" BAN="no"

You can see WP WooCommerce plugin sent too much email from my vps.

and ashokathi is my FQDN.
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #7 on: 2016-03-17, 18:01:53 »
You can set ashokathi as 'ban' for sendmail.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Re: Spam! IP not works
« Reply #8 on: 2016-03-17, 18:30:48 »
How to do that?
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #9 on: 2016-03-17, 18:45:18 »
Add '"/home/atkfashion/' to /var/qmail/control/badsendmailfrom
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline murshed

  • Valuable Member
  • *
  • Posts: 93
  • Karma: +0/-0
  • Gender: Male
    • View Profile
Re: Spam! IP not works
« Reply #10 on: 2016-03-20, 10:00:29 »
This command is not work!

Quote
[root@ashokathi ~]# Add '"/home/atkfashion/' to /var/qmail/control/badsendmailfrom
-bash: Add: command not found
Logged

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Spam! IP not works
« Reply #11 on: 2016-03-20, 11:49:30 »
Use 'file manager' in Kloxo-MR panel.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --
Pages: [1]   Go Up
« previous next »
 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix
Click Here

Page created in 0.053 seconds with 21 queries.

web stats analysis