Control Web Panel

WebPanel => E-Mail => Topic started by: anandmys on February 26, 2022, 07:46:29 AM

Title: huge number of emails being sent
Post by: anandmys on February 26, 2022, 07:46:29 AM

A particular user is sending many emails as per mailserver stats.

This is not a regular emails. The actual emails hardly send few emails every week.

I see user@server email id sending many many emails.

How to identify the compromised program? Where can I see the logs

Title: Re: huge number of emails being sent
Post by: Painkiller88 on February 26, 2022, 01:00:41 PM

The logs for the mails can be found here:

File Management -> CWP Log Viewer -> choose maillog

there you can see if the mails are sending from internal or if someone is connecting from external to send mails.

You should also check here: https://mxtoolbox.com/SuperTool.aspx -> select test Email Server to see if you are an open mail relay

Title: Re: huge number of emails being sent
Post by: studio4host on February 27, 2022, 12:12:13 PM

you should first check the maillog to see if you have hacked email account password or malware files
http://wiki.centos-webpanel.com/tracking-php-script-spam

Title: Re: huge number of emails being sent
Post by: Namaste on February 28, 2022, 01:24:27 PM

Quote from: anandmys on February 26, 2022, 07:46:29 AM

A particular user is sending many emails as per mailserver stats.

This is not a regular emails. The actual emails hardly send few emails every week.

I see user@server email id sending many many emails.

How to identify the compromised program? Where can I see the logs

I'm getting the same thing in my email queue.  Messages from CSF LFD and cronjobs