Opfer eines Angriffs?

A

aminox

New Member
Hallo,

ich habe zur Zeit das Problem, das ich wohl von einem Hack-Angriff betroffen bin. Ich habe /usr/local/psa/admin/sbin/statistics ausgeführt und bekomme folgende Meldungen:
Code: 
statistics_collector: Unable to parse pending domains traffic line: ?::totalnet.ca      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::totalreform.freeserve.co 2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::totonline.net    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::toucansurf.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::towerns.net      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tp2013.33mail.com        2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpau.com2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpb.com.my       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpca.co.za       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpg.com 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpg.com.au       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpg.com.au       2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpipersonnel.com 2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tpts6.seed.net.tw        2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::traer.net2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trane.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::transact.bm      2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::transcrypt.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::transfer.com     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trashmail.net    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trashymail.com   2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::travel-net.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tre.it  2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trebnet.com      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trenam.com       2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trenton.edu      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::triad.rr.com     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::triad.rr.com     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::triadic.com      2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::triax.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tricountyoil.com 2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tridenthospitality.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trimiteusa.com   2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trincoll.edu     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trinet.com       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::triotel.net      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tristar.co.nz    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tristenmcnicholas.com    2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tritel.net       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trixiethedog.com 2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::troldborg.dk     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::trondercore.no   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tronox.com       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::troweprice.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::truman.edu       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::truty.org2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tsa.com 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tsenv.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tu-berlin.de     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tubes.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tulalipbroadband.net     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tulane.edu       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tulane.edu       2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::turismoyballenas.com.ar  2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::turk.net2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::turner.com       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tut.ac.za2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tutopia.com      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tutu.com2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tux-net.de       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tvnet.lv2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tvnet.lv2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tvs12.jp2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tvslave.net      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tvstar.com       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twcny.rr.com     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twcny.rr.com     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twglaser.com     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twilight-team.de 2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twistedrotors.com        2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twmi.rr.com      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::twtelecom.com    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tx.rr.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tx.rr.com2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::txol.net2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::txt.att.net      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::txun.net2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::typedesign.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::tyrellco.com     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::u.arizona.edu    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::u.genie.co.uk    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::u.genie.co.uk    2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::u.washington.edu 2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uaa.alaska.edu   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uab.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uab.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uabmc.edu2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uaccb.edu2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uaf.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uakron.edu       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uark.edu2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uarts.edu2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ubbullsfan.com   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ubs.com 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ubtanet.com      2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ucdavis.edu      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ucla.edu2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ucla.edu2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uco.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uco.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ucr.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ucsd.edu2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ufs.br  2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uga.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uglymail.com     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uh.edu  2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uidaho.edu       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uindy.edu2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uiowa.edu2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uiplay.com       2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uiu.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uiu.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uk.com  2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uk.neceur.com    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uk.umis.net      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uk111.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ukonline.com     2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uleth.ca2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ulov.com2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ultrafiel.com    2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ultrasw.com      2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::ulust.com2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umail.iu.edu     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umail.ucsb.edu   2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umassd.edu       2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umb-gladbeck.de  2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umd.umich.edu    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umes.edu2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umich.edu2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umit.maine.edu   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umit.maine.edu   2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umn.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::umn.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::un3.net 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::una.edu 2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unc.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uncc.edu2013-11-3        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::und.edu 2013-11-4        smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::und.nodak.edu    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uni-fab.on.ca    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uni-konstanz.de  2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uni-lj.si2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uni.sydney.edu.au        2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unifamcounselling.org    2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uninor.in2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uniontel.net     2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::uniqcogroup.com  2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unisalle.edu.co  2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unitedwaytwincities.org  2013-11-3       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unitrindirect.com        2013-11-4       smtp    0
System error 11: Resource temporarily unavailable
statistics_collector: Unable to parse pending domains traffic line: ?::unity.ncsu.edu   2013-11-3       smtp    0
System error 11: Resource temporarily unavailable

-------------------------------
Die Domains sind mir unbekannt und befinden sich nicht auf dem Server. Wer kann mir helfen? Wo finde ich die Eintragung dieser Domains?

Bei mir läuft Plesk 11.5 auf debian
 
Last edited by a moderator:
Lass mal ein grep los auf die aktuelle Maillog unter /opt/psa/var/log/maillog

Dann siehste, was da drin steht.
 
Code: 
Nov  4 19:00:48 cooper qmail-remote-handlers[15824]: to=p1suz@aol.com
Nov  4 19:00:49 cooper qmail: 1383588049.349583 delivery 7427: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Nov  4 19:00:49 cooper qmail: 1383588049.349614 status: local 0/10 remote 19/20
Nov  4 19:00:49 cooper qmail: 1383588049.350082 starting delivery 7480: msg 48543054 to remote [email]hammam098@yahoo.com[/email]
Nov  4 19:00:49 cooper qmail: 1383588049.350111 status: local 0/10 remote 20/20
Nov  4 19:00:49 cooper qmail-remote-handlers[15826]: Handlers Filter before-remote for qmail started ...
Nov  4 19:00:49 cooper qmail-remote-handlers[15826]: from=magiqo@hgv-oberndorf.de
Nov  4 19:00:49 cooper qmail-remote-handlers[15826]: to=hammam098@yahoo.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: Handlers Filter before-queue for qmail started ...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: from=tujiq@hgv-oberndorf.de
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=wwwworlaeventnepalcom@yahoo.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=theworldisscreamingforus@gmail.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=dg-6@hotmail.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=rockyriche@hotmail.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=rockysahota1313@gmail.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=dg528082@yahoo.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=dano71nz@hotmail.com
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: to=dg5293@gmail.com
Nov  4 19:00:49 cooper greylisting filter[15828]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15829]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15830]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15831]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15832]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15833]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15834]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper greylisting filter[15835]: Starting greylisting filter...
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'grey' handler
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: handlers_stderr: SKIP
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: SKIP during call 'check-quota' handler
Nov  4 19:00:49 cooper qmail-queue-handlers[15827]: starter: submitter[15837] exited normally
Nov  4 19:00:49 cooper qmail: 1383588049.538151 new msg 60301989
Nov  4 19:00:49 cooper qmail: 1383588049.538180 info msg 60301989: bytes 611 from <tujiq@hgv-oberndorf.de> qp 15837 uid 2020
 
Last edited by a moderator:
Aber wie kommen diese Domains zustande? Und was sehe ich nun aus dem Maillog? Dort wird extrem oft versucht von einer Domain zu senden. Die E-Mail Adressen existieren jedoch gar nicht. Zudem ist der SMTP eigentlich so eingestellt, dass beim Senden eine Authentifizierung benötigt.
 
Ja, die Platten haben noch (massig) Platz. Das Problem ist, dass ich heute auch eine ABUSE Meldung bekommen habe, dass meine IP in der RBL auftaucht.

Und seit 2 Tagen hatte ich plötzlich massig MAILER DEAMON E-Mails bei mir mit allen möglichen @domain.de.

Ich habe den SMTP Dienst mal deaktiviert. Wie kann man denn am sinnvollsten herausfinden, von wo die E-Mails erzeugt werden? (Wenn das ein Skript auf dem Server sein sollte)
 
Ersetze sendmail durch einen Wrapper, ein bash-Skript, das den aufrufenden Prozess loggt und dann das Original-qmail (sendmail) aufruft.
http://www.huschi.net/10_222_de.html

Wenn allerdings ein böses PHP-Ruby-CGI-Programm direkt Mails an Port 25 absetzt, hast du wenig Chancen, das zu finden.
 
ich habe via vi eine Datei sendmail erzeugt (vorher sendmail in sendmail-real umbenannt) und dort das

#!/bin/sh
TODAY=`date -Iseconds`
echo $TODAY sendmail-wrapper called $USER from $PWD >>/tmp/mail.send
(echo X-Additional-Header: $(dirname $PWD);cat) | /usr/lib/sendmail-real "$@"

platziert. Chmod +x gegeben...

Laut php_info() liegt bei mir das sendmail in /usr/lib/sendmail

aber wenn ich via mail() eine Mail abfeuere, erscheint das nicht im Log? Mache ich etwas falsch?
 
Eine weitere Möglichkeit wäre noch, dass deine SMTP-Auth Benutzerdaten abgegriffen worden und nun für den Versand der Mails verwendet werden.
 
danke euch für eure Hilfe und Tipps. Da ich schnell handeln musste, habe ich den Server platt gemacht und neu aufgesetzt. Was nun zu neuen Problemen führt, aber dazu brauche ich einen anderen Thread ;)
 
You must log in or register to reply here.
Back
Top