ter info
Onderstaande melding was hetgeen ik kreeg van de server wanneer hij voor het offline gaan bezig was met spammen.
Ik heb de domeinnaam even veranderd door '*****'
The ***** account has just finished sending 1000 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/*****.bytes file, it was found that the highest sender was margery_mckinney@*****.com, at 34 emails.
The top authenticated user was *****, at 1001 emails.
This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.
An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.
The most common path that the messages were sent from is /home/*****/domains/*****.be/public_html/plugins/quickicon, at 928 emails (92%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
The top sending script was /home/*****/domains/*****.be/public_html/plugins/quickicon/user.php:12, at 603 emails, (60%).
of
The ***** account has just finished sending 1000 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/*****.bytes file, it was found that the highest sender was evangelina_jennings@*****.com, at 25 emails.
The top authenticated user was *****, at 1001 emails.
This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.
An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.
The most common path that the messages were sent from is /home/*****/domains/*****.be/public_html/libraries/cms/table, at 941 emails (94%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
The top sending script was /home/*****/domains/*****.be/public_html/libraries/cms/table/object.php:3, at 8742 emails, (874%).
Because the bulk of the emails have been sent by the script, please check it to confirm it has not been compromised.
En dit kreeg ik dan na de "cleanup"
The ***** account has just finished sending 1000 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/*****.bytes file, it was found that the highest sender was tasha_vaughn@*****.com, at 43 emails.
The top authenticated user was *****, at 1001 emails.
This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.
An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.
The most common path that the messages were sent from is /home/*****/domains/*****.be/public_html/libraries/joomla/cache, at 971 emails (97%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
The top sending script was /home/*****/domains/*****.be/public_html/libraries/joomla/cache/model.php:2, at 1037 emails, (103%).
Because the bulk of the emails have been sent by the script, please check it to confirm it has not been compromised.
Heeft onderwerp gestart
