• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

find IP from uid in qmail? URGENT

T

tolis

Guest
Hi
i have found that someone is using our server to send spam.All messages have a uid 48 anf i found this uid in stpm-pendings.log
Can i find his IP somehow?
Thanks
 
Please do not post alternative forums as a solution to a question on the SWsoft website...
 
And he's at it again, at least you are a persistant spammer bandurao.

tolis - have you checked your mail log? Look at /usr/local/psa/var/log/maillog
 
found it!

OK thanks for your replies but the problem was php scripts
The uid 48 is apache and in particular 2 domains had an overwelming visit in formmail.php which is quite risky and through it they managed to send spam through bcc recipients.
Now that i removed them queue is clear and hopefully i will get delisted in a few hours.
Anyone got any ideas for secure php mail scripts?
 
Back
Top