Results 1 to 5 of 5
  1. #1

    * How to find an user that does not exist?

    hi all,
    i have a cpanel server with some high load and saw it was caused by exim. Looking to the mailstats i see this:
    10085 166MB local
    826 17MB (friend)
    282 3023KB (localhost)
    264 867KB (00.00.00.00) -- This is my server IP
    237 3796KB (|)

    It seems that user Fried sendin 17MB of messages. However i have no user friend on server
    Is there a way to find who is sending out those message as user friend??

    Thanks a lot for any help

  2. #2
    Join Date
    Apr 2004
    Location
    Singapore
    Posts
    1,506
    I think you are hit with a virus. Install a virus scanner like clamav or hire someone to check out your server
    tanfwc
    Singapore Managed Colocation
    Singapore BGP Announcement

  3. #3
    Join Date
    Mar 2003
    Location
    Canada
    Posts
    8,910
    The "friend" would be a hostname (or computer name ?) of another computer - not a local user.

    Scroll down until you see "Top 50 local senders by volume" and then you can get the actual user name.
    Patrick William | RACK911 Labs | Software Security Auditing
    400+ Vulnerabilities Found - Quote @ https://www.RACK911Labs.com

    www.HostingSecList.com - Security notices for the hosting community.

  4. #4
    Join Date
    Dec 2005
    Posts
    82
    can you ping that host "friend" from ssh?

  5. #5
    think i founde the customer... thanks to all

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •