We are in the process of migrating this forum. A new space will be available soon. We are sorry for the inconvenience.

Włamanie na skrzynkę OVH?


Lewyx
18-04-2014, 19:18
Wysłałem maila na :
tech@ovh.net jak mają w bazie WHOIS i dostałem informację:

Kod:
Hi. This is the qmail-send program at mx1.ovh.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
user does not exist, but will deliver to /homez.12/vpopmail/domains/ovh.net/tech/
user is over quota

Lewyx
18-04-2014, 19:16
Cześć,
dzisiaj jeden z moich userów dostał informację
Kod:
Please carefully read the attached instructions before updating settings. This e-mail and / or any attachment(s) is intended solely for the above-mentioned recipient(s) and it may contain confidential or privileged information. If you have received it in error, please notify us immediately at helpdesk@domain.com and delete the e-mail. You must not copy it, distribute it, disclose it or take any action in reliance on it.
Z logów widać, że:
Kod:
Apr 18 16:28:15 datacenter postfix/qmgr[4091]: A6485E612CA: from=, size=11054, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter postfix/qmgr[4091]: 97D6FE61348: from=, size=11687, nrcpt=1 (queue active)
Apr 18 16:28:15 datacenter amavis[31358]: (31358-18) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [109.190.36.139]:64550 [109.190.36.139]  -> , Queue-ID: A6485E612CA, Message-ID: <3I2BC5RGOFTE41ET774VCDSJGA7DCFCP3P6VD0J@ovh.fr>, mail_id: pp2IriiwxobO, Hits: -0.01, size: 11051, queued_as: 97D6FE61348, 593 ms
Apr 18 16:36:04 datacenter postfix/qmgr[4091]: 5B9E1E6132F: from=, size=10979, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=, size=11612, nrcpt=1 (queue active)
Poniżej widać również:
Kod:
Apr 18 16:36:05 datacenter postfix/qmgr[4091]: 6D0F3E6134C: from=, size=11612, nrcpt=1 (queue active)
Apr 18 16:36:05 datacenter amavis[31358]: (31358-19) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [14.160.13.250]:54610 [14.160.13.250]  -> , Queue-ID: 5B9E1E6132F, Message-ID: <9V8P19E69HK28LCQK43P124VRILOTIFB9DPR8X8@>, mail_id: qmj69zAgV2ms, Hits: 2.442, size: 10976, queued_as: 6D0F3E6134C, 657 ms
Apr 18 18:09:37 datacenter postfix/smtpd[32640]: NOQUEUE: reject: RCPT from unknown[94.198.210.38]: 554 5.7.1 : Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (business.telecomitalia.it); from= to= proto=ESMTP helo=
Apr 18 18:11:16 datacenter postfix/qmgr[4091]: B4A3BE6112E: from=, size=11074, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter postfix/qmgr[4091]: 2F904E6134D: from=, size=11707, nrcpt=1 (queue active)
Apr 18 18:11:17 datacenter amavis[28800]: (28800-01) Passed BANNED (.exe,OutlookSettings.scr) {RelayedTaggedOutbound}, LOCAL [86.61.73.25]:17489 [86.61.73.25]  -> , Queue-ID: B4A3BE6112E, Message-ID: , mail_id: TBkeuGjtGMvE, Hits: 0, size: 11071, queued_as: 2F904E6134D, 718 ms