Hallo Leute,
ich bin gerade auf Ursachenforschung warum über meinen Webhosting Account Spam versendet wird.
Scripte ( Joomla, Wordpress ) sind soweit alle auf dem aktuellsten Stand:
Diesen Bericht liefert mir Netcup:
Spoiler anzeigen
Weitere Details zum Spamversand:
*** ENVELOPE RECORDS hold/3173A12245B ***
message_size: 1586 640 1 0 1586
message_arrival_time: Fri Dec 15 12:35:07 2017
create_time: Fri Dec 15 12:35:07 2017
named_attribute: log_ident=3173A12245B
named_attribute: rewrite_context=local
sender: kontakt@gggggggggggg.de
named_attribute: encoding=8bit
named_attribute: log_client_name=localhost
named_attribute: log_client_address=127.0.0.1
named_attribute: log_client_port=58622
named_attribute: log_message_origin=localhost[127.0.0.1]
named_attribute: log_helo_name=af988.netcup.net
named_attribute: log_protocol_name=ESMTP
named_attribute: client_name=localhost
named_attribute: reverse_client_name=localhost
named_attribute: client_address=127.0.0.1
named_attribute: client_port=58622
named_attribute: helo_name=af988.netcup.net
named_attribute: protocol_name=ESMTP
named_attribute: client_address_type=2
named_attribute: dsn_orig_rcpt=rfc822;822201617@qq.com
original_recipient: 822201617@qq.com
recipient: 822201617@qq.com
*** MESSAGE CONTENTS hold/3173A12245B ***
Received: by af988.netcup.net (Postfix, from userid 31198)
id 30D7C12245C; Fri, 15 Dec 2017 12:35:07 +0100 (CET)
To: 822201617@qq.com
Subject: Kopie von: Link recommended by
X-PHP-Originating-Script: 31198:class.phpmailer.php
Date: Fri, 15 Dec 2017 12:35:07 +0100
From: NAME des KONTAKTS <kontakt@DOMAIN-ERSETZT.de>
Reply-To: =?utf-8?B?5r+u5b2t5rKI?= <822201617@qq.com>
Message-ID: <648c70c3b5ca41b5b5bc59926fee15ed@http://www.DOMAIN-ERSETZT.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Dieses ist eine Kopie der folgenden Nachricht, die an eine PERSON NAME ERSETZT gesendet wurde:
Dies ist eine Mailanfrage via https://www.DOMAIN-ERSETZT.de/ von:
??? <822201617@qq.com>
????10?18??50?28?? http://www.601043.com/? ????????????????????188??
----------
This scarcity of specie willgive you some idea of the value of that squandered upon gloves andcab-hire;a month's bread disappeared at one fell swoop.Alas!moneyis alw e."Is not the imperfect sybarite to be met with even in Paris itself,that intellectual metropolis?Unfit to endure the fatigues ofpleasure,this sort of person,after ir somewhat.Thevivid contrast made by the varieties of foliage,the colors of themasses of flowering shrubs,the freaks of light and shadow,gladdenedthe eyes.While al was left standing,gazingnervously upon the floor.When the limit of her distress hadbeen nearly reached,she was beckoned to by a man at one of themany desks withi
*** HEADER EXTRACTED hold/3173A12245B ***
named_attribute: encoding=8bit
Ich vermute das ganz stark das es sich um die PHP MAILER Funktion vom JOOMLA handelt?
Habt Ihr hinsichtlich auch schon Probleme gehabt bzw Erfahrungen gesammelt?
Gruß,
talkuvit