LinuxForum.Fans
Тема

exim спамер

Автор: bestirc 3 сообщений 2880 просмотров
#87278

Здравствуйте, помогите найти спамера..
заголовки писем

1P5aYA-0006yL-04-H
exim 93 93
<>
1286873374 0
-ident exim
-received_protocol local
-body_linecount 107
-allow_unqualified_recipient
-allow_unqualified_sender
-localerror
XX
1
тут_адрес@yahoo.com

144P Received: from exim by тут_адрес_сервера with local (Exim 4.63)
id 1P5aYA-0006yL-04
for тут_адрес@yahoo.com; Tue, 12 Oct 2010 12:49:34 +0400
332 X-Failed-Recipients: тут_адрес1@prodigy.net,
тут_адрес@dca.net,
тут_адрес@netcologne.de,

029 Auto-Submitted: auto-replied
057* From: Mail Delivery System <Mailer-Daemon@сервер>
057F From: Mail Delivery System <Mailer-Daemon@сервер>
029* To: тут_адрес@yahoo.com
029T To: тут_адрес@yahoo.com
059 Subject: Mail delivery failed: returning message to sender
046I Message-Id: <E1P5aYA-0006yL-04@сервер>
055* X-rewrote-original-recipient: тут_адрес@yahoo.com
038 Date: Tue, 12 Oct 2010 12:49:34 +0400

1P5aYA-0006yL-04-D
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

Return-path: <тут_адрес@yahoo.com>
Received: from localhost.localdomain ([127.0.0.1] helo=User)
by сервер with smtp (Exim 4.63)
(envelope-from <тут_адрес@yahoo.com>)
id 1P5aUS-0005EG-8f; Tue, 12 Oct 2010 12:45:44 +0400
Reply-To: <тут_адрес@yahoo.co.jp>
From: "Mabel Johnson"<тут_адрес2@yahoo.com>
Subject: Please See INFORMATION
Date: Tue, 12 Oct 2010 05:45:42 -0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Уж как то через чур запрятался спамер, а ввиду большого количества пользователей не знаю как найти кто спамит..

#87279
text

1P5ax6-0001XT-83-H
root 0 0
<тут_адрес@yahoo.com>
1286874920 0
-helo_name User
-host_address 127.0.0.1.43366
-host_name localhost.localdomain
-interface_address 127.0.0.1.25
-received_protocol smtp
-body_linecount 38
YY patcay1@msn.com
YY patbernie@shaw.ca

199P Received: from localhost.localdomain ([127.0.0.1] helo=User) by сервер with smtp (Exim 4.63) (envelope-from <тут_адрес@yahoo.com>) id 1P5ax6-0001XT-83; Tue, 12 Oct 2010 13:15:20 +0400 041* Reply-To: <тут_адрес@yahoo.co.jp> 041R Reply-To: <тут_адрес@yahoo.co.jp> 048* From: "Mabel Johnson"<тут_адрес@yahoo.com> 048F From: "Mabel Johnson"<тут_адрес@yahoo.com> 032 Subject: Please See INFORMATION 038 Date: Tue, 12 Oct 2010 06:15:18 -0300 018 MIME-Version: 1.0 050 Content-Type: text/plain; charset="Windows-1251" 032 Content-Transfer-Encoding: 7bit 014 X-Priority: 3 026 X-MSMail-Priority: Normal 051 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 057 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 056* X-rewrote-original-recipient: patashannon2004@yahoo.com 046* X-rewrote-original-recipient: patatden@cs.com 054* X-rewrote-original-recipient: patatsuneys@hotmail.com 050* X-rewrote-original-recipient: patautrey@atvci.net 053* X-rewrote-original-recipient: patawash1957@yahoo.com 049* X-rewrote-original-recipient: patb25@hotmail.com 053* X-rewrote-original-recipient: patbahl@embarqmail.com 053* X-rewrote-original-recipient: patbecker@mindless.com 050* X-rewrote-original-recipient: patbern@hotmail.com 048* X-rewrote-original-recipient: patbernie@shaw.ca 051* X-rewrote-original-recipient: patbil81@aaahawk.com 050* X-rewrote-original-recipient: patbob44@wowway.com 050* X-rewrote-original-recipient: patbradford@att.net 051* X-rewrote-original-recipient: patbrusten@yahoo.com 054* X-rewrote-original-recipient: patbuckley@bamacomm.com 050* X-rewrote-original-recipient: patbunning1@cox.net 048* X-rewrote-original-recipient: patburke@guam.net 054* X-rewrote-original-recipient: patc@mathiasmasemmd.com 048* X-rewrote-original-recipient: patc812@yahoo.com 052* X-rewrote-original-recipient: patcarb2003@yahoo.com 054* X-rewrote-original-recipient: patcarver1055@yahoo.com 052* X-rewrote-original-recipient: patcaviness01@aol.com 046* X-rewrote-original-recipient: patcay1@msn.com 052* X-rewrote-original-recipient: patch@trianglenet.net 050* X-rewrote-original-recipient: patch2517@webtv.net 050* X-rewrote-original-recipient: patch9996@yahoo.com 048* X-rewrote-original-recipient: patchatty@aol.com 056* X-rewrote-original-recipient: patchcatt98@wmconnect.com 052* X-rewrote-original-recipient: patches1371@yahoo.com 056* X-rewrote-original-recipient: patches75@iowatelecom.net 058* X-rewrote-original-recipient: patchesbandit@bellsouth.net 056* X-rewrote-original-recipient: patchez2000@bellsouth.net 055* X-rewrote-original-recipient: patchris1992@hotmail.com 051* X-rewrote-original-recipient: patchz1111@yahoo.com 051* X-rewrote-original-recipient: patcinry@hotmail.com 049* X-rewrote-original-recipient: patclare@yahoo.com 055* X-rewrote-original-recipient: patconmurray@comcast.net 056* X-rewrote-original-recipient: patcraigtampa@hotmail.com 048* X-rewrote-original-recipient: patd@boltblue.com 049* X-rewrote-original-recipient: patd990084@aol.com 046* X-rewrote-original-recipient: patdaddy@cs.com 047* X-rewrote-original-recipient: pat-dale@msn.com 049* X-rewrote-original-recipient: patdaman@leo.ls.co 054* X-rewrote-original-recipient: patdbradley@comcast.net 046* X-rewrote-original-recipient: patdcor@aol.com 048* X-rewrote-original-recipient: patdemy@yahoo.com 044* X-rewrote-original-recipient: patdi@msn.com 049* X-rewrote-original-recipient: patdomingue@cs.com 048* X-rewrote-original-recipient: patdorf@webtv.net 059* X-rewrote-original-recipient: patdougcorley@plateautel.net

1P5ax6-0001XT-83-D

Greetings from Mabel Johnson, With all due respect, I want you to read my letter with one mind and help

#87280

Через заголовки я так понял бесполезно отследить данный домен, пробовал grep -ri имя@yahoo.com /var/www , ничего не нашлось, может команду поиска не так составил?

Войдите или зарегистрируйтесь, чтобы ответить.