KeyHelp Mail hacked? Unsolicited mailsend to veloxzone.com.br

General discussions around KeyHelp.
Post Reply
User avatar
latifolia
Posts: 42
Joined: Wed 18. Aug 2021, 09:08

KeyHelp Mail hacked? Unsolicited mailsend to veloxzone.com.br

Post by latifolia »

My server is only for hosting KeyHelp with user only me,

but now it seems trying to send email which I didnt try to. /var/log/mail.log show these :
Feb 25 16:57:24 server postfix/smtp[3870]: connect to veloxzone.com.br[200.223.8.81]:25: Connection timed out
Feb 25 16:57:24 server postfix/smtp[3870]: B29DEFAFCD: to=<zfixhapke1975@veloxzone.com.br>, relay=none, delay=65466, delays=65462/0.13/4.2/0, dsn=4.4.1, status=deferred (connect to veloxzone.com.br[200.223.8.81]:25: Connection timed out)
Is my server trying to send unsolicited email? Has my Mail server been hacked?
User avatar
Florian
Keyweb AG
Posts: 1243
Joined: Wed 20. Jan 2016, 02:28

Re: KeyHelp Mail hacked? Unsolicited mailsend to veloxzone.com.br

Post by Florian »

Hallo,

check the mail queue and the maillogs
Mit freundlichen Grüßen / Best regards
Florian Cheno

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
User avatar
latifolia
Posts: 42
Joined: Wed 18. Aug 2021, 09:08

Re: KeyHelp Mail hacked? Unsolicited mailsend to veloxzone.com.br

Post by latifolia »

That quote from earlier post was from the /var/log/mail.log and there was a mail queue which I never intend to send. I have delete it since.
I am afraid it can happen again.
User avatar
Florian
Keyweb AG
Posts: 1243
Joined: Wed 20. Jan 2016, 02:28

Re: KeyHelp Mail hacked? Unsolicited mailsend to veloxzone.com.br

Post by Florian »

Hallo,.


grep the maillog for the mail id B29DEFAFCD to see all lines in the log file.

But if it is only one email it is very incertain that the server is missused for spam
Mit freundlichen Grüßen / Best regards
Florian Cheno

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
Post Reply