Emails being sent from forum

[tech07]

past few days I have been receivin Message from Server that emails are beeing sent from Forum. Reports are that over 1,000 emails are being sent yet nowhere on the Vbulletin Menues is the email address in question entered anywhere.

Is there a place I can look on vBulletin frorum to see where these emails are being sent to or originating from

I contact the Server and all they are giving me is the daily toatal which is reported at 5:00PM CST

Check Squirrel Mail and not that.

I have asked Server to send report of when these were sent during the day at actual time sent

All they keep telling me is it is at the Form end.

Please help

Thank you

[kpmedia]

What mods are running?

[tech07]

What mods are running?

You mean what hacks are running, the usual.. nothing has been added in the last 3 months.

This started since we moved to new Server specifically 1 month after moving to new server, so I have no idea where to look.

Trying to find a way to see what emails are being sent and to whom... nothing is showing up just at the Server indicating Activity and then the daly Activity totals.

[Lynne]

Doesn't your server have email logs you can look at to see all the emails being sent and when? You say it's always at 5:00 - do you have any cron jobs that run once a day that do email?

[tech07]

Doesn't your server have email logs you can look at to see all the emails being sent and when? You say it's always at 5:00 - do you have any cron jobs that run once a day that do email?

I have asked for assistance on this for them to supply me with email Loggs but all the respondent says is that it is at the SIte end.

No Cron Jobs re set up and none in cue.

I will contact the Server ppl once again.. cause this is using up my Band width and I also feel they should be supplling me with this info.

Thank you I will contact them again now.

[Videx]

FWIW, my small forum probably does send out 1000 emails a day counting subscriptions.

[tech07]

FWIW, my small forum probably does send out 1000 emails a day counting subscriptions.

Thanks for response. Are you able to see these Emails that are being sent. Is there a way to ask vB to send a Copy to your own email address so that it can be checked into?

Or is there a log of types to let you know when they were sent?

[snakes1100]

Is this a dedicated/vps server?

[tech07]

Is this a dedicated/vps server?

Yes it is

[snakes1100]

Then there is no reason to ask your host anything.

SSH into the server and tail your maillog file in /var/log and see wahts going on yourself.

This command may differ as i have no idea what email program is running as some control panels will change the email logging.

tail -f /var/log/maillog
tail -f /var/log/exim_mainlog

Hard to say which your using.

[tech07]

Then there is no reason to ask your host anything.

SSH into the server and tail your maillog file in /var/log and see wahts going on yourself.

This command may differ as i have no idea what email program is running as some control panels will change the email logging.

tail -f /var/log/maillog
tail -f /var/log/exim_mainlog

Hard to say which your using.

Using DirectAdmin Control Panel.

I am very new at this.

Can you please elaborate on where I should be adding or searching that code.

Should be done in the Admin Section or the Account section, I have acces to both.

[snakes1100]

It should be done via SSH

Its not code, its a command.

[Hornstar]

Download Putty, login, and than use those commands.

[ssslippy]

It sounds like your email setup is not secured properly.

[dtv100]

Then there is no reason to ask your host anything.

SSH into the server and tail your maillog file in /var/log and see wahts going on yourself.

This command may differ as i have no idea what email program is running as some control panels will change the email logging.

tail -f /var/log/maillog
tail -f /var/log/exim_mainlog

Hard to say which your using.

i did this for him and got this in return.

check attachment is a copy of mail log

[snakes1100]

Well, the log does contain what appears to be a valid login by tech07, but it does show that he has major login abuse on that server via what appears to be a script kiddie attacking the server to login.

It's really hard to say from just that little of the log, but to really see whats going on, it would require logging in and seeing what all is going on, i'd first start by securing the server with a firewall & start blacklisting those invalid login ip's.