The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

email sent from server.hostname

Discussion in 'Security' started by bluerayconcepts, Sep 3, 2014.

  1. bluerayconcepts

    bluerayconcepts Active Member

    Joined:
    Mar 24, 2013
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Yuba City, CA
    cPanel Access Level:
    Root Administrator
    So recently we moved to a new server setup. All settings on the new server were setup the same as the old cpanel server. However I am seeing more username@server.hostname.com than previously in the email logs and WHM summary reports.

    I get emails from root@server.hostname.com as these are server status emails. But I am seeing domainuserid@server.hostname.com being sent out to emails.

    Spam has always been foreign to me but I am slowly learning how to track it down. This was one thing that popped on my radar. When an email comes from domainuser@server.hostname.com what should I be looking at to track down exactly what account was compromised?

    I do appreciate your help.
     
    #1 bluerayconcepts, Sep 3, 2014
    Last edited: Sep 3, 2014
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Review the message body to see if it's actually SPAM, or if it's simply legitimate mail coming from a PHP script.

    Thank you.
     
Loading...

Share This Page