starofnight

Member
Sep 28, 2018
7
0
1
Iran
cPanel Access Level
Root Administrator
Hello
I have many unknown spams in the server mail queue. I couldn't find the source of these emails by looking at the header and body.
The header and body of an email are as below. Please help me in finding the source.
I replaced my server name with myserver.domain.com
Code:
1gvbcG-0006sd-HP-H
mailnull 47 12
<>
1550468240 0
-received_time_usec .539958
-ident mailnull
-received_protocol local
-body_linecount 70
-max_received_linelength 161
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1550468240
-localerror
XX
1
[email protected]

143P Received: from mailnull by myserver.domain.com with local (Exim 4.91)
        id 1gvbcG-0006sd-HP
        for [email protected]; Mon, 18 Feb 2019 09:07:20 +0330
038  X-Failed-Recipients: [email protected]
029  Auto-Submitted: auto-replied
060F From: Mail Delivery System <[email protected]>
021T To: [email protected]
099  Content-Type: multipart/report; report-type=delivery-status; boundary=1550468240-eximdsn-196864072
018  MIME-Version: 1.0
059  Subject: Mail delivery failed: returning message to sender
049I Message-Id: <[email protected]>
038  Date: Mon, 18 Feb 2019 09:07:20 +0330
and the body of email is as below

Code:
- Removed -
I also looked for propagate.php as the script which spams are sending from, but I couldn't find such script in my server. Please help me.
Thanks in advance :)
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,911
2,234
363