Getting the SMTP Auth ID with Plesk

If you think an e-mail account has been hacked in Plesk, use this to hunt down which one it could be:

cat /var/log/messages | grep -i smtp_auth | grep "logged in" | awk {' print $11 '} | awk -F / {' print $6"@"$5 '} | sort | uniq -c | sort -n | tail

This entry was posted on 07/02/2007 (Wednesday) at 6:54 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

Printed from: http://rackerhacker.com/2007/02/07/getting-the-smtp-auth-id-with-plesk/ .
© Major Hayden 2012.

1 Comment »

Luckyred1871 says:

08.10.09 at 12:43

Hello, worked for me. I got an ID as result. How can I find out the ID and allocate it to a user or mail account?

Thank you!

RSS feed for comments on this post

Welcome! I started this blog as a way to give back to all of the other system administrators who have taught me something in the past. Writing these posts brings me a lot of enjoyment and I hope you find the information useful. If you spot something that's incorrect or confusing, please write a comment and let me know. Drop me a line if there's something you want to know more about and I'll do my best to write a post on the topic.

-- Major Hayden