Getting the SMTP Auth ID with Plesk

If you think an e-mail account has been hacked in Plesk, use this to hunt down which one it could be:

cat /var/log/messages | grep -i smtp_auth | grep "logged in" | awk {' print $11 '} | awk -F / {' print $6"@"$5 '} | sort | uniq -c | sort -n | tail

This entry was posted on 07/02/2007 (Wednesday) at 6:54 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Printed from: http://rackerhacker.com/2007/02/07/getting-the-smtp-auth-id-with-plesk/ .
© Major Hayden 2010.

1 Comment »

Luckyred1871 says:
08.10.09 at 12:43
Hello, worked for me. I got an ID as result. How can I find out the ID and allocate it to a user or mail account?
Thank you!