Getting the SMTP Auth ID with Plesk

If you think an e-mail account has been hacked in Plesk, use this to hunt down which one it could be:

cat /var/log/messages | grep -i smtp_auth | grep "logged in" | awk {' print $11 '} | awk -F / {' print $6"@"$5 '} | sort | uniq -c | sort -n | tail

Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on DotNetKicks.com
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
This entry was posted on 07/02/2007 (Wednesday) at 6:54 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
Printed from: http://rackerhacker.com/2007/02/07/getting-the-smtp-auth-id-with-plesk/ .
© Major Hayden 2010.

1 Comment   »

  • Luckyred1871 says:
    08.10.09 at 12:43

    Hello, worked for me. I got an ID as result. How can I find out the ID and allocate it to a user or mail account?

    Thank you!


RSS feed for comments on this post , TrackBack URI

Leave a Reply