Announcement

Collapse
No announcement yet.

how could you tell if your site was hacked & sending emails

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Wayne Luke
    replied
    Originally posted by oldengine View Post
    Problem located to Photopost Gallery misc.php emailimage

    Exploiter
    124.107.69.88 - check your server log.

    So not a vBulletin issue. Thanks for clarifying.

    Leave a comment:


  • oldengine
    replied
    Problem located to Photopost Gallery misc.php emailimage

    Exploiter
    124.107.69.88 - check your server log.

    Leave a comment:


  • Wayne Luke
    replied
    Originally posted by djjeffa View Post
    I just got an auto responce from an email i didnt send and there are over 100 recipants on it. The subject was work at home and it had some my host info and said sent via vbulletin. And ideals?
    Attach your mail server logs please.

    Leave a comment:


  • Wayne Luke
    replied
    Originally posted by oldengine View Post
    Can you show us the proof of this?

    Leave a comment:


  • oldengine
    replied
    This is a new exploit. See: https://www.vbulletin.com/forum/show...mail-log/page2

    Leave a comment:


  • djjeffa
    replied
    this is the email I got
    Code:
    The message you sent requires that you verify that you 
    are a real live human being and not a spam source.
     
    To complete this verification, simply reply to this message and leave
    the subject line intact.
     
    The headers of the message sent from your address are shown below:
     
    From [email protected] Wed Feb 01 13:38:31 2012
    Received: from smarty.dreamhost.com ([208.113.175.8]:39524)
    	by gator156.hostgator.com with esmtp (Exim 4.69)
    	(envelope-from <[email protected]>)
    	id 1Rsg0k-0005QK-Vw
    	for [email protected]; Wed, 01 Feb 2012 13:38:31 -0600
    Received: from raptors.dreamhost.com (raptors.dreamhost.com [69.163.171.157])
    	by smarty.dreamhost.com (Postfix) with ESMTP id 22F85760056;
    	Wed,  1 Feb 2012 11:38:29 -0800 (PST)
    Received: by raptors.dreamhost.com (Postfix, from userid 584256)
    	id 9B415286678; Wed,  1 Feb 2012 11:38:28 -0800 (PST)
    To  Email addresses removed but there were about 100
    Subject: This Work At Home Position is Perfect for You
    From: "djjeffa.com" <my email address I removed it for this post>
    Auto-Submitted: auto-generated
    Message-ID: <[email protected]www.djjeffa.com>
    MIME-Version: 1.0
    Content-Type: text/plain; charset="UTF-8"
    X-Priority: 3
    X-Mailer: vBulletin Mail via PHP
    Date: Wed,  1 Feb 2012 11:38:28 -0800 (PST)
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Status: No, score=2.8
    X-Spam-Score: 28
    X-Spam-Bar: ++
    X-Spam-Flag: NO

    Leave a comment:


  • how could you tell if your site was hacked & sending emails

    I just got an auto responce from an email i didnt send and there are over 100 recipants on it. The subject was work at home and it had some my host info and said sent via vbulletin. And ideals?
widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X