Announcement

Collapse
No announcement yet.

Finding compromised SMTP

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Finding compromised SMTP

    Here is a script I use on my Zimbra environment that I modified to work on my InterWorx box to find what account is compromised.

    Code:
    tail -n 100000 /var/log/maillog | grep "vchkpw-smtp: (PLAIN) login success" > /tmp/smtpauthlogins.txt
Working...
X