usmannasir / cyberpanel

Cyber Panel - The hosting control panel for OpenLiteSpeed
GNU General Public License v3.0
1.53k stars 592 forks source link

Cyberpanel-Malware #1093

Open Naveensharmas opened 1 year ago

Naveensharmas commented 1 year ago

Hi all, I today installed cyberpannel 2.3 build 4 in my ubuntu server 22.04 jammy. After installation of cyberpanel I noticed suspicious activity in Email Logs. I have not created new website yet but this suspicious activity constantly occurring in the Email Logs.

I have no idea about the hostname "love.explorethebest.com" and IP address "45.129.14.31", Is this a malware or bug? could you provide a solution?

Thanks.


Jul 19 10:44:05 localhost postfix/smtpd[55224]: warning: hostname love.explorethebest.com does not resolve to address 45.129.14.31 Jul 19 10:44:05 localhost postfix/smtpd[55224]: connect from unknown[45.129.14.31] Jul 19 10:44:07 localhost postfix/pickup[51665]: 17BE916176C: uid=0 from= Jul 19 10:44:07 localhost postfix/cleanup[55529]: 17BE916176C: message-id=20230719051407.17BE916176C@localhost Jul 19 10:44:07 localhost postfix/smtpd[55224]: disconnect from unknown[45.129.14.31] ehlo=1 quit=1 commands=2 Jul 19 10:44:07 localhost postfix/qmgr[29851]: 17BE916176C: from=root@localhost.localdomain, size=20088, nrcpt=1 (queue active) Jul 19 10:44:07 localhost postfix/local[55533]: 17BE916176C: to=root@localhost.localdomain, orig_to=, relay=local, delay=0.29, delays=0.25/0.01/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox) Jul 19 10:44:07 localhost postfix/qmgr[29851]: 17BE916176C: removed