[MDaemon-L] Melacak sender email

2014-04-03 Terurut Topik Alim-GGI 

Selamat siang pak Syafril,


Apakah bisa diketahui siapa pengirimnya/darikomputer mana/dari negara mana 
asal email pada log SMTP-In di bawah ini?
Email tersebut bukanlah berasal dari sender pemilik email, melainkan 
seseorang telah menyalahgunakannya. Karenanya, saya berusaha melacaknya.


=
Thu 2014-04-03 10:58:55: --
Thu 2014-04-03 10:59:07: [491344] Session 491344; child 0001
Thu 2014-04-03 10:59:07: [491344] Accepting SMTP connection from 
[127.0.0.1:1591] to [127.0.0.1:25]
Thu 2014-04-03 10:59:07: [491344] -- 220 jakarta.ggindonesia.co.id ESMTP 
MDaemon 13.6.1; Thu, 03 Apr 2014 10:59:07 +0700

Thu 2014-04-03 10:59:07: [491344] -- EHLO WorldClient
Thu 2014-04-03 10:59:07: [491344] -- 250-jakarta.ggindonesia.co.id Hello 
WorldClient, pleased to meet you

Thu 2014-04-03 10:59:07: [491344] -- 250-ETRN
Thu 2014-04-03 10:59:07: [491344] -- 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2014-04-03 10:59:07: [491344] -- 250-8BITMIME
Thu 2014-04-03 10:59:07: [491344] -- 250 SIZE
Thu 2014-04-03 10:59:07: [491344] -- AUTH CRAM-MD5
Thu 2014-04-03 10:59:07: [491344] -- 334 
PE1EQUVNT04tRjIwMTQwNDAzMTA1OS5BQTU5MDcyNjVNRDAwMTJAamFrYXJ0YS5nZ2luZG9uZXNpYS5jby5pZD4=
Thu 2014-04-03 10:59:07: [491344] --  
c2JwYXJrQGdnaW5kb25lc2lhLmNvLmlkIDE1OTVkNzUxOWEwMDMxY2ZlMzQ5YThmNjhiMjA2YTky

Thu 2014-04-03 10:59:07: [491344] -- 235 Authentication successful
Thu 2014-04-03 10:59:07: [491344] Authenticated as sbp...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- MAIL FROM: sbp...@ggindonesia.co.id 
SIZE=18689
Thu 2014-04-03 10:59:07: [491344] -- 250 sbp...@ggindonesia.co.id, Sender 
ok
Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: 
account...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 account...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: at...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 at...@ggindonesia.co.id, 
Recipient ok
Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: 
complia...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 complia...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: e...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 e...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: j...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 j...@ggindonesia.co.id, Recipient 
ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: p...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 p...@ggindonesia.co.id, Recipient 
ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: sam...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 sam...@ggindonesia.co.id, 
Recipient ok
Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: 
korean-golden-jaka...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 
korean-golden-jaka...@ggindonesia.co.id, Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: j...@goodguys.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 j...@goodguys.co.id, Recipient 
ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: a...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 a...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: j...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 j...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: vane...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 vane...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: ke...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 ke...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: ti...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 ti...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: se...@samkyung.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 se...@samkyung.co.id, Recipient 
ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: putra-...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 putra-...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: heri-...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 heri-...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: vane...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 vane...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: ha...@ggkorea.co.kr
Thu 2014-04-03 10:59:07: [491344] -- 250 ha...@ggkorea.co.kr, Recipient 
ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: j...@goodguys.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 j...@goodguys.co.id, Recipient 
ok
Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: 
jcp-semar...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250 jcp-semar...@ggindonesia.co.id, 
Recipient ok

Thu 2014-04-03 10:59:07: [491344] -- RCPT TO: at...@ggindonesia.co.id
Thu 2014-04-03 10:59:07: [491344] -- 250

[MDaemon-L] Melacak sender email

2014-04-03 Terurut Topik Syafril Hermansyah 
On 2014-04-03 13:06, Alim-GGI wrote:
 Apakah bisa diketahui siapa pengirimnya/darikomputer mana/dari negara
 mana asal email pada log SMTP-In di bawah ini?

Tidak.

 Thu 2014-04-03 10:59:07: [491344] Accepting SMTP connection from 
 [127.0.0.1:1591] to [127.0.0.1:25]
 Thu 2014-04-03 10:59:07: [491344] -- 220 jakarta.ggindonesia.co.id ESMTP 
 MDaemon 13.6.1; Thu, 03 Apr 2014 10:59:07 +0700
 Thu 2014-04-03 10:59:07: [491344] -- EHLO WorldClient 

Sender ini kirim mail menggunakan worldclient webmail, jadi harus
periksa ke worldclient log.
Atau dari periksa dari mail header message yang diterima oleh hijacker itu.


-- 
syafril
---
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 14.0 SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.


-- 
--[MDaemon-L]
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.6.2, SP 4.1.5, BES 2.0.2, OC 2.3.3, SG 2.1.2, PP 2.0.1