Spamming issue

You need to start working your way through these resources:

• https://codex.www.ads-software.com/FAQ_My_site_was_hacked
• https://www.ads-software.com/support/topic/268083#post-1065779
• https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
• https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:

• https://sitecheck.sucuri.net/scanner/
• https://www.unmaskparasites.com/
• https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Hi Andrew ,

I have implemented many security plugins regarding spamming but they are just blocking inbound spammers to post , registration etc.

How would I know which script is sending spam mails from wordpress through sendmail binary.

thanks

Note: I’ve moved this topic to How-To and Troubleshooting. The Hacks sub-forum is for coding topics not this.

I would recommend reading the resources above. It doesn’t sound like you’re tackling the real issue here, that you are hacked.

Sorry for that if you did not get my issue.

I got this logs from my server firewall that my wordpress site is sending spam mails .

Time: Thu Aug 11 12:27:10 2016 +0300
Path: ‘/home/jehanab/public_html/wp-includes/js/swfupload/plugins’
Count: 21 emails sent

Sample of the first 10 emails:

2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]
2016-08-11 12:26:41 cwd=/home/jehanab/public_html/wp-includes/js/swfupload/plugins 4 args: /usr/sbin/sendmail -t -i [email protected]

Possible Scripts:

Thanks

Why don’t you think you’ve been hacked? Someone has access to your installation and is using your web space (that your hosting providers have given you) to send malicious emails. Resolving your hack will resolve the spam emails, but it sounds like you want to stick a plaster on the problem instead.

so that means changing passwords of wordpress admin and database user will resolve the problem , I have also scanned the website with antivirus and
link https://sitecheck.sucuri.net/scanner/

but still facing this type of issues on regular basis.

Thanks

Installing plugins, changing the username and password and scanning your website with sucuri won’t resolve your hacked issue. I’m afraid that resolving a hacked site doesn’t take 5-10 minutes. It takes hours of tedious delousing, but it is all explained in the resources above.