Check incoming mxtoolbox.com test IP in logs

userarray user

• April 23, 2024 13:25

Hello,

If I run an external test (ie: mxtoolbox.com SMTP test) on my cPanel server, how can I track it in logs.

For example in this post there are several IP-s which are belongs to mxtoolbox.com, but how can I see in cPanel logs if the SMTP tests runs from another IPs (or just I want to verify the match)?

Thank You

• 

  mtindor

  • April 23, 2024 14:47
  • Edited

  grep mxtoolbox /var/log/exim_mainlog

  [root@bob ~]# grep mxtoolbox /var/log/exim_mainlog
  2024-04-23 10:42:01 H=keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 Warning: Sender rate 1.0 / 1h
  2024-04-23 10:42:01 H=keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 F=<supertool@mxtoolboxsmtpdiag.com> rejected RCPT <testmxtoolboxsmtpdiag.com>: Rejected relay attempt: '18.209.86.113' From: 'supertool@mxtoolboxsmtpdiag.com' To: 'test@mxtoolboxsmtpdiag.com'
  2024-04-23 10:42:01 H=keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 Warning: "Detected session with all messages failed"
  2024-04-23 10:42:01 H=keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 Warning: "Increment slow_fail_block Ratelimit - keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 because of all messages failed"
  2024-04-23 10:42:01 SMTP connection from keeper-us-east-1d.mxtoolbox.com [18.209.86.113]:35606 closed by QUIT

  It appears that SMTP tests from MXToolbox are going to come from hostnames ending in mxtoolbox.com and are going to have a FROM address of supertool@mxtoolboxsmtpdiag.com

  So you could grep any of those values in /var/log/exim_mainlog to see the IP that MXToolbox used to connect to your server, or to see if MXToolbox was successful in connecting at all.

  1

Please sign in to leave a comment.