[BlueOnyx:21167] Re: Spammer

[Colin Jack]

I would be very surprised … but what I need to do is track down who is responsible.

From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> on behalf of Ken Hohhof <khohhof at kwom.com>
Reply-To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Date: Sunday, 16 July 2017 at 16:41
To: 'BlueOnyx General Mailing List' <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:21166] Re: Spammer

Any chance a customer has loaded a 10 year version of formmail.pl on their site?  The original version was vulnerable to abuse by spammers.  I haven’t seen that problem in a long, long time though.


From: Blueonyx [mailto:blueonyx-bounces at mail.blueonyx.it] On Behalf Of Colin Jack
Sent: Sunday, July 16, 2017 10:31 AM
To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:21165] Spammer

Looking for ideas.
We suspect we have a compromised website on one of our servers – being used for spam.
What is the easiest way to track this down? Can see spam being sent via localhost but can’t pin it down.

Thanks

Colin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20170716/b56c1500/attachment.html>