[BlueOnyx:21168] Re: Spammer

[Ken Hohhof]

This message was originally HTML formatted.  View in a HTML capable client to see the original version.\r\n\r\nYou mean the site owner or the spammer? Good luck tracking down a spammer.

---- Original Message ----
From: "Colin Jack" 
Sent: 7/16/2017 11:52:33 AM
To: "BlueOnyx General Mailing List" 
Subject: [BlueOnyx:21167] Re: Spammer





I would be very surprised  but what I need to do is track down who is responsible.





From: Blueonyx blueonyx-bounces at mail.blueonyx.it on behalf of Ken Hohhof khohhof at kwom.com
Reply-To: BlueOnyx General Mailing List blueonyx at mail.blueonyx.it
Date: Sunday, 16 July 2017 at 16:41
To: 'BlueOnyx General Mailing List' blueonyx at mail.blueonyx.it
Subject: [BlueOnyx:21166] Re: Spammer





Any chance a customer has loaded a 10 year version of formmail.pl on their site?  The original version was vulnerable to abuse by spammers.  I havent seen that problem in a long, long time though.









From: Blueonyx [mailto:blueonyx-bounces at mail.blueonyx.it]On Behalf Of Colin Jack
Sent: Sunday, July 16, 2017 10:31 AM
To: BlueOnyx General Mailing List blueonyx at mail.blueonyx.it
Subject: [BlueOnyx:21165] Spammer



Looking for ideas.

We suspect we have a compromised website on one of our servers  being used for spam.

What is the easiest way to track this down? Can see spam being sent via localhost but cant pin it down.



Thanks



Colin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20170716/d9510e56/attachment.html>