[BlueOnyx:21171] Re: Spammer

[Colin Jack]

☺

I need to work out which site is sending the spam.

From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> on behalf of Ken Hohhof <khohhof at kwom.com>
Reply-To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Date: Sunday, 16 July 2017 at 18:25
To: "blueonyx at mail.blueonyx.it" <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:21168] Re: Spammer

You mean the site owner or the spammer? Good luck tracking down a spammer.

---- Original Message ----
From: "Colin Jack"
Sent: 7/16/2017 11:52:33 AM
To: "BlueOnyx General Mailing List"
Subject: [BlueOnyx:21167] Re: Spammer


I would be very surprised … but what I need to do is track down who is responsible.

From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> on behalf of Ken Hohhof <khohhof at kwom.com>
Reply-To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Date: Sunday, 16 July 2017 at 16:41
To: 'BlueOnyx General Mailing List' <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:21166] Re: Spammer

Any chance a customer has loaded a 10 year version of formmail.pl on their site?  The original version was vulnerable to abuse by spammers.  I haven’t seen that problem in a long, long time though.


From: Blueonyx [mailto:blueonyx-bounces at mail.blueonyx.it] On Behalf Of Colin Jack
Sent: Sunday, July 16, 2017 10:31 AM
To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:21165] Spammer

Looking for ideas.
We suspect we have a compromised website on one of our servers – being used for spam.
What is the easiest way to track this down? Can see spam being sent via localhost but can’t pin it down.

Thanks

Colin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20170716/47f2caac/attachment.html>