How do I stop this spammer?

[JohnR]

I have searched and cannot find what I need.

There are lots of emails going through my system that are all identical. Here is what the log says about the:

2007-02-23 15:41:34 1HKiAY-0003HO-OM <= accountname@servername.com U=accountname P=local S=1623
2007-02-23 15:44:43 1HKiAY-0003HO-OM mail-gw2.radiant.net [216.21.149.212] Connection timed out
2007-02-23 15:44:44 1HKiAY-0003HO-OM => email@somecompany.com R=lookuphost T=remote_smtp H=mail-gw1.radiant.net [216.21.149.211]
2007-02-23 15:44:44 1HKiAY-0003HO-OM Completed

My tech guy had a family issue and is gone for the weekend. Can anyone point me in the right direction? All the emails end up going ot the email@somecomapny.com address and it is always the same. I obviously changed my server name and the emai laddress they are going to.

Thanks,

[chirpy]

That log shows that the email is being sent by the cPanel account accountname locally on the server. If they're sending out spam, suspend the account and check through all their web scripts in their site.

[lawrence.dcosta]

Hi Chirpy

I too see the similar kind of entries in my logs. How can we verify the contents of mail as the server is hosting only the mailing solutions

Lawrence

[brianoz]

What do you mean "verify the contents of mail"? If you're hosting the mail solution, can't you check in their mail directories and read their mail from there? Or install the free tool Configserver.com mail manage, which allows you to read and manage individual mailboxes when troubleshooting?