The Community Forums

Interact with an entire community of cPanel & WHM users.
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

spammer sending email as localhost, how to trace?

Discussion in 'E-mail Discussions' started by vivithemage, Oct 7, 2011.

  1. vivithemage

    vivithemage Member

    Joined:
    Jul 2, 2009
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    I have a spammer sending mail :

    localhost[127.0.0.1] highlydemand@gawab.com

    I am guessing php script, but I am wondering how I can trace it back do an account? I do not actually see gaweb.com as an account/subdomain/addon/parked domain.

    Thanks for any help.
     
  2. vivithemage

    vivithemage Member

    Joined:
    Jul 2, 2009
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    looks like it was found :


    truthful 4273 0.2 0.1 48060 9184 ? S 08:00 0:19 /usr/bin/perl ./delivery.cgi --d=3 --del --quiet --fork

    It's at /home/truthful/public_html/cgi-bin/int/delivery.cgi
     
Loading...

Share This Page