Spamming is a serious threat

[Muneef]

Hi,

I am having issues with my server, my datacenter support team send us an email saying "
your server is used
for spamming which is strictly forbidden by our TOS. Spamming is a serious threat in the
Internet can cause a huge amount of damage. show they disable the mail port 25 /465 temporarily.


Please advise how to stop spamming services. i am getting email emails always my server through like. please see the error messges.

 

[cPRex]

Hey there! The best resource for catching spammers can be found in our support documents here:

How to find the source of spam emails

Introduction In this article, we will be exploring means to determine how spam emails were sent from your server. This is meant to guide you in the right direction in which a further, more in-dep...

support.cpanel.net

The short version, is that running this command should get you some good detail from the logs so you can at least tell what directories are sending the message so you can investigate those areas of the system:

awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr

 

[Muneef]

I try this as well, no way way to stop spamming

 

[cPRex]

Running the command will not stop the spamming - it will just tell you where the mail is coming from so you can investigate the server.

 

[Muneef]

Running the command will not stop the spamming - it will just tell you where the mail is coming from so you can investigate the server.

I have got the report please help me how can i check.

 

[cPRex]

There isn't a specific method to check anything - you'll just need to examine those directories and see if there is anything odd there. Those plugin names don't look real to me, so I'd start there.

 

[Muneef]

Please help me.

 

[cPRex]

There isn't any more assistance that can be provided for this issue over the forums. At this point, it is up to the server administrator to manually review the files in the directories that are listed in that command's output, to see if there are any tools are scripts that could be used to send messages, such as a compromised plugin.

If you need a server administrator to help with that work I'd recommend browsing our System Administration Services page.