Category Archives: Mail

Plesk (linux) PHP Spammer

You may well get notification of spam leaving your server.

Check the mail queue and the mail in question, it should give you the user id and domain where the spam originates from and sometimes a file name.

If not try…

It is usually very difficult to discover the source of spam. If you are absolutely sure that a script is sending the spam (because the tail grows rapidly for no apparent reason), you can use the following script to determine which PHP scripts are currently running:

# lsof +r 1 -p `ps axww | grep httpd | grep -v grep | awk ‘ { if(!str) { str=$1 } else { str=str”,”$1}}END{print str}’` | grep vhosts | grep php


this is from here…