email account sending spam mails

345 views
asked Mar 28, 2013 in Website Builder by Alpha2 (880 points)
Hi,

I am having an issue with one of my email accounts on my domain. It’s been sending spam emails. How do I identify the source sending those spam mails. I want to know if it’s through the website itself or through an email account. Can I identify the source from the exim logs.. here’s the exim log code

2013-03-28 04:03:01 1UKlJz-0003Ba-Er <= "username"@"domainname" H=("domainname") [xx.xxx.xxx.xxx]:58513 P=esmtpa A=dovecot_login:"username"@"domainname" S=2507 id=026EFCFA.DAD70703@"domainname" T="Shipping for real" for invac-med-f_123@eyekill.net dperei@ez-2-sell.net jstreh@f2s.com enks@f5.com

1 Answer

0 like 0 dislike
answered Mar 28, 2013 by dona (4,540 points)
From the code you gave it looks like the spamming was through  a login to the mailbox
You see the IP they connected from in this:
[xx.xxx.xxx.xxx]:ip here
...