Some spammer is sending a mass amount of email through my vb system, now I am loggin emails sent to a file, but that does not show the email address they are using. I would like to somehow be able to get the ips they are using so I can ban those while I find how/where they got in...
Here is a sample of the many hundreds of emails they are sending out..
Code:
SUCCESS
Fri, 11 Nov 2011 19:33:57 -0500
To: xpwarmnklj@hyrvpf.com
Subject: xpwarmnklj@hyrvpf.com
From: "the site" <the-site-email>
Auto-Submitted: auto-generated
Return-Path: site-email
Message-ID: <20111112003357.7d1a0d42309e@the-site-address.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Content-Type: text/html; charset="ISO-8859-1"
Online prescription ultram,
This is a message from Ultram withdrawal symptoms ( mailto: ) from the forum-name ( forum-url).
forum-name takes no responsibility for messages sent through its system.
=====================================================
...I would like to somehow be able to get the ips they are using so I can ban those while I find how/where they got in...
Assuming it's being done through an http request (to a php script), seems like you should be able to look at the server logs and find out how it's being done, and from which ip(s).
Assuming it's being done through an http request (to a php script), seems like you should be able to look at the server logs and find out how it's being done, and from which ip(s).
Im with you, definately has to be a rogue file. What mods or files have you uploaded recently to your server?
11-11-2011, 11:45 PM
Getting Hammered By A Spammer
Linear Mode
