Environment: W2k3, IIS6, Microsoft SMTPSVC 6
I have a spammer probably using some form of formmail / smtpsvc and spamming off my server. I have a shared environment and need advice on how to tell which user is doing the spamming. Any advice?
Spam——
Received: from maxima8 ([***.***.***.***]) by maxima8.domain.com with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 10 Jan 2007 15:04:49 -0800
Date: Wed, 10 Jan 2007 15:04:49 40800
Subject: PLEAD FOR HELP
To: ds65@charter.net
From:
Reply-To: stevedouglas_privatemail@yahoo.com
MIME-Version: 1.0
Content-Type: text/plain; charset=”utf-8″
Content-Transfer-Encoding: 8bit
Return-Path: homeservers@aplus.net
Message-ID:
X-OriginalArrivalTime: 10 Jan 2007 23:04:49.0891 (UTC) FILETIME=[BAD6F330:01C7350B]
PLEAD FOR HELP
Dear friend
As you read this, I don’t want you to feel sorry for me, because, I
believe everyone will die someday. My name is Steve Douglas I am a
merchant of Omani nationality but presently residing in london. I have been
diagnosed with Esophageal cancer .It has defiled all forms of medical
treatment, and right now I have only about a few months to live, according
to medical experts.
————————-
