Hi,

Someone is using my server to send spam. How can i find where the problem comes from using putty?

How can i find the page used to send spam?

Thanks in advance for you help.

Aiko

Hi

Thanks for your reply.

I'm on a dedicated server. I use webmin.

How can i check the mail server logs?

Aiko

Sendmail Mail Server is installed on my server. QMail Mail Server is not installed. Postfix Mail Server is not installed.

When i use this command: and Sendmail is stopped,

Here is what i see:
Jan 13 10:36:54 server sendmail[19180]: m0DIam73019180: to="=?UTF-8?B?TXIuVm9vcmhlZXM=?=" <gates82@gmx.de>, ctladdr=nobody (99/99), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31410, relay=[127.0.0.1] [127.x.x.x], dsn=4.0.0, stat=Deferred: Connection refused by [127.x.x.x]
...
...
...
...
...


+ the hacker can write/delete files on my server.

Please help!

Aiko