How to find the ip address which send spam mail through our server?

Avatar
InMotionFans
  • Answered
I wish to know the ip address of the customer who sends spam mail in our server.
Replies 1
Avatar
0
Tim S.
Hello, Thank you for your question about trying to determine who is sending spam from your server. Are you trying to find the account on the server that the spam is coming from? Or are you trying to find out the IP of who is accessing the account which is sending spam? Either one will take a bit of investigative work. You can look at the access logs at /var/logs/access_logs which is the common place. Keep in mind, just because mail is being delivered as your server, doesn't mean thats where its originating. You could be getting spoofed. If that's the case, we suggest setting up DKIM and SPF records to prevent it. I hope this helps! Thanks! Gratefully, Tim S