Hi,
We have an account for a client of ours that is flagged for sending spam email. Our dedicated server runs CPanel. We are looking for any advice on how we can find where the spam is being sent from and prevent it so we can un-suspend their account. We believe they are not intentionally sending the spam but that their account has been compromised. Below is a sample email that our server provider sent us to prove his account was sending spam:
**************************
**********
**********
**********
**********
**********
****
Return-Path: <mrchowlee_hk3@yahoo.com>
Received: from rly-db06.mx.aol.com (rly-db06.mail.aol.com [172.19.130.81]) by air-db01.mail.aol.com (v121_r2.12) with ESMTP id MAILINDB014-acd48bb4d0f171
; Sun, 31 Aug 2008 22:01:59 -0400
Received: from sitezhosting3.webserversys
tems.com (sitezhosting3.webserversy
stems.com [75.125.148.210]) by rly-db06.mx.aol.com (v121_r2.11) with ESMTP id MAILRELAYINDB063-acd48bb4d
0f171; Sun, 31 Aug 2008 22:01:52 -0400
Received: from localhost ([127.0.0.1] helo=mail.pureimagephotogr
aphy.co.uk
)
by sitezhosting3.webserversys
tems.com with esmtpa (Exim 4.69)
(envelope-from <mrchowlee_hk3@yahoo.com>)
id 1KZyjO-00021F-Tw; Sun, 31 Aug 2008 21:01:26 -0500
Received: from 41.205.161.22 ([41.205.161.22])
(SquirrelMail authenticated user john@pureimagephotography.
co.uk)
by mail.pureimagephotography.
co.uk with HTTP;
Sun, 31 Aug 2008 21:01:26 -0500 (CDT)
Message-ID: <2898.41.205.161.22.122023
4486.squir
rel@mail.p
ureimageph
otography.
co.uk>
Date: Sun, 31 Aug 2008 21:01:26 -0500 (CDT)
Subject: INVITATION TO TREAT!!!
From: "CHOW LEE ARTS AND CRAFTS COMPANY" <mrchowlee_hk3@yahoo.com>
Reply-To: chow_lee_arts_crafts@live.
com
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-885
9-1
Content-Transfer-Encoding:
8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - sitezhosting3.webserversys
tems.com
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-AOL-IP: 75.125.148.210
X-AOL-SCOLL-AUTHENTICATION
: domain : sitezhosting3.webserversys
tems.com ; SPF_helo = n
X-AOL-SCOLL-AUTHENTICATION
: domain : yahoo.com ; SPF_822_from = n
To:
X-Mailer: Unknown (No Version)
MIME element (text/plain)
My Name is Chow Lee the financier CHOW LEE ARTS AND CRAFTS
HONG KONG and also a banker. We have Branches and Payment officers and
offices all around Asia and Europe.
We are currently recruiting payment officers in your Locality.
Your responsibility will be to:
a.Process payments and disburse to payment officers under you or directly
to the company as instructed.
b.To maintain and update the payment Instructor under which you belong.
c.To send weekly reports on status of payments of transactions.
Job Requirement:
a. You Must Have a Bank Account with any financial institution.
b. You Must have access to the Internet at least twice (2) a Day to
enable you give us proper update on payments.
c. You Must have a Direct Cell Phone to enable our customers call for
verification before payments are made in your Favor.
d. Your Loyalty and Anxiousness toward this Job would attract increment
in your Commission Charges.
If you already work and need something else to bring more funds,this is
the offer too!
I am willing to pay you 10% for every payment received by you from our
clients
who makes payment through you.
If you would like this, send an email to the address below stating your
interest and possible qualifications.
Email: chow_lee_arts_crafts@live.
com
Hope to Read from you with asap.
Regards
MR CHOW LEE .
CHOW LEE ARTS AND CRAFTS.
**************************
**********
**********
**********
**********
**********
****
thanks for any suggestions or advice you can provide!
Jen
Start Free Trial