Exchange 2007 and Spam

I have spam coming from internal clients and I need to see if there is a virus.  But I need to find the IP the message is coming from.

How can I do that??
Who is Participating?
MesthaConnect With a Mentor Commented:
Highly unlikely to be coming from an internal machine.
I have covered why in this blog posting:

Then I wrote this follow up in February:
Did the spam originate from inside your network:

The server is being abused directly and you need to work out how.


You can try enabling verbose logging on the Recieve Connectors and Checking the logs.

Chris DentPowerShell DeveloperCommented:

The sender IP should be in the message header, do you have a copy of the original message with headers intact?

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

dblake15Author Commented:
Where would I find the message header??  I looked under the view source and nothing in there of value.
Chris DentPowerShell DeveloperCommented:

You have it in Outlook? View / Options (depending on the version).

dblake15Author Commented:
No that is not showing me anything except hiding the To field.

I have the exchange admin saying that he saw it come through our connector but I see no info that this is true.  
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.