[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2346
  • Last Modified:

How to find the script on Plesk server that is sending SPAM as www-data user

I am running a Plesk 9.0.1 Web Server on Ubuntu 6.06.2 LTS and have about 100 small to medium web sites hosted on the server. The problem is that I believe one of the websites has a script that is allowing spam to be sent through the server. The reason I believe this is that I get 1000s of messages an our deferred in the mail queue that show to be sent from the www-data user.

My question is if someone can tell me how to find the script or scripts that is sending the SPAM?

Thanks in advance for your help.
  • 2
1 Solution
Kamran ArshadCommented:

Is it a windows or Linux box?
mcmincAuthor Commented:
It is a Linux Ubuntu 6.06.2 LTS machine
mcmincAuthor Commented:
Does anyone have any ideas on what I can try?
Take a look at the Plesk KB article:

You will need to determine where the spam is originating. If it is a user, then frequent SMTP access can often pinpoint the user.  

If is a web script, then you will see emails coming from the nobody user and you can use this technique:

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now