Checking the php script sending the spam mails

Advertisements

This post explains how to check the php script sending the spam mails in exim.

Go to the mail sending directory of exim

root@server1 [~]# cd /var/spool/exim/input

Search for php scripts sent the spam mails
root@server1 [/var/spool/exim/input]#  egrep "X-PHP-Script" * -R