Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Given a spam email header sent from a cPanel WHM server, is there a way to track down under which cPanel account it was sent from?

share|improve this question

1 Answer 1

If it was sent through a mail client relaying through your mail server, you might be able to piece together who it was by looking at whatever authentication and transaction logs you have set up for your smtp service.

If it is an email sent by a spam bot dropped by an exploit in one of an account's web applications... that's not so easy.

(But if an account has ZenCart installed, check that first.)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.