Apparently there are 1 or more PCs in the network sending out spam. I do not use a local email server. I have outlook from Office365 subscription
How do I find the culprit? I have a Draytek Vigor 2830.
I have tried:
- Wireshark looking at [ tcp.port == 25 ]
- Bitdefender Security suite scan on networked PC's
Hi renkun.
Can I ask how you know this?
I ask as MS sends you a weird message when you first get an account and the words lead to that conclusion but all they really want is to verify you.
Ken
My website host, reported to me that, PC(s) under my public IP was sending spam to hundred of people a day.
Last edited by renkun; 11 Aug 2017 at 19:48.
Have you checked your sent items to see if it is coming out of your mailbox? You really need to do a through malware scan by using the info in this link. Read Run Me First Malware Removal Guide (incl. Spyware, Virus, Trojan, Hijacker) | MajorGeeks.Com Support Forums After reading the instructions, seehttp://forums.majorgeeks.com/showthread.php?t=139681 This will give you even more information. The CBL
Nothing should be using Port 25, since pretty much every ISP is using SSL/TLS and ports 587 for SMTP, 993 for receiving if the Windows 10 app may be set up with spam botting. Now you can also go into your gateway logs and see if it shows any issues. Net Tools is a really good program to put into your arsenal. Essential NetTools; the Swiss Army knife of network diagnostics - MajorGeeks
Wireshark is a really good program for sniffing out issues. That you can also get from Major Geeks website.
Quote