How to track where spam is coming from?

Question

CentOS

Hello.
Spam is being sent from the server. I rummaged through the code of all sites, it was not possible to find where the spam comes from.
Is it possible to somehow track which file spam is being sent from?

Answer 1

It's hard to give advice. You didn't even specify the environment in which the sites work...
But if you use telepathy, then apparently you need to read this piece of php documentation ( http://php.net/manual/ru/mail.configuration.php ):
"mail .log string
Path to the log file where all calls to the mail() function will be logged. The entries in the log contain the full path to the script, line number, To recipient address, and headers."
And enable logging.
Also, theoretically, spam may not be sent through php, so you need to look at the mail server logs, and at least see which user it is sent from. Maybe this will give you food for thought...

Answer 2

http://us3.php.net/manual/en/mail.configuration.php#ini.mail.add-x-header
http://us3.php.net/manual/en/mail.configuration.php#ini .mail.log