find IP from uid in qmail? URGENT

[tolis]

Hi
i have found that someone is using our server to send spam.All messages have a uid 48 anf i found this uid in stpm-pendings.log
Can i find his IP somehow?
Thanks

 

[bandurao]

Please do not post alternative forums as a solution to a question on the SWsoft website...

 

[phoenixisp]

And he's at it again, at least you are a persistant spammer bandurao.

tolis - have you checked your mail log? Look at /usr/local/psa/var/log/maillog

 

[tolis]

found it!

OK thanks for your replies but the problem was php scripts
The uid 48 is apache and in particular 2 domains had an overwelming visit in formmail.php which is quite risky and through it they managed to send spam through bcc recipients.
Now that i removed them queue is clear and hopefully i will get delisted in a few hours.
Anyone got any ideas for secure php mail scripts?