Well it happened to me today a strong fight against a spammer on one of my servers. I had a very hard time tracking down the originator of the spam as it was a shared hosting server and the spammer had gained, among others, ftp access to the exploited account. Thus it was easy to hide the spam sending code within a legitimate and ordinary looking php script which implemented its own SMTP engine. This way there where no logs on my Exim SMTP server log files and I had to examine Apache log files ...
Soumplis' Personal Web Site
