Hi I am hoping someone can help me with a problem.
I was just checking the server and noticed a a very large amount of emails in the default email address they all nearly consist of returned email mails.
It seems to me that our server is sending e-mails that is shouldn’t be sending. either by relaying.
I have have checked the domain on emailsecuritygrader.com and it is saying its not relaying. but where are all these emails coming from?
A frequent source of what you’re seeing is if a spammer broke into a web app on your server… that often occurs when a web app is out of date, or contains a vulnerable plugin.
If you look at the headers of the spam coming out of your server, you should be able to get more details about where those are coming from. The headers can show what user account they’re originating from, or maybe even what URL contains the malicious software generating them.