EMAIL ACCOUNT IS ATTACKED AND IS SENDING SPAM RIGHT NOW PLEASE HELP

2 posts / 0 new
Last post
#1 Fri, 06/20/2014 - 15:29
EspressoWeb

EMAIL ACCOUNT IS ATTACKED AND IS SENDING SPAM RIGHT NOW PLEASE HELP

i turned my emails on my phone tonight and it came through 600 undelivered mail returned,

logged into the virtualmin tonight and its still going (9,500 in under 1 hour) i have tried disabling the server, changing the email password. The account in question is info@espressowebdesign.co.uk

email headers as follows:

Return-Path:<> X-Spam-Checker-Version:SpamAssassin 3.3.1 (2010-03-16) on ewd01.espressowebdesign.net
X-Spam-Level:* X-Spam-Status:No, score=1.7 required=5.0 tests=NO_RELAYS,URIBL_BLACK autolearn=no version=3.3.1
X-Original-To:info@espressowebdesign.co.uk
Delivered-To:info-espressowebdesign.co.uk@espressowebdesign.net
Received:by ewd01.espressowebdesign.net (Postfix) id 46BCACC80A; Fri, 20 Jun 2014 19:28:49 +0100 (BST) Date:Fri, 20 Jun 2014 19:28:49 +0100 (BST)
From:MAILER-DAEMON@espressowebdesign.net (Mail Delivery System)
Subject:Undelivered Mail Returned to Sender
To:info@espressowebdesign.co.uk
Auto-Submitted:auto-replied MIME-Version:1.0
Content-Type:multipart/report; report-type=delivery-status; boundary="7B025CC7F5.1403288929/ewd01.espressowebdesign.net"
Message-Id:<20140620182849.46BCACC80A@ewd01.espressowebdesign.net>

Message contents

This is the mail system at host ewd01.espressowebdesign.net.

I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can delete your own text from the attached returned message.

The mail system
host mailgw.swip.net[212.247.156.1] said: 550 hubert.pattermann@tele2.at unknown user account (in reply to RCPT TO command)

Failed delivery status Final recipienthubert.pattermann@tele2.at Reason for failure550 hubert.pattermann@tele2.at unknown user account Remote mail servermailgw.swip.net Reporting mail serverewd01.espressowebdesign.net

problem is guys the person who controls, runs support and helps me with this is away on holiday, i dont have a clue how this works. can anyone help?

desperate

Fri, 06/20/2014 - 17:09
andreychek

Howdy,

Is there some sort of email auto-reply enabled for this particular account?

I'm wondering if maybe there's some sort of auto-reply loop that's causing all the email's you're seeing.

-Eric

Topic locked