When I type mailq on my server, I get:
BB523653A62 4025 Wed Jun 4 10:40:07 MAILER-DAEMON
(delivery temporarily suspended: host p3smtpout.secureserver.net[208.109.80.54] refused to talk to me: 554 p3plsmtpout002.prod.phx3.secureserver.net : DED : AJeb1o0334uf1Y801 : DED : You've reached your daily relay quota - IP.ADDRESS)
hostmaster@MYDOMAIN.COM
B33AD653A4A 4025 Wed Jun 4 08:20:07 MAILER-DAEMON
(delivery temporarily suspended: host p3smtpout.secureserver.net[208.109.80.54] refused to talk to me: 554 p3plsmtpout002.prod.phx3.secureserver.net : DED : AJeb1o0334uf1Y801 : DED : You've reached your daily relay quota - IP.ADDRESS)
hostmaster@MYDOMAIN.COM
B77DF653A63 4025 Wed Jun 4 10:50:07 MAILER-DAEMON
(delivery temporarily suspended: host p3smtpout.secureserver.net[208.109.80.54] refused to talk to me: 554 p3plsmtpout001.prod.phx3.secureserver.net : DED : AJvF1o00L4uf1Y801 : DED : You've reached your daily relay quota - IP.ADDRESS)
hostmaster@MYDOMAIN.COM
B943C653A3C 4025 Wed Jun 4 06:40:07 MAILER-DAEMON
(delivery temporarily suspended: host p3smtpout.secureserver.net[208.109.80.54] refused to talk to me: 554 p3plsmtpout001.prod.phx3.secureserver.net : DED : AKBv1o00P4uf1Y801 : DED : You've reached your daily relay quota - IP.ADDRESS)
hostmaster@MYDOMAIN.COM
(there is probably about 50 of these, and I've cleared the queue today), do you know where these could be coming from ? is it my server sending some logs to "hostmaster" ?
I've replaced my actual domain, with "MYDOMAIN".
How can I find what could be sending these emails ? The server has recently been hacked so I'm also a bit worried.
Thanks!
Best Answer
Check to make sure your server isn't acting as an open relay. You can use http://mxtoolbox.com/SuperTool.aspx# with the Test Email Server option.