Relay Issues - removed domain

[hesperson]

I have strange problem. I recently removed an account with assigned domain. I have a lot of blocked mails incoming to this domain now. All have error: "Rejected relay attempt: .... Mails are going from different IPS, different domains to mailboxes in this removed domain. Part of this mailboxes existed before on my server.

This domain is not main. As I see DNS are ok. I sent a few mails for test from my domains. They don't go throught my server. I checked localdomain and userdomain. This domain not exist on server. Where can be problem?

 

[cPanelMichael]

Hello,

Could you let us know the output from /var/log/exim_mainlog for one of the affected messages? EX:

exigrep [email protected] /var/log/exim_mainlog

Thank you.

 

[hesperson]

2017-09-17 04:21:29 H=(dynamic-xxx.xxx.68.182.airtelbroadband.in) [182.68.xxx.xx]:21149 F=<[email protected]> rejected RCPT <[email protected]>: Rejected relay attempt: '182.68.xxx.xx' From: '[email protected]' To: '[email protected]'

 

[cPanelMichael]

Hello,

To clarify, if this domain name does not exist on the cPanel server, what specific behavior are you expecting when someone attempts to send an email to it? Or, could you provide some step-by-step instructions on how you are reproducing this behavior?

Thank you.

 

[hesperson]

I can't reproduce it. I tried without success. I know only that I have about 150 rejected mails to this not hosted domain each day. I don't understand why and how they are going to my server. It could be a virus ?

 

[cPanelMichael]

Hello,

Do the MX records for this domain name still point to the cPanel server's IP address?

Thank you.

 

[hesperson]

No, they don't. I checked on mxtools.

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can take a closer look?

Thank you.