Some kind of bug of cpanel on exim?

[LeonXjm]

I found a spamer on my hosting server yesterday, I suspended the account(end user) and re-checked the log today.(/var/log/exim_mainlog) then I found out that user is still using the account and sending spam mails.

When I came back to cpanel, check the end user account, can not find it, checked /etc/userdomains, nothing found.

That is some kind of bug? When account was suspended and the spammer still can use the client to sending mails?

 

[LeonXjm]

Up Up, come on guys, I need help on this issue

 

[ruzbehraja]

Did you remove the email from the mail queue?

It may be queued emails which are still going out.

If I understood right,

You suspended the account
The mails continued
The account was not visible in WHM.

Do be patient for people to reply as this is a voluntary forum.

if your issue is urgent then open a cpanel ticket.