Spam attack on one e-mail account


Well-Known Member
Feb 23, 2004
cPanel Access Level
Root Administrator
I have a problem i recieve a tons of emails including only hyperlink in html
Here is the header :

Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Mon, 01 Jul 2013 10:58:48 +0200
Received: from ([]:37998
        by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
        (Exim 4.80.1)
        (envelope-from <[email protected]>)
        id 1UtZwc-0006SI-8g
        for [email protected]; Mon, 01 Jul 2013 10:58:48 +0200
Received: from levantat by with local (Exim 4.80.1)
        (envelope-from <[email protected]>)
        id 1UtZwY-000550-Ob
        for [email protected]; Mon, 01 Jul 2013 04:58:42 -0400
To: [email protected]
Subject: Put it there
From: "Neva Greer" <[email protected]>
Reply-To: "Neva Greer" <[email protected]>
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 01 Jul 2013 04:58:42 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname -
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [580 580] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: authenticated_id: levantat/from_h
X-Spam-Status: No, score=1.9
X-Spam-Score: 19
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "", has
 identified this incoming email as possible spam.  The original message
 has been attached to this so you can view it (if it isn't spam) or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Intimate Moments my mom with her BF [...] 
 Content analysis details:   (1.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                              for more information.
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4971]
  0.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
X-Spam-Flag: NO

 Intimate Moments my mom with her BF
I really do not know how to handle this problem please help. Lowering the score will help but will affect most of the clients emails so its not a solution


Staff member
Apr 11, 2011
Hello :)

You will find several options available to help reduce incoming SPAM in:

"WHM Home » Service Configuration » Exim Configuration Manager"

These options are documented at:

Exim - Basic Editor

You may also want to utilize account level filtering on a per-account basis via cPanel. This option is documented at:

Account Level Filtering

Thank you.