Spam emails | 65000 in a day.

[chetanmadaan]

Hi -

one of the cpanel accounts on our WHM server was probably compromised and we were hacked... the hacker almost sent a lot of emails to all different email addresses and we got blocked by some major providers (i.e. Gmail).

Normally, our host would report this to us... but they didn't and now that we are blocked we have to find a solution our-self.

Is there a way in Cpanel that we can monitor what script is/was generating all these emails?
Is there a way to disable the mail server on a cpanel account??
Is there a way to set an alert if more than X number of emails are sent at one?



P.S. we are on a Dedicated server

 

[alphawolf50]

For the alerts, this is what you're looking for:

ConfigServer Security & Firewall

• It will send alerts when an account sends X emails per hour
• Alerts when it sees suspicious activity from scripts.
• About a million other things it can do to help secure your server.

 

[georgeb]

About a million other things it can do to help secure your server.

You are 100% right. You have to check if the server is compromised at root level, if yes it is useless the rest.

Regards