The imperio account has just finished sending 500 emails.
There could be a spammer, the account could be compromised, or just sending more emails than usual.
After some processing of the /etc/virtual/usage/imperio.bytes file, it was found that the highest sender was imperio@dataweb9.datawebhosting.com.ar, at 501 emails.
The top authenticated user was imperio, at 501 emails.
This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.
An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.
The most common path that the messages were sent from is /home/imperio/domains/sadotoys.com.ar/public_html/awstats, at 199 emails (39%).
The path value may only be of use if it's pointing to that of a User's home directory.
If the path is a system path, it likely means the email was sent through smtp rather than using a script.
This warning was generated because the 500 email threshold was hit.
================================
Automated Message Generated by DirectAdmin
Dentro del foro busque el usuario por la dirección de mail y no lo pude encontrar.
En el cpanel, quise bloquear mails salientes con esa dirección, pero tampoco funciono.
El asunto es que no se como solucionarlo.
A alguien se le ocurre que puedo hacer?
Desde ya, muchas gracias a tod@s