Root sends many spams

starofnight

New member
Joined
Dec 9, 2018
Messages
1
Hello
There are many frozen emails in mail queue. Emails like.
1gWFaS-0003Fj-Ih <> *** frozen ***
[email protected]
All of them are sent to qq.com.

The mail body is this:

1gWFSg-00031T-BL-D
--1544424878-eximdsn-547791570
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

[email protected]
(ultimately generated from [email protected])
retry timeout exceeded

--1544424878-eximdsn-547791570
Content-type: message/delivery-status

Reporting-MTA: dns; server.arshhost.net

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0

--1544424878-eximdsn-547791570
Content-type: message/rfc822

Return-path: <[email protected]>
Received: from [222.185.23.211] (helo=51240.com)
by server.arshhost.net with smtp (Exim 4.91)
(envelope-from <[email protected]>)
id 1gWFSf-00031K-OH
for [email protected]; Mon, 10 Dec 2018 10:24:38 +0330
Received: from 51240.com (unknown (206.254.177.40])
by 51240.com with SMTP id 440592bd-1ce2-42e8-b238-2e9246af3fcc;
for <[email protected]>;Mon, 10 Dec 2018 14:54:33 +08:00
Message-ID: <[email protected]>
From: "=?utf-8?B?5ZC06IuH?=" <[email protected]>
To: <[email protected]>
Subject: =?utf-8?B?dFN5bXlGb0lFVDdlbDMzYk83buOAiuWogSblsLzmlq/jgIvpqbs=?=
=?utf-8?B?KuetluWNs+WPr+mihuWPljE44pKP546wQOmHkX7lkqjor6LCt+i/neKApg==?=
=?utf-8?B?5b+DZHM2OTY5MDAx5b+r6L+bNjA0OTUz56KYIGMtMC1tICAgICAgICAg?=
=?utf-8?B?ICAgICAgICAgICA=?=
Date: Mon, 10 Dec 2018 14:54:33 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Disposition-Notification-To: [email protected]
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

<p><font color=3D"#A52A2A">,<span style=3D"position: absolute; =
top:-105em;display:inline-block"><=E4=B8=89=E5=87=BA></span>=E7=B7=9A=E4=B8=
=8A<span style=3D"position: absolute; =
top:-124em;display:inline-block"><=E6=97=85=E6=B8=B8=E5=8F=91=E5=B1=95></sp=
an>=E6=94=AF=E4=BB=98<span style=3D"position: absolute; =
top:-191em;display:inline-block"><=E9=83=AD=E5=AE=B6=E6=9D=91></span>=E8=BF=
=94=E5=88=A9<span style=3D"position: absolute; =
top:-133em;display:inline-block"><=E7=8B=82=E7=8A=AC=E7=97=85></span>2<span=
style=3D"position: absolute; =
top:-188em;display:inline-block"><=E6=9C=BA=E5=88=B6=E9=92=B5></span>=E2=80=
=B0=E6=89=8B<span style=3D"position: absolute; =
top:-144em;display:inline-block"><=E5=B7=B1=E4=B8=91></span>=E6=8B=B5=E9=A4=
=B8<span style=3D"position: absolute; =
top:-134em;display:inline-block"><=E5=A4=A7=E5=8E=85></span>=E6=9C=80<span =
style=3D"position: absolute; =
top:-49em;display:inline-block"><=E5=85=9A=E6=94=BF=E4=B8=80=E6=8A=8A=E6=89=
=8B></span>=E9=AB=9838<span style=3D"position: absolute; =
top:-164em;display:inline-block"><=E9=87=8E=E7=94=9F=E7=A8=BB></span>8<span=
style=3D"position: absolute; =
top:-190em;display:inline-block"><=E7=BB=86=E5=B0=91></span>8<span =
style=3D"position: absolute; =
top:-38em;display:inline-block"><=E9=B8=B5=E9=B8=9F></span>=E5=B0=8A=E4=BA=
=AB<span style=3D"position: absolute; =
top:-157em;display:inline-block"><=E5=AD=98=E5=9C=A8=E9=97=AE=E9=A2=98></sp=
an>=E7=8D=A8=E7=AB=8B<span style=3D"position: absolute; =
top:-170em;display:inline-block"><=E5=B0=8F=E5=96=87=E5=8F=AD=E5=8F=A3=E6=
=9C=9F></span>=E5=BF=AB=E9=80=9F<span style=3D"position: absolute; =
top:-83em;display:inline-block"><=E6=B8=85=E8=8A=B1=E6=9C=BA></span>=E5=AD=
=98<span style=3D"position: absolute; =
top:-147em;display:inline-block"><=E9=87=8E=E7=94=9F=E5=A4=A7=E8=B1=86></sp=
an>=E5=8F=96<span style=3D"position: absolute; =
top:-43em;display:inline-block"><=E5=86=9C=E4=B8=9A=E5=86=9C=E6=9D=91></spa=
n>=E5=84=AA=E5=85=88=E9=80=9A<span style=3D"position: absolute; =
top:-82em;display:inline-block"><=E5=BC=80=E5=8F=91=E9=A1=B9=E7=9B=AE></spa=
n>=E9=81=93<span style=3D"position: absolute; =
top:-48em;display:inline-block"><=E7=A3=A8=E7=B2=89=E6=9C=BA></span>.=E8=B3=
=87<span style=3D"position: absolute; =
top:-40em;display:inline-block"><=E5=88=9B=E6=96=B0=E6=96=B9=E6=B3=95></spa=
n>=E9=87=91<span style=3D"position: absolute; =
top:-166em;display:inline-block"><=E7=BC=BA=E9=92=BE></span>=E6=9B=B4<span =
style=3D"position: absolute; =
top:-120em;display:inline-block"><=E6=99=9A=E7=A7=8B=E4=BD=9C=E7=89=A9></sp=
an>=E5=AE=89=E5=85=A8<span style=3D"position: absolute; =
top:-93em;display:inline-block"><=E5=8E=BF=E5=86=9C=E7=BB=8F=E7=AB=99></spa=
n>=E3=80=82</font></p>


--1544424878-eximdsn-547791570--

and the header of email is like below:

1gWFSg-00031T-BL-H
mail 8 12
<>
1544424878 0
-received_time_usec .351924
-active_hostname server.arshhost.net
-ident mail
-received_protocol local
-aclm _uid 2
-1
-aclm _username 7
unknown
-body_linecount 96
-max_received_linelength 98
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1544424884
-localerror
XX
1
[email protected]

142P Received: from mail by server.arshhost.net with local (Exim 4.91)
id 1gWFSg-00031T-BL
for [email protected]; Mon, 10 Dec 2018 10:24:38 +0330
046 X-Failed-Recipients: [email protected]
029 Auto-Submitted: auto-replied
063F From: Mail Delivery System <[email protected]>
021T To: [email protected]
099 Content-Type: multipart/report; report-type=delivery-status; boundary=1544424878-eximdsn-547791570
018 MIME-Version: 1.0
059 Subject: Mail delivery failed: returning message to sender
052I Message-Id: <[email protected]>
038 Date: Mon, 10 Dec 2018 10:24:38 +0330

The log says emails are sending from root, how can I stop them. Please help :)
 
Back
Top