Exim_mainlog - e-mail account breached

Hi, I have noticed strange behaviour reading my exim_mainlog, but not sure what is actually happening. Mail queue is getting full, when I investigated case, I have change e-mail password for suspicious account, and problem is still presented. I have mail queue full of spam messages, like that:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  cubanaballer_21@yahoo.com
    Domain myuserdomain.com has exceeded the max defers and failures per hour (5/5 (17%)) allowed. Message discarded.

------ This is a copy of the message, including all the headers. ------

Return-path: <mailto@suspiciousdomain.org>
Received: from [74.208.64.163] (port=51089)
	by myhostname.example.com with esmtpa (Exim 4.84)
	(envelope-from <<mailto@suspiciousdomain.org>>)
	id 1YBJnJ-0006h0-6n
	for cubanaballer_21@yahoo.com; Wed, 14 Jan 2015 09:59:17 +0100
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Settlement   
To: cubanaballer_21@yahoo.com
From: "IMF" <<mailto@suspiciousdomain.org>>
Date: Wed, 14 Jan 2015 02:58:45 -0600
Reply-To: ept19012@r7.com

And then a lot of similar logs:

2015-01-14 09:57:50 1YBJlu-0006h0-Lz <= mailto@suspiciousdomain.org H=([74.208.64.163]) [74.208.64.163]:51089 P=esmtpa A=dovecot_login:myuser@myuserdomain.com S=2057 T="Settlement" for cthoj@yahoo.com

What is concerning me, I am not sure if that mailbox is brached, and sending a lot of spam to random e-mails, how to find out what is actually happening?

Exim_mainlog - e-mail account breached

Comments

Didn't find what you were looking for?