need your help. Yesterday we are being hit by spam; it seems coming from internal because the firewall showing me it's coming from internal IP address to external IP add.
Now the problem is the ESM showing huge numbers of connectors with 1 - 100 messages per connector. Up until now we have 55K messages in connector. I have meade a temp connector with a fake IP address so that I can redirect all the messages in 1 connector and delete them from there. But again the messages keeps growing like crazy.
I've scanned the machine with Our AV and find nothing.
Also I've keep deleting those messages with aqadmcli to delete all messages automatically; but the speed of the messages and deleting message are almost the same. I've disabled the outbound email and put the box out of the network.
Please advise..... really need a solution and help.
Currently my emails running on a backup link and thanks God, all of my stores are also on a different box.