Receiving/Sending Spam emails from WordPress in my email??

  • Unknown's avatar
    n9hxpb · Member ·

    Everyday I get about 15 un-readable emails, but they all say the same thing with different email address in them. What pops up is an email that says:
    Mail Delivery Subsystem
    Delivery incomplete
    There was a temporary problem delivering your message to (email visible only to moderators and staff). Gmail will retry for 45 more hours. You’ll be notified if the delivery fails permanently.
    LEARN MORE
    The response was:
    The user you are trying to contact is receiving mail at a rate that prevents additional messages from being delivered. Please resend your message at a later time. If the user is able to receive mail at that time, your message will be delivered. For more information, please visit https://support.google.com/mail/?p=ReceivingRate p27-v6sor9760117qvf.2 – gsmtp

    Final-Recipient: rfc822; (email visible only to moderators and staff)
    Action: delayed
    Status: 4.0.0
    Diagnostic-Code: smtp; The user you are trying to contact is receiving mail at a rate that prevents additional messages from being delivered. Please resend your message at a later time. If the user is able to receive mail at that time, your message will be delivered. For more information, please visit https://support.google.com/mail/?p=ReceivingRate p27-v6sor9760117qvf.2 – gsmtp
    Last-Attempt-Date: Thu, 25 Oct 2018 10:58:36 -0700 (PDT)
    Will-Retry-Until: Sat, 27 Oct 2018 08:46:41 -0700 (PDT)

    And then when I look in my sent folder, I see that somehow there is a sent email that says:
    ‘Your username and password info’
    Username: (I hid this username just in case)

    To set your password, visit the following address:

    https://urbanologydesigns.com/wp-login.php

    I don’t know what to do!!

  • Unknown's avatar
    jessboctor · Member ·

    Hi N9hxpb!

    Beautiful site! However, since it appears to be self-hosted (meaning, not a WordPress.com site) you should probably check out the WordPress.org forums instead, as this forum is intended for WordPress.com users. However, for now, I will try and point you in the right direction.

    Unfortunately, it seems your site may have been infected with a virus which is causing the site to send out a ton of emails, either that, or someone is trying to gain access to your site by overloading the password reset functionality. I can’t quite tell.

    When looking through your page source code, there is one javascript link which sends up some red flags, mostly because it contains “//tidioelements.com/uploads/redirect-plugin/” which seems suspicious.

    I would start by installing the WordFence plugin on your site. It is a security plugin that will scan all your files and let you know if there is anything suspicious installed and direct you in what to delete, as well as help protect the site in the future. If you need further assistance, try the support forums at WordPress.org, as they are geared more towards self-hosted site owners like yourself.

  • The topic ‘Receiving/Sending Spam emails from WordPress in my email??’ is closed to new replies.