CSF Firewall RELAY Alert / RELAY, Remote IP
Blacklisted SMTP IP addresses


csf RELAY Alert / RELAY, Remote IP
Undelivered Mail Returned to Sender
<> Trackdelivery

I am getting hundreds of these errors in my inbox everyday.

Time: Thu Feb 19 23:09:28 2015 -0500
Type: RELAY, Remote IP - (US/United States/mx55.h.outbound.createsend.com)
Count: 101 emails relayed
Blocked: No

Sample of the first 10 emails:

2015-02-19 23:02:56 1YOenn-0002bF-RJ <= [email protected] H=mx55.h.outbound.createsend.com []:35593 P=esmtp S=50023 id=[email protected] T="Just Car News: Reel Deal Winners, Latest from Mighty Car Mods, ADGP and more" for [email protected]

do anyone knows what is it?

This is not outgoing spam being relayed through the VPS. This is incoming spam being received by the VPS which caused LFD to trigger a RELAY alert due to the remote IP address '' sending to over 100 recipients within an hour's time.

bulk emails

block ip + server name
csf cphulk


You can use the Exim Blacklist to refuse all SMTP traffic from an IP
WHM >> Service Configuration >> Exim Configuration Manager
Basic Editor -Access Lists
Blacklisted SMTP IP addresses
(IP addresses from which SMTP connections are dropped unconditionally)


WHM/cPanel SMTP Relay / Open mail relay