Skip to main content
Call us
Phone numbers and hours
Help Center

Explore our online help resources

Help

GoDaddy Help

Find SPAM senders in WHM

There are useful tools within WHM/cPanel to view recent emails sent from the server and also messages currently waiting to be sent in the outgoing email queue. To use these tools, look for Mail Delivery Reports and Mail Queue Manager within the Email section of WHM.

  1. Login to WHM.
  2. Search for the Email section using the search bar in the top left corner of WHM. Select Mail Delivery Reports, choose a date range and select Run Report.


  3. Once the report has processed, you can see the email delivered during the requested date range. Select the From Address header to sort the report and find a sender that may be sending unusual amounts of email.
  4. If mail is not being sent and is building up in the email queue, select the Mail Queue Manager in WHM's Email section. Select a date range and click Run Report.
  5. Once the report has processed, you can see the mail queue during the requested date range. Select the From Address header to sort the report and find a sender that may be sending unusual amounts of email.

Review your report

When reviewing these reports, look for a large amount of mail coming from a single sender, and take actions to stop that mail from being sent.

  • Excessive emails from a recognized email account on the server may indicate the password has been compromised. To combat this, update the password of the affected account to a strong, random password.
  • Excessive emails to a recognized forwarding account on the server may indicate that this forwarding account is being flooded with mail. This can cause the server to be blocked from sending any mail to the destination (like Gmail). We recommend removing any email forwarding accounts from the server as they can be easily abused.
  • Excessive emails from [cpanelusername]@[server.host.name] are being sent from a script within a particular cPanel account. This could be a misconfigured CMS or a malicious file.
  • Excessive emails from root@[server.host.name] are being sent from a root process on the server, such as alerts from WHM or CSF. Check the mail settings of any application you've installed and these areas of WHM to make sure the server is sending all notifications to valid email addresses:

    1. Basic WebHost Manager® Setup
    2. Edit System Mail Preferences
    3. Contact Manager
    4. Email All Resellers
    5. Email All Users

Related steps

More info

  • Our server experts can perform these steps for a fee. For more information about our Expert Services, please visit our Expert Service menu.


Community Related

toml3030's Avatar
delete all emails from one sender?

1 Replies

Last posted almost 5 years ago.

Companyman's Avatar
Domain and sender blocking not working.

3 Replies

Last posted over 2 years ago.

Hani_media's Avatar
Where can i find my WHM password?

1 Replies

Last posted about 3 years ago.

TalonPlayzRL's Avatar
Where do I find whm password

1 Replies

Last posted 4 months ago.

Don't see what you are looking for? Search the Community