(10-05-2017, 06:34 PM)Me.B Wrote: Check the websites for any new files uploaded in last period where the activity started you will see quicky the culpiit
websites were checked and no suspicious activity there. I updated everything that needed to be updated.
This morning i received notification that the ip address was removed from some of the blacklists since we are no longer spamming.
Besides the updates made to plugins in wordpress sites, the only thing i made was to flush the mail queue, so i have no idea what was the cause of the problem.