Lately I see a strange message volume in the daily admin report.
90% of messages is delivered to the internal admin@server account.
The admin page 7071 does not reveal any queue or what. I don't see these messages at all.
How can I establish if this is not abuse or something
How can I see what these messages are?
Open source 8.6.0 GA1169
Mail received via POP3 fetch
Imap access to my server and https, no smtp of ssh access from outside
1 active mailbox and admin box