Someone has been sending spam via my email server for days, turns out they found out my password, after changing it, it stopped.