Mails that do not make sense

[pdrupp]

Hi, i have 2 Cloudron Servers and i recently started getting mails from each that do not make sense.

The first one is sending me e-mails to inform that Woocommerce plugin could not be updated. This is coming from a Wordpress instance i just recently deleted. The sender email is the one i used with this instance. How is this possible?
Here's the mail (translated from german to english):

"Hello! Some plugins on your website https://redacted could not be updated.

Please check your website now. It is possible that everything is working fine. If updates are available, you should update them.

The following plugins failed to update. If there was a serious error during the update, the previously installed version has been restored.

• WooCommerce (from version 9.4.3 to 9.4.5): https://wordpress.org/plugins/woocommerce/

To manage plugins on your website, visit the plugins page: https://redacted/wp-admin/plugins.php

If you encounter any errors or need assistance, the WordPress.org support forum with its volunteer helpers is available to you:
https://wordpress.org/support/.

The WordPress Team"

This happens 2-3 times a day.

---

The second server is telling me that the backup failed as the bucket does not exist. I recently changed the S3 Provider and the backups are running fine. The time i receive the failed backup mails, gives me a hint that the mail is related to my old backup settings before the S3 provider change. How is this possible?

Here's the mail i receive:

"Dear redacted Admin,

Cloudron failed to create a backup. Please see the logs at https://redacted /logs.html?taskId=6115 for more information.

---

Backup endpoint is not active: Error listing objects. code: NoSuchBucket message: The specified bucket does not exist HTTP: 404

---

Powered by https://cloudron.io

Don't want such mails? Change your notification preferences at https://redacted cloudron/#/notifications

Sent at: Wed, 04 Mar 2026 11:00:02 GMT"

Clicking on the log-link, Cloudron opens the log viewer with the following message: "Mar 04 16:25:10 Logs unavailable. Maybe the logs were logrotated."

This happens multiple times a day.

[joseph]

The first email about outdated plugins is from WordPress. The second email about backup is from Cloudron.

Is it possible that you have an old server still running? If you go to Email -> Eventlog, do you see these emails being sent out? Are you using a email relay which might be retrying and succeeding only now?

[jdaviescoates]

@pdrupp said:

The first one is sending me e-mails to inform that Woocommerce plugin could not be updated. This is coming from a Wordpress instance i just recently deleted. The sender email is the one i used with this instance. How is this possible?
Here's the mail (translated from german to english):

"Hello! Some plugins on your website https://redacted could not be updated.

Please check your website now. It is possible that everything is working fine. If updates are available, you should update them.

The following plugins failed to update. If there was a serious error during the update, the previously installed version has been restored.

WooCommerce (from version 9.4.3 to 9.4.5): https://wordpress.org/plugins/woocommerce/

To manage plugins on your website, visit the plugins page: https://redacted/wp-admin/plugins.php

If you encounter any errors or need assistance, the WordPress.org support forum with its volunteer helpers is available to you:
https://wordpress.org/support/ .

The WordPress Team"

This happens 2-3 times a day.

Odd. But that doesn't sound like an email that Cloudron would ever send. I don't think Cloudron doesn't ever messages about WordPress plugins.

Have you checked the email headers to see where these email have actually come from etc?

[humptydumpty]

I'm used to seeing this type of emails from Wordfence, but in your case it seems suspicious so check the headers as @jdaviescoates said.

@pdrupp said:

Clicking on the log-link, Cloudron opens the log viewer with the following message: "Mar 04 16:25:10 Logs unavailable. Maybe the logs were logrotated."

I really hope the log link you clicked is from your dashboard and not the one in the email

[pdrupp]

@jdaviescoates thank you for your reply! I checked the headers and i all checks out, it does come from my cloudron server and uses the address i assigned to the app (wordpress@mydomain.com)
As i have a wordpress instance running (that is live) on the other server (where the failed-backup mails are coming from), i can confirm that wordpress is indeed sending mails to inform about updated plugins. So it is the app sending the info via cloudron's mail feature. Which makes it a weird situation that an uninstalled app is still sending mails lol

[pdrupp]

@humptydumpty hi! i checked the headers and everything checks out! To clarify the "clicking the log-link" situation, i actually manually typed /logs.html?taskId=6115 into my browser. But the link in the mail still seems safe after further checking

[jdaviescoates]

@pdrupp said:

Which makes it a weird situation that an uninstalled app is still sending mails lol

That does seem weird/ not possible. Perhaps for some reason the the mail couldn't be sent and got caught in a queue and then only went out afterwards.

Might be an idea to email support@cloudron.io (I think that's the right address) to ask them to have a closer look.

[joseph]

The first email about outdated plugins is from WordPress. The second email about backup is from Cloudron.

Is it possible that you have an old server still running? If you go to Email -> Eventlog, do you see these emails being sent out? Are you using a email relay which might be retrying and succeeding only now?

[pdrupp]

@joseph omg! thank you so much for pointing in the right direction. i did upgrade our servers on Netcup a while ago, i kept the old ones in case i needed any data, turns out, the VMs had an autostart set and were running again.... Thank you! Case solved (i hope)