How to find SMTP Auth user names to find out bulk spam user
- This article is a Work in Progress, and may be unfinished or missing sections.
Article Information |
---|
This article applies to the following ZCS versions. |
How to find SMTP Auth user names to find out bulk spam user
Purpose
How to find SMTP Auth user names to find out bulk spam user
Resolution
Use the following command line to get the user listing who authenticated on SMTP port to send an email:
cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n 1 Auser@domain.com 3 Buser@domain.com 4 Cuser@domain.com 5 Duser@domain.com 36 SPAMMER@domain.com
Additional Content
- For a detailed explanations about the Zimbra Logs system, please read the next Wiki article.