How to find SMTP Auth user names to find out bulk spam user
|This article applies to the following ZCS versions.|
How to find SMTP Auth usernames to find a bulk spam user
How to find SMTP Auth usernames to find a bulk spam user.
Use the following command line to get the user listing of who authenticated on the SMTP port to send an email:
cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n 1 Auser@domain.com 3 Buser@domain.com 4 Cuser@domain.com 5 Duser@domain.com 36 SPAMMER@domain.com
- For a detailed explanation about the Zimbra Logs system, please read the next Wiki article.