How to find SMTP Auth user names to find out bulk spam user

How to find SMTP Auth usernames to find a bulk spam user

   KB 21835        Last updated on 2015-07-11  




0.00
(0 votes)

Purpose

How to find SMTP Auth usernames to find a bulk spam user.

Resolution

Use the following command line to get the user listing of who authenticated on the SMTP port to send an email:

cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n
 1 Auser@domain.com
 3 Buser@domain.com
 4 Cuser@domain.com
 5 Duser@domain.com
 36 SPAMMER@domain.com

Additional Content


Verified Against: Zimbra Collaboration 8.6, 8.5, 8.0 Date Created: 04/15/2015
Article ID: https://wiki.zimbra.com/index.php?title=How_to_find_SMTP_Auth_user_names_to_find_out_bulk_spam_user Date Modified: 2015-07-11



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by SME1 SME2 Jenny Jarrard Last edit by Jorge de la Cruz
Jump to: navigation, search