How to find SMTP Auth user names to find out bulk spam user
How to find SMTP Auth usernames to find a bulk spam user
- This article is a Work in Progress, and may be unfinished or missing sections.
Purpose
How to find SMTP Auth usernames to find a bulk spam user.
Resolution
Use the following command line to get the user listing of who authenticated on the SMTP port to send an email:
cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n 1 Auser@domain.com 3 Buser@domain.com 4 Cuser@domain.com 5 Duser@domain.com 36 SPAMMER@domain.com
Additional Content
- For a detailed explanation about the Zimbra Logs system, please read the next Wiki article.