How to find a bulk spam user
cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n 1 Auser@domain.com 3 Buser@domain.com 4 Cuser@domain.com 5 Duser@domain.com 36 SPAMMER@domain.com
Ref:
https://wiki.zimbra.com/wiki/How_to_find_SMTP_Auth_user_names_to_find_out_bulk_spam_user
Comments
Post a Comment