Spam

wafaa

• April 04, 2014 12:25

Hello, I have several customers on a shared server and I found that the server address ip is blocked at spamhaus. Is there any way to know the account that sent spam and causing the blocking the IP address ?

• 

  cPanelPeter cPanel Staff

  • April 06, 2014 15:36

  Hello, You need to review the /var/log/exim_mainlog file. Also running the following command may help to identify the spammer or compromised account. awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
  This command will list all accounts and number of messages sent.

  0

Please sign in to leave a comment.