SOLVED One account transfered 50 Gb of data on IMAP in one month

[Otávio Serra]

Hi,

First of all, I need to know how can I find wich mail's account did this unusual IMAP's transfer. I can find this in one specific log for example?

Second, there are possible this problem is one bug caused by WHM/Exim or not?

Thanks

 

[Otávio Serra]

I found the solution to find the bandwidth one mail account use in one day using this command line:

cat /var/log/maillog | grep "[email protected]" | grep "imap" | grep "Logged out"

And I found the problem: one user was using some mail's accounts to transfer data with each other users instead of using one cloud drive such as google drive per example LOL.

Closed topic

 

[cPanelMichael]

Hello @Otávio Serra,

I'm glad to see you were able to determine the source of the usage. Thank you for sharing the outcome.

 

[LoadFactor]

A slightly better way to discover more bandwidth usage is this command:

cat /var/log/maillog | grep "[email protected]" | grep "bytes="

This will include results from other commands like a UID SEARCH. In my case just one of these accounted for a gigabyte of data.