Reading Exim logs to figure out Local relay alert

[CraftyPanda]

Hi all,

So i keep getting local relay alerts for just one account on the server and im trying to figure out what on the account is causing it. I have the exim logs and i can see the entries for the events, but i don't really see how thats helping me identify the culprit of the emails. Here is one of the log entries.

My question is really where do i go from here in figuring out whats relaying all this email?

2014-10-19 03:30:04 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q
2014-10-19 03:30:04 Start queue run: pid=2753
2014-10-19 03:30:04 End queue run: pid=2753
2014-10-19 03:30:12 cwd=/etc/csf 2 args: /usr/sbin/exim -bpc
2014-10-19 03:31:02 cwd=/home/xAccountNamex 9 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root
2014-10-19 03:31:02 1XfgGs-0000oL-3E <= [email protected] U=xAccountNamex P=local S=851 T="Cron <[email protected]> /home/xAccountNamex /public_html/templates/atomic/1.sh" for hkjbn232


Any help would be really appreciated.
Andy

 

[CraftyPanda]

Sorted it thanks. Boom! Was right in front of me

 

[cPanelMichael]

Hello

I am happy to see you were able to determine the path based on the logs you provided (/home/xAccountNamex/public_html/templates/atomic/1.sh"). Thank you for updating us with the outcome.