The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam

Discussion in 'E-mail Discussions' started by wafaa, Apr 4, 2014.

  1. wafaa

    wafaa Well-Known Member

    Joined:
    May 14, 2013
    Messages:
    62
    Likes Received:
    1
    Trophy Points:
    8
    cPanel Access Level:
    Reseller Owner
    Hello,

    I have several customers on a shared server and I found that the server address ip is blocked at spamhaus. Is there any way to know the account that sent spam and causing the blocking the IP address ?
     
  2. cPanelPeter

    cPanelPeter Technical Analyst III
    Staff Member

    Joined:
    Sep 23, 2013
    Messages:
    569
    Likes Received:
    15
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You need to review the /var/log/exim_mainlog file. Also running the following command may help to identify the spammer or compromised account.

    Code:
    awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
    
    This command will list all accounts and number of messages sent.
     
Loading...

Share This Page