Finding the SPAM (cPanel)

Finding which directory sending SPAMs

Run below command to identify which directory that have been sending out the most emails/messages.

So we can find is there any scripts live within :

grep cwd /var/log/exim_mainlog|grep -v /var/spool|awk -F"cwd=" '{print $2}'|awk '{print $1}'|sort|uniq -c|sort -n