Find Email Sources

Find email from a cpanel user

echo -n "List top email senders for which cp user: "; read user; sudo cat /var/log/exim_mainlog| LC_ALL=C grep -E "<= [^@<>]*@($(sudo grep DNS /var/cpanel/users/$user | awk -F'=' '{printf $2 "|"} END {printf "fencepostfu"}'))"|awk '{print $6}'|sort|uniq -c|sort -n

Find email sources from all users

sudo cat /var/log/exim_mainlog| LC_ALL=C grep -E "<= [^@<>]*@"|awk '{print $6}'|sort|uniq -c|sort -n