in Basic All Posts ~ read.
Count Which Directory Sending Out Most Messages (CPanel)

Count Which Directory Sending Out Most Messages (CPanel)

Run below command to identify which directory that have been sending out the most emails/messages.

So we can find is there any scripts live within :

grep cwd /var/log/exim_mainlog|grep -v /var/spool|awk -F"cwd=" '{print $2}'|awk '{print $1}'|sort|uniq -c|sort -n
// reference //Initialize ghostHunter