How to find the IP address or domain name that sending bulk amount of emails

[pbabu6001]

Sometimes, we receive bulk amount of emails from external domains. So, how can I identify which IP address(es) or domain/sender sending these bulk amount of emails.

I tried the command as "tail mail_logs" and it is not clear. How make it clear?

I opened centralized management server and clicked on Monitor-> Incoming Mail. Does this helps to find bulk sender and how much time does the SMA take to take the reporting from all the ESAs?

Is there any best possible solution considering time and accurate results?

Many thanks.

[Libin Varghese · Accepted solution]

Bulk emails can be tracked under Monitor -> High Volume Mail.

It displays the top sending email address and top subject received by the appliance.

Once you narrow it down to that you can then lookup message tracking details basis of these details.

Regards,

Libin Varghese