Advertisement
Guest User

Untitled

a guest
Nov 11th, 2018
601
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.60 KB | None | 0 0
  1. ecpp_2.pl - Version: 20150612 - Michael Karr
  2.  
  3. magcon0223 is a USER.
  4. Single User Mode.
  5.  
  6. Email accounts per domain owned by magcon0223:
  7. erp.mag-consulting.net: 0
  8. mag-consulting.net: 656
  9.  
  10. Processing '/var/log/maillog'.
  11. Start time pre-dates log, but end time is present, checking anyways.
  12. Progress: 100%
  13. Processing '/var/log/maillog.1.gz'.
  14. Progress: 100%
  15. Processing '/var/log/exim_mainlog'.
  16. Start time pre-dates log, but end time is present, checking anyways.
  17. Progress: 100%
  18. Processing '/var/log/exim_mainlog.1.gz'.
  19. Progress: 100%
  20.  
  21. -------------------------
  22.  
  23. TOS/MAIL: gator2013: magcon0223
  24.  
  25.  
  26. Reference: ecpp
  27. Server: gator2013
  28. Domain: mag-consulting.net
  29. User: magcon0223
  30.  
  31. -------------------------
  32.  
  33. Mail Log Parsed from Nov 10, 2018 07:41:53 to Nov 11, 2018 07:41:53
  34.  
  35. User sent approximately 1,679 messages to 453 unique recipients.
  36. There were 16 bounces on 91 unique addresses, 0 percent of the emails sent.
  37.  
  38. Hourly mail volume for the entire account:
  39.  
  40. 2018-11-10
  41. ------------------------------
  42. Hour Volume Bounces %
  43. ------------------------------
  44. 8 31 0 0
  45. 9 48 0 0
  46. 10 33 0 0
  47. 11 12 0 0
  48. 12 8 0 0
  49. 13 93 0 0
  50. 14 31 0 0
  51. 15 70 2 2
  52. 16 72 1 1
  53. 17 31 0 0
  54. 18 23 0 0
  55. 19 12 1 8
  56. 22 15 1 6
  57. 23 14 0 0
  58.  
  59. 2018-11-11
  60. ------------------------------
  61. Hour Volume Bounces %
  62. ------------------------------
  63. 0 52 0 0
  64. 1 115 2 1
  65. 2 151 1 0
  66. 3 204 1 0
  67. 4 237 3 1
  68. 5 180 3 1
  69. 6 187 1 0
  70. 7 60 0 0
  71.  
  72.  
  73. The 'mag-consulting.net' account/domain was detected as sending large amounts of email.
  74. The account/domain sent 1,380 emails to 382 unique recipients. Displaying hourly mail:
  75.  
  76. 2018-11-10
  77. --------------
  78. Hour Volume
  79. --------------
  80. 8 31
  81. 9 48
  82. 10 33
  83. 11 1
  84. 12 8
  85. 13 92
  86. 14 30
  87. 15 69
  88. 16 72
  89. 17 31
  90. 18 20
  91. 19 10
  92. 22 15
  93. 23 13
  94.  
  95. 2018-11-11
  96. --------------
  97. Hour Volume
  98. --------------
  99. 0 51
  100. 1 102
  101. 2 130
  102. 3 118
  103. 4 204
  104. 5 108
  105. 6 152
  106. 7 42
  107.  
  108. Email addresses sent from:
  109. --------------------------
  110. amr.abdelraheem@mag-consulting.net: 114
  111. ahmed.abdelhakiem@mag-consulting.net: 113
  112. michael.gamal@mag-consulting.net: 113
  113. mohamed.ahmed.saad@mag-consulting.net: 82
  114. Hazem.elsayed@mag-consulting.net: 69
  115. Mina.Jouseph.Soliaman@mag-consulting.net: 67
  116. menya_office@mag-consulting.net: 67
  117. basnty.edwar@mag-consulting.net: 62
  118. haitham.mohamed.ahmed@mag-consulting.net: 61
  119. Wilfried.Ndjie@mag-consulting.net: 61
  120. osama.hassan.ali@mag-consulting.net: 53
  121. maged.bekheit@mag-consulting.net: 47
  122. mabdelhafez@mag-consulting.net: 40
  123. mostafa.abdel-hakim@mag-consulting.net: 38
  124. ahmed.zekri@mag-consulting.net: 37
  125.  
  126. There were 56 additional sender addresses trimmed.
  127.  
  128. Logins used to send mail:
  129. -------------------------
  130. A=dovecot_login:michael.gamal@mag-consulting.net: 113
  131. A=dovecot_login:ahmed.abdelhakiem@mag-consulting.net: 113
  132. H=(...) [105.201.129.140]: 81
  133. A=dovecot_login:hazem.elsayed@mag-consulting.net: 69
  134. H=(...) [156.202.136.206]: 68
  135. A=dovecot_login:menya_office@mag-consulting.net: 67
  136. A=dovecot_login:mina.jouseph.soliaman@mag-consulting.net: 67
  137. A=dovecot_login:basnty.edwar@mag-consulting.net: 62
  138. A=dovecot_login:wilfried.ndjie@mag-consulting.net: 61
  139. A=dovecot_login:haitham.mohamed.ahmed@mag-consulting.net: 61
  140. A=dovecot_login:osama.hassan.ali@mag-consulting.net: 53
  141. A=dovecot_login:mabdelhafez@mag-consulting.net: 40
  142. A=dovecot_login:mostafa.abdel-hakim@mag-consulting.net: 38
  143. A=dovecot_login:sherif.sabra@mag-consulting.net: 37
  144. A=dovecot_login:ahmed.zekri@mag-consulting.net: 37
  145.  
  146. There were 64 additional logins trimmed.
  147.  
  148. Current working directories:
  149. ----------------------------
  150. /home3/magcon0223: 33
  151.  
  152. Random recipient addresses:
  153. ---------------------------
  154. heshamm.nabi@huawei.com
  155. Ahmed.Mahdi@logistica.com.eg
  156. amr.h@torjoman.co
  157. martin.nabil_georges@NOKIA.COM
  158. mina.rox@mag-consulting.net
  159. assuit.fsl@huawei.com
  160. gbetkom@outlook.fr
  161. ahmed.zazaa@orange.com
  162. mohamed.ahmed.sayed@mag-consulting.net
  163. ahmed.zekri@mag-consulting.net
  164.  
  165. Top recipients:
  166. ---------------
  167. ossama.gebriel@huawei.com: 51
  168. sayed.ismail.oada@huawei.com: 48
  169. mohamed.aboud.abdallah1@huawei.com: 38
  170. simon.tharwat@mag-consulting.net: 31
  171. paulan.ghali2@huawei.com: 29
  172. ahmed.amer@mag-consulting.net: 22
  173. m.gomaa@huawei.com: 22
  174. maged.bekheit@mag-consulting.net: 22
  175. haitham.mohamed.ahmed@mag-consulting.net: 21
  176. ahmed.soultan@mag-consulting.net: 21
  177.  
  178. Top subjects:
  179. -------------
  180. T="RE: Function Check Report [MS-MARY-GIRGUIS-8504UP] (luxour ) SRAN Site" : 56
  181. T="Out of office alert" : 33
  182. T="RE: PG Photos Urgent Required" : 28
  183. T="RE: Design FDT 08" : 26
  184. T="RE: Pending overhauled gen" : 24
  185. T="RE: \330\247\331\204\330\255\330\250\331\204 \331\210\330\247\331\204\330\250\331\203\330\247\330\261\331\207 \331\210\330\247\331\204\331\205\331\206\330\270\330\247\330\261" : 23
  186. T="RE: PG-PM {Oil Change Tracker }" : 23
  187. T="SU Chronic Problems In Warranty ( Alkan ) 10/11/2018." : 21
  188. T="RE: [upper-3g-npo] Automated Daily Report" : 21
  189. T="SU Chronic Problems In Warranty (Power Tech)." : 21
  190.  
  191. Total number of discrete subjects: 277
  192.  
  193. Selected email samples:
  194. -----------------------
  195.  
  196. First 5 Entries:
  197.  
  198. 2018-11-10 08:08:11 1gLTsN-002XoW-BL <= mohamed.ibrahim@mag-consulting.net H=(maccaPC) [105.200.213.210]:9681 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1:ECDHE-RSA-AES256-SHA:256 CV=no A=dovecot_login:mohamed.ibrahim@mag-consulting.net S=5947358 id=064801d47952$21639300$642ab900$@mag-consulting.net T="Achievements_Week_1_November" from <mohamed.ibrahim@mag-consulting.net> for y.kamal@ecotelholding.com
  199. 2018-11-10 08:10:48 1gLTwt-002aOy-4h <= Sherif.Sabra@mag-consulting.net H=(DESKTOP5U0DQPV) [197.49.207.146]:49823 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:sherif.sabra@mag-consulting.net S=948814 id=000201d478ff$0fa719f0$2ef54dd0$@mag-consulting.net T="RE: SItes not Report alarm power in Gerga // Support" from <Sherif.Sabra@mag-consulting.net> for luxor1@huawei.com m.gomaa@huawei.com mohamed.aboud.abdallah1@huawei.com ossama.gebriel@huawei.com
  200. 2018-11-10 08:11:44 1gLTz8-002bvx-E1 <= Sherif.Sabra@mag-consulting.net H=(DESKTOP5U0DQPV) [197.49.207.146]:49835 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:sherif.sabra@mag-consulting.net S=296990 id=000901d478ff$627f4ad0$277de070$@mag-consulting.net T="RE: FM Template for physical change" from <Sherif.Sabra@mag-consulting.net> for ahmed.bahaa@mag-consulting.net luxor1@huawei.com medhat.abd-elrazek@mag-consulting.net mohamed.aboud.abdallah1@huawei.com Mohamed.Ashour@mag-consulting.net ... 2 additional email addresses removed.
  201. 2018-11-10 08:15:27 1gLU2h-002dw1-4S <= ahmad.adel.maamon@mag-consulting.net H=(AhmedAdelPC) [105.200.108.79]:62527 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:AES128-SHA256:128 CV=no A=dovecot_login:ahmad.adel.maamon@mag-consulting.net S=426311 id=004e01d478ff$cf165d50$6d4317f0$@mag-consulting.net T="FW: Daily Low TCH progress" from <ahmad.adel.maamon@mag-consulting.net> for ahmad.adel.maamon@mag-consulting.net ahmed.adel586@hotmail.com Ahmed.sayed.mohamed@mag-consulting.net amramin202020@gmail.com Mahmoud.abdelkhalek@mag-consulting.net ... 2 additional email addresses removed.
  202. 2018-11-10 08:15:32 1gLU2q-002dw1-1p <= ahmad.adel.maamon@mag-consulting.net H=(AhmedAdelPC) [105.200.108.79]:62527 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:AES128-SHA256:128 CV=no A=dovecot_login:ahmad.adel.maamon@mag-consulting.net S=210221 id=005401d478ff$d4615850$7d2408f0$@mag-consulting.net T="FW: Daily Low TCH progress" from <ahmad.adel.maamon@mag-consulting.net> for Mina.Jouseph.Soliaman@mag-consulting.net
  203.  
  204. Last 5 Entries:
  205.  
  206. 2018-11-11 07:28:20 1gLpml-0048s5-6F <= Ahmed.mohamed.farid@mag-consulting.net H=(tal3t) [156.186.189.51]:49626 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:AES128-SHA256:128 CV=no A=dovecot_login:ahmed.mohamed.farid@mag-consulting.net S=10824 T="RE: NU_SWF_5164 SECURING" from <Ahmed.mohamed.farid@mag-consulting.net> for Ahmed.mohamed.farid@mag-consulting.net
  207. 2018-11-11 07:35:44 1gLptq-004DP5-Uv <= ahmed.elzoghby@mag-consulting.net H=([192.168.63.54]) [41.159.134.221]:49394 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:ahmed.elzoghby@mag-consulting.net S=8671244 id=C41542E9-2573-4568-B3EB-4CD19124593E@mag-consulting.net T="FW: Huawei Certification Study and Examination Guideline" from <ahmed.elzoghby@mag-consulting.net> for haitham.waheed@mag-consulting.net mostafa.abdel-hakim@mag-consulting.net
  208. 2018-11-11 07:36:04 1gLpu7-004DYJ-V0 <= mostafa.abdel-hakim@mag-consulting.net H=(DESKTOPK2GG275) [41.83.32.159]:53062 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:mostafa.abdel-hakim@mag-consulting.net S=676868 id=002b01d479c3$41fe1060$c5fa3120$@mag-consulting.net T="RE: ADIE Fiber Maintenance BOQ, need pretender b4 11-Oct" from <mostafa.abdel-hakim@mag-consulting.net> for ahmed.elzoghby@mag-consulting.net chengyubing@huawei.com chenhaifeng.chen@huawei.com duanzhilong@huawei.com haitham.waheed@mag-consulting.net ... 3 additional email addresses removed.
  209. 2018-11-11 07:36:33 1gLpui-004DP5-V5 <= ahmed.elzoghby@mag-consulting.net H=([192.168.63.54]) [41.159.134.221]:49394 I=[50.87.144.13]:465 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:ahmed.elzoghby@mag-consulting.net S=38112 id=C734DAC0-8144-4B20-B000-7330148F8017@mag-consulting.net T="Re: Excel Travel" from <ahmed.elzoghby@mag-consulting.net> for bishoy.sedra@mag-consulting.net ramy.atef@mag-consulting.net mostafa.abdel-hakim@mag-consulting.net peter.shokry@mag-consulting.net
  210. 2018-11-11 07:37:08 1gLpum-004DyP-36 <= ahmed.hamed@mag-consulting.net H=(DESKTOPS0IHTHU) [135.238.155.249]:23296 I=[50.87.144.13]:465 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=410812 id=00b101d479c3$92e14f10$b8a3ed30$@mag-consulting.net T="RE: SG-BALYANA-3 (C1_4152UP_PH18) 2G & 3G CWO" from <ahmed.hamed@mag-consulting.net> for aanis.ext@orange.com ahabdelkhalek.ext@orange.com ahmed.geneidy@orange.com amr.elrakeeb@orange.com ayman.garhy@orange.com ... 10 additional email addresses removed.
  211.  
  212. Emails currently in queue:
  213. --------------------------
  214. User: 0, Total: 24
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement