HEX
Server: Apache
System: Linux 65-254-81-60.cprapid.com 4.18.0-477.27.2.el8_8.x86_64 #1 SMP Fri Sep 29 08:21:01 EDT 2023 x86_64
User: roshanchandy (1003)
PHP: 8.4.12
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //var/www/html/exim_email_reports.txt
=== Current mail queue ===
4

=== Sorted list of email senders from the queue ===
      4 yeshuvabible@65-254-81-60.cprapid.com

=== Location from where spam scripts originate ===
      1 cwd=/home/yeshuvabible/public_html/wp-admin
      2 cwd=/home/roshanchandy/public_html/consultants/wp-content/plugins/wp-programme-gastrointestinal
      3 cwd=/home/yeshuvabible/public_html/djyministries.org/wp-admin
     11 cwd=/home/yeshuvabible/public_html/t2india.co.in/wp-admin
     15 cwd=/home/roshanchandy/public_html/dubai91.com
     20 cwd=/home/cryptokademy/public_html/algogrow.com
   3093 cwd=/home/yeshuvabible/public_html

=== Checking if mail sent through PHP script ===
/var/spool/exim/input/0/1v0dJ0-00000007GYN-3GMS-H:072  X-PHP-Script: yeshuvabiblecollege.online/wp-login.php for 91.92.240.238
/var/spool/exim/input/0/1v0tx0-00000007ktV-13Xq-H:072  X-PHP-Script: yeshuvabiblecollege.online/wp-login.php for 91.92.240.238
/var/spool/exim/input/T/1v07IT-00000005qTV-0Bn7-H:072  X-PHP-Script: yeshuvabiblecollege.online/wp-login.php for 91.92.240.238
/var/spool/exim/input/U/1uzWVU-00000004QrM-1TfY-H:072  X-PHP-Script: yeshuvabiblecollege.online/wp-login.php for 91.92.240.238

=== Showing top domains using mail server ===

Exim statistics from 2025-09-21 03:28:08 to 2025-09-23 02:13:18

Grand total summary
-------------------
                                                                  At least one address
  TOTAL               Volume   Messages Addresses     Hosts      Delayed       Failed
  Received              12MB       6575                  11     369  5.6%   3154 48.0%
  Delivered           8955KB       3419      3419         1
  Rejects                            95                   3
  Temp Rejects                       69                   2

Deliveries by transport
-----------------------
                      Volume    Messages
  dovecot_delivery    8536KB        3387
  dovecot_virtual_delivery   419KB          32

Messages received per hour (each dot is 15 messages)
----------------------------------------------------

00-01    153 ..........
01-02     38 ..
02-03     34 ..
03-04    452 ..............................
04-05    431 ............................
05-06    404 ..........................
06-07    417 ...........................
07-08    194 ............
08-09    388 .........................
09-10     23 .
10-11    397 ..........................
11-12     57 ...
12-13    745 .................................................
13-14     70 ....
14-15    474 ...............................
15-16    378 .........................
16-17    164 ..........
17-18     91 ......
18-19    419 ...........................
19-20    395 ..........................
20-21     47 ...
21-22     30 ..
22-23     36 ..
23-24    738 .................................................

Deliveries per hour (each dot is 7 deliveries)
----------------------------------------------

00-01     75 ..........
01-02     20 ..
02-03     17 ..
03-04    226 ................................
04-05    215 ..............................
05-06    201 ............................
06-07    205 .............................
07-08    178 .........................
08-09    255 ....................................
09-10     12 .
10-11    199 ............................
11-12     28 ....
12-13    371 .....................................................
13-14     34 ....
14-15    239 ..................................
15-16    191 ...........................
16-17     79 ...........
17-18     44 ......
18-19    211 ..............................
19-20    197 ............................
20-21     22 ...
21-22     15 ..
22-23     16 ..
23-24    369 ....................................................

Time spent on the queue: all messages
-------------------------------------

Under   1m     6381  94.2%   94.2%
        5m        5   0.1%   94.3%
       15m       62   0.9%   95.2%
       30m        1   0.0%   95.2%
        1h        1   0.0%   95.2%
        3h        8   0.1%   95.4%
        6h       15   0.2%   95.6%
       12h       44   0.6%   96.2%
        1d       50   0.7%   97.0%
Over    1d      205   3.0%  100.0%

Time spent on the queue: messages with at least one remote delivery
-------------------------------------------------------------------


Top 50 mail rejection reasons by message count
----------------------------------------------
  Messages   Mail rejection reason
        33   Dropped: too many syntax or protocol errors
        27   Dropped: too many unrecognized commands
        20   Rejected RCPT: root cannot accept local mail deliveries
         6   Rejected RCPT: SMTP AUTH is required for message submission on port 587
         4   Rejected RCPT: Sender verify failed
         3   Rejected RCPT: SMTP AUTH is required for message submission on port 465
         2   Rejected MAIL: Access denied - Invalid HELO name (See RFC2821 4.1.3)

Top 50 mail temporary rejection reasons by message count
--------------------------------------------------------
  Messages   Mail temporary rejection reason
        24   Temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.9/1h max:1.2)"
        23   Temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.8/1h max:1.2)"
        20   Temporarily rejected connection in "connect" ACL: "Host is ratelimited (1.7/1h max:1.2)"
         2   Temporarily rejected connection in "connect" ACL: "Host is ratelimited (2.0/1h max:1.2)"

Top 50 sending hosts by message count
-------------------------------------
  Messages      Bytes    Average   Sending host
      6541       11MB       1763   local
        14      190KB       14KB   m43-11.mailgun.net
        10      376KB       38KB   (65-254-81-60.cprapid.com)
         2       27KB       14KB   m42-242.mailgun.net
         2       9969       4984   srv970512.hstgr.cloud
         1       77KB       77KB   a107-9.smtp-out.eu-west-1.amazonses.com
         1       76KB       76KB   a107-13.smtp-out.eu-west-1.amazonses.com
         1       9710       9710   (amaaze.net)
         1       5796       5796   mail-pj1-f47.google.com
         1       5537       5537   mail-yx1-f41.google.com
         1        645        645   ([192.168.0.4])

Top 50 sending hosts by volume
------------------------------
  Messages      Bytes    Average   Sending host
      6541       11MB       1763   local
        10      376KB       38KB   (65-254-81-60.cprapid.com)
        14      190KB       14KB   m43-11.mailgun.net
         1       77KB       77KB   a107-9.smtp-out.eu-west-1.amazonses.com
         1       76KB       76KB   a107-13.smtp-out.eu-west-1.amazonses.com
         2       27KB       14KB   m42-242.mailgun.net
         2       9969       4984   srv970512.hstgr.cloud
         1       9710       9710   (amaaze.net)
         1       5796       5796   mail-pj1-f47.google.com
         1       5537       5537   mail-yx1-f41.google.com
         1        645        645   ([192.168.0.4])

Top 50 local senders by message count
-------------------------------------
  Messages      Bytes    Average   Local sender
      3396     8554KB       2579   mailnull
      3108     3013KB        992   yeshuvabible
        20       31KB       1587   cryptokademy
        17       96KB       5782   roshanchandy

Top 50 local senders by volume
------------------------------
  Messages      Bytes    Average   Local sender
      3396     8554KB       2579   mailnull
      3108     3013KB        992   yeshuvabible
        17       96KB       5782   roshanchandy
        20       31KB       1587   cryptokademy

Top 50 host destinations by message count
-----------------------------------------
  Messages  Addresses      Bytes    Average   Host destination
      3419       3419     8955KB       2682   local

Top 50 host destinations by volume
----------------------------------
  Messages  Addresses      Bytes    Average   Host destination
      3419       3419     8955KB       2682   local

Top 50 local destinations by message count
------------------------------------------
  Messages  Addresses      Bytes    Average   Local destination
      3348       3348     8343KB       2551   yeshuvabible
        30         30      266KB       9079   trade
        20         20       61KB       3123   cryptokademy
        17         17      122KB       7348   roshanchandy
         2          2      153KB       77KB   admin
         1          1       4987       4987   yeshuvabible+spam (yeshuvabible@65-254-81-60.cprapid.com)
         1          1       4982       4982   cryptokademy+spam (cryptokademy@65-254-81-60.cprapid.com)

Top 50 local destinations by volume
-----------------------------------
  Messages  Addresses      Bytes    Average   Local destination
      3348       3348     8343KB       2551   yeshuvabible
        30         30      266KB       9079   trade
         2          2      153KB       77KB   admin
        17         17      122KB       7348   roshanchandy
        20         20       61KB       3123   cryptokademy
         1          1       4987       4987   yeshuvabible+spam (yeshuvabible@65-254-81-60.cprapid.com)
         1          1       4982       4982   cryptokademy+spam (cryptokademy@65-254-81-60.cprapid.com)

Top 50 rejected ips by message count
------------------------------------
  Messages   Rejected ip
        93   local
         1   [104.152.52.131]
         1   [104.152.52.203]

Top 50 temporarily rejected ips by message count
------------------------------------------------
  Messages   Temporarily rejected ip
        65   local
         4   [3.134.148.59]


=== Showing home directory of user sending mails ===

=== Showing nobody spamming in the server ===

=== Summary of mails in the mailqueue ===

Count  Volume  Oldest  Newest  Domain
-----  ------  ------  ------  ------

    1    1015     55h     55h  bakkensen.dk
    1    1024      3h      3h  leadtrade.co.uk
    1    1024     20h     20h  brown917.wanadoo.co.uk
    1    1024      4d      4d  gmial.com
---------------------------------------------------------------
    4    4087      4d      3h  TOTAL

=== IPs connected on port 25 (check for >10 connections) ===
      1 
      1 0.0.0.0
      1 177.20.166.160
      1 177.20.166.180
      1 177.20.166.238
      1 177.20.166.95
      1 177.20.169.28
      1 177.20.172.29
      1 177.53.3.85
      1 177.53.4.18
      1 177.53.4.72
      1 189.45.232.118
      1 189.45.232.176
      1 189.45.232.195
      1 189.45.232.69