- Free Edition
- Quick Links
- Highlights
- Exchange Online
- Exchange Online Management
- Exchange Online Reports
- Exchange Online Auditing
- Exchange Online Monitoring
- Shared Mailbox Management
- Mailbox Usage Reports
- Exchange Online Mailbox Auditing
- Shared Mailbox Reports
- Exchange Online Delegation
- Mailbox Size Reports
- Mail Traffic Reports
- Non-owner Mailbox Access Report
- Public Folder Reports
- OWA Reports
- Mailbox Content Reports
- Azure Active Directory
- Azure AD Management
- Azure AD Reports
- Azure AD Monitoring
- Azure AD Auditing
- User Management
- Contact Reports
- Security Group Reports
- License Reports
- Azure AD Delegation
- Microsoft 365 User Provisioning
- User Reports
- Distribution Group Reports
- Group Reports
- Inactive Exchange Users
- Azure AD User Auditing
- Azure AD Group Auditing
- Azure AD Logon Auditing
- Microsoft Teams
- OneDrive for Business
- SharePoint Online
- Security and compliance
- Other Features
- Related Products
- ADManager Plus Active Directory Management & Reporting
- ADAudit Plus Hybrid AD, cloud, and file auditing and security
- ADSelfService Plus Identity security with MFA, SSO, and SSPR
- Exchange Reporter Plus Exchange Server Auditing & Reporting
- M365 Security Plus Microsoft 365 Auditing and Alerting
- EventLog Analyzer Real-time Log Analysis & Reporting
- SharePoint Manager Plus SharePoint Reporting and Auditing
- DataSecurity Plus File server auditing & data discovery
- RecoveryManager Plus Enterprise backup and recovery tool
- AD360 Integrated Identity & Access Management
- Log360 (On-Premise | Cloud) Comprehensive SIEM and UEBA
- AD Free Tools Active Directory FREE Tools
Mailbox traffic reports help you analyze your organization's Microsoft 365 mailbox traffic with invaluable information such as the volume of spam entering and leaving your organization’s mailboxes, the users who send and receive the most mail, and the users who receive the most spam and malware.
This information helps you easily identify any mail activity anomalies, whether they originate from or are directed to a particular mailbox, which is a clear sign of malicious activity. This is rarely intentional—it is most often a spamware behind these anomalies. But using the data gathered from mailbox traffic reports, administrators can identify the issues, if any, before they disrupt the user.
With M365 Manager Plus, the complete Microsoft 365 solution, these reports can be scheduled to run at fixed intervals, emailed to administrators, and exported to CSV, XLSX (Microsoft Excel), PDF (Adobe Acrobat), or HTML formats.
Reports in this category include:
- Mail traffic summary
- Email activity by user
- Top sender
- Top recipient
- Top spam recipients
- Top malware recipients
- Detailed mail traffic
- Spam traffic summary
- Domain traffic summary
- Malware detections
- Spam detections
- DLP policy matches
- Transport rule matches
- Mail traffic policy match summary
- Email activity by group
- User to user email activity
- Connectors
- Mail activity by connector
- Quarantined messages
Mail traffic summary
This report provides a comprehensive overview of all mail entering and leaving your organization, including daily details on the amount of good mail, spam, and malware. This report also comes with a trend map, which displays the aforementioned information.

Email activity by user
This report lists all the mail addresses in your Microsoft 365 account and provides information such as the number of mails received, sent, and their corresponding sizes.

Top sender
This report displays the mail addresses of all users and the number of mails sent by each user within a specified duration. This report helps you identify the users who send out a lot of mail, which, in many cases, can be a sign of the user's malicious activity. Furthermore, it provides a real-time bar graph of the top senders that can be directly added to the dashboard so administrators can easily keep track of everything.

Top receiver
This report lists all the mail addresses in your organization and how much mail is received for each in a specified duration. This report helps you identify the users who receive vast amounts of mail, which can point to external malicious activity targeting the user. It also provides a real-time bar graph of the top mail receivers that can be directly added to the dashboard.

Top spam recipients
This report returns the mail addresses of all users and the amount of spam each has received in a specified duration. It also provides a real-time bar graph of the top spam receivers that can be added to the dashboard directly from the reports screen.

Top malware recipients
This report returns the mail addresses of all users and the amount of malware they have received in a specified duration. It also provides a real-time bar graph of the top malware receivers that can be directly added to the dashboard.

Detailed Mail traffic
This report provides a comprehensive outline of all mail entering and leaving your organization. It filters mail as it is scanned based on event type and displays the total number for each type. It also provides information on the direction of the mail flow (inbound or outbound) and the domain name.
